Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/518441c4-1683-4c03-b507-4d306d16662c.roa
File: 518441c4-1683-4c03-b507-4d306d16662c.roa (raw, json)
Hash identifier: hn26mR7fXRupvfVr0driEHsOm9gOeMVcQk+2gwK35Bw=
Subject key identifier: F2:14:9F:A5:55:2C:46:74:D3:B2:93:A0:ED:D5:FB:84:85:D5:A6:19
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5EDE22C150EE4D6D23581D2F33C3F72C8C4EAB13
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/518441c4-1683-4c03-b507-4d306d16662c.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 46.51.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:de:22:c1:50:ee:4d:6d:23:58:1d:2f:33:c3:f7:2c:8c:4e:ab:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=c793fb1b03f1fb39b68f078ee84c38ac1f8b5916d7b4c78a6f84de821b6d64c4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:0b:18:4a:a1:08:bb:07:9e:da:13:75:3c:
93:da:aa:e1:cb:bf:fc:79:ea:0e:9f:d3:6b:c2:fd:
6c:14:19:c7:07:99:3b:8b:f7:0c:8a:a6:0d:1c:d8:
f3:f3:e8:67:fe:1a:f7:3e:f9:85:c1:21:c8:99:ce:
57:b8:3c:96:85:fd:1d:10:ff:b6:55:cd:c1:c1:05:
59:0d:0c:a3:13:9c:b4:f4:48:c8:7e:5b:0e:12:42:
89:e5:55:f9:73:3b:3d:13:f8:3f:5f:c0:49:df:ad:
2e:18:30:4e:06:82:1c:cb:c7:42:74:25:97:c1:c5:
1c:cf:57:4a:10:4e:0d:55:99:ca:1a:ab:55:3e:68:
c7:69:fd:fd:61:38:59:2d:73:16:5c:6e:53:bc:f0:
b5:a8:fa:b8:c0:09:2f:aa:74:0e:a7:fe:ea:19:73:
13:53:47:d9:85:f3:29:ef:61:07:ef:ce:76:90:98:
a7:be:7e:1a:86:53:33:5a:74:b4:1e:3f:3f:5c:8c:
43:15:25:97:ca:a6:45:32:99:32:ac:cc:83:fc:18:
a7:4d:61:97:b0:db:1f:dc:ad:2c:a5:30:e9:c1:aa:
f0:2d:60:a8:81:25:fa:ce:22:23:08:23:9e:71:30:
29:c1:63:74:ba:ce:b0:d8:c6:d6:4a:98:8a:32:65:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:14:9F:A5:55:2C:46:74:D3:B2:93:A0:ED:D5:FB:84:85:D5:A6:19
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/518441c4-1683-4c03-b507-4d306d16662c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
Signature Algorithm: sha256WithRSAEncryption
46:26:6b:38:b2:02:4e:e4:1d:c7:da:48:9f:22:f6:2c:a3:e5:
fe:0c:43:68:a9:88:2c:5b:52:5c:51:de:a0:4b:ae:b0:2b:ac:
52:0d:f1:94:eb:f6:5d:28:98:b9:62:93:0c:52:df:0c:a1:10:
2e:3b:17:76:9e:d3:96:c2:f7:e8:62:52:1c:cf:e5:d4:11:49:
de:7e:74:55:51:ce:4a:ab:d0:7d:38:09:64:a5:8c:c1:26:6f:
90:8d:c3:1d:f5:6f:2e:c1:fc:b5:f5:37:f9:9c:a6:25:78:0a:
57:e1:4d:eb:df:d2:96:67:99:e6:a6:73:79:b1:d7:bb:9a:66:
77:92:9f:d4:b9:fa:e8:22:61:d5:6e:4c:4a:96:f3:6e:21:a4:
d6:42:3a:99:e3:18:05:c7:fc:3a:3f:74:14:5c:1e:f3:2b:fc:
aa:88:0b:14:4e:d4:4b:ab:e2:b4:21:2f:34:19:80:91:db:86:
9a:ea:c5:cf:be:fe:03:0f:f7:63:3b:7a:14:e6:ae:bc:4a:4b:
4f:e3:8d:c3:4b:a0:a5:cc:ef:ed:40:ce:43:d4:d8:0e:a5:43:
1c:db:61:d2:23:14:7b:85:f6:56:14:79:1d:58:40:c7:d9:fe:
e0:89:d7:b4:eb:ec:58:0e:ad:a1:4e:5a:a0:ba:20:5c:13:40:
36:a1:61:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:07 2025 by rpki-client