Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9759e38-7281-4188-858a-90f65ea06745.roa
File: c9759e38-7281-4188-858a-90f65ea06745.roa (raw, json)
Hash identifier: AQcH06kQOX3rZDzEeuVGqtpDm43B4zSEvcRkqTTy+Vk=
Subject key identifier: 04:74:4B:DA:47:02:5E:48:B8:A8:5F:12:C9:D1:D7:1F:71:B5:98:55
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 020E386A5A8EF301CAFA4F554F0C69E03C9C89E1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9759e38-7281-4188-858a-90f65ea06745.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0e:38:6a:5a:8e:f3:01:ca:fa:4f:55:4f:0c:69:e0:3c:9c:89:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:dd:b7:19:61:9e:a2:d6:96:87:b1:72:e7:
5a:69:20:6e:0f:8e:c5:4d:14:e9:e7:10:f8:27:30:
f6:d9:64:35:b2:86:df:e2:4f:90:46:79:ac:96:a0:
ce:35:f5:c9:52:e2:7b:fc:b6:dc:1f:76:d6:62:45:
21:1b:10:f8:af:c3:cd:5a:ec:91:59:fb:e0:d3:0c:
91:3d:96:bc:d3:88:08:cb:96:03:dc:02:7d:4e:cc:
c3:54:af:4e:bc:a3:bc:b8:ec:a9:28:ed:72:d2:d2:
f9:86:6b:f6:62:97:7a:d0:20:f6:0f:e1:a9:1f:a8:
8e:ac:f5:95:60:6f:4c:f4:ad:02:f6:35:da:ba:97:
1c:db:2e:14:84:7c:b3:04:bd:ae:d8:35:13:1d:a6:
3e:68:c9:0c:aa:1d:b7:ed:82:c2:71:5d:01:b8:f6:
7e:89:ba:60:b7:69:86:04:ee:a6:4c:9b:a1:af:5c:
d0:c3:e1:5b:5a:3c:50:f7:64:e3:0b:89:e8:98:66:
5f:78:bf:c4:dd:66:6b:b4:8d:b6:72:0c:54:c9:92:
da:2f:52:89:36:53:a7:82:1b:84:16:a3:18:4e:77:
6c:41:46:42:e9:42:e0:a7:30:89:7d:e1:0b:12:a2:
6e:33:c8:93:9e:61:ba:5a:10:dc:a2:4a:63:82:5d:
53:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:74:4B:DA:47:02:5E:48:B8:A8:5F:12:C9:D1:D7:1F:71:B5:98:55
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9759e38-7281-4188-858a-90f65ea06745.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.224.0/19
Signature Algorithm: sha256WithRSAEncryption
87:a0:bd:ce:65:ea:30:c1:c5:78:b2:a3:12:dd:8f:3d:67:99:
19:e9:2b:73:58:16:7d:75:05:24:08:3f:f3:89:17:da:59:88:
e2:92:b6:d6:09:36:52:cb:22:f2:98:07:8f:87:5b:95:72:b1:
36:79:84:93:64:7e:22:8a:98:37:e5:77:41:a3:22:df:41:4a:
8a:79:9f:96:a0:85:42:4e:00:7e:87:6a:75:47:25:c2:37:73:
9d:17:3a:c7:0b:4d:f5:0e:1c:b9:ef:12:51:fa:9a:ba:16:9e:
b3:1a:b9:12:ed:b8:14:56:95:55:87:60:35:73:b6:58:3a:d5:
1a:2c:50:09:c4:ce:2f:d7:c5:18:66:45:aa:e2:1a:54:6f:e6:
56:f0:4e:95:53:05:20:fc:b4:54:c7:62:42:52:f3:c8:7c:b3:
32:e7:0d:73:89:61:c9:72:9f:87:5c:b3:9b:79:94:63:b6:4f:
af:2d:9c:e0:4f:71:c8:ee:d1:28:ba:79:74:ab:67:9e:1f:b8:
7a:95:9c:77:e3:d5:4f:77:b0:0b:ae:40:ac:ea:50:df:f0:f4:
c6:2b:05:e9:eb:be:2e:e5:cf:1c:13:49:4b:35:1e:80:f8:37:
b8:f4:61:11:c7:ec:e6:bc:2b:8b:9c:25:1b:62:2b:7d:fc:93:
b6:f2:3d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:15 2025 by rpki-client