Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b1f67da3-0aee-4557-8139-15d2e1ec7255.roa
File: b1f67da3-0aee-4557-8139-15d2e1ec7255.roa (raw, json)
Hash identifier: KbZMGB0oPIKeCXTUaasQkvB66zmqiIH24bMK1e2Og4E=
Subject key identifier: 4C:92:B1:3D:9B:39:71:C2:7F:96:7E:EF:A6:E7:24:35:F5:52:6F:91
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2878EF13E741F5135420688E0BF194BD1616CE28
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b1f67da3-0aee-4557-8139-15d2e1ec7255.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:78:ef:13:e7:41:f5:13:54:20:68:8e:0b:f1:94:bd:16:16:ce:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=d5e43f85f99411f54e4fe3e007f2d8aae8e059c35d5def6a68f2784963b6e247, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:3b:9c:aa:a9:2c:60:5b:a6:b8:48:94:e9:
aa:b6:db:e8:5b:ed:4c:9e:10:71:30:9a:0c:54:e5:
55:aa:b4:48:5b:e9:bf:d5:68:e3:13:c3:22:fb:bf:
5d:68:37:51:8e:61:ba:33:c3:db:d6:41:69:0f:78:
0e:55:0b:05:a3:ce:8d:68:e1:5d:5a:b3:6a:ab:20:
53:eb:8c:03:1d:e9:9f:97:50:d2:ea:1f:be:a2:76:
b0:ae:9d:ee:2f:cd:36:e3:dc:a9:a2:29:ba:69:21:
96:d9:e4:18:88:c9:27:5e:86:a6:6e:1c:bf:4b:66:
78:51:e9:f9:d0:df:5e:74:6a:36:00:b3:9b:18:14:
58:57:06:f9:cc:3e:15:13:03:cc:44:eb:53:a5:f6:
f0:a8:47:47:48:8c:1e:ca:c3:76:b4:67:f8:d9:2a:
a3:02:b2:54:48:fb:11:44:31:95:cd:75:cb:09:a7:
b1:58:74:ea:87:d8:0f:a2:34:30:64:eb:d5:72:38:
ed:d2:52:2b:8c:5e:f7:b3:d9:20:54:22:93:97:68:
6f:88:a4:6c:e3:4a:0b:2b:6c:74:57:8c:9f:69:5e:
2d:eb:36:aa:f2:8d:ba:4b:85:9f:52:b9:65:5d:88:
22:d9:21:34:b6:4f:5a:92:f8:b9:6c:cf:a7:1e:1a:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:92:B1:3D:9B:39:71:C2:7F:96:7E:EF:A6:E7:24:35:F5:52:6F:91
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b1f67da3-0aee-4557-8139-15d2e1ec7255.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.224.0/19
Signature Algorithm: sha256WithRSAEncryption
af:0e:99:ac:4a:f2:50:59:87:38:4f:e6:8d:84:68:4d:8a:7f:
83:a3:1b:6a:fc:ff:7d:d0:0a:1d:8b:f9:53:e4:f1:6c:90:a7:
3d:06:83:d3:f1:f7:db:69:ab:f4:ba:39:92:b8:59:9f:a6:80:
68:30:a2:ec:46:df:69:fb:29:55:ad:f2:26:39:34:52:d0:94:
1f:84:40:66:ac:ce:0b:e3:c0:76:6b:95:cc:c7:86:54:5c:06:
9e:d8:ae:81:5f:58:3d:1a:8a:6f:24:e6:50:e5:f0:c2:d3:37:
e4:6e:d1:9b:6c:34:9c:4b:10:6e:dc:ab:c3:82:5e:fe:7d:5e:
67:2b:0f:dd:d9:6a:7b:60:40:65:ed:71:b8:3e:7d:04:23:9f:
f5:05:e6:cb:64:e6:d6:da:8d:15:59:25:59:ac:40:da:3e:67:
19:a8:30:42:22:2f:3a:26:ee:5a:68:f4:2b:cd:09:73:d0:b1:
39:b2:d4:33:7a:8e:28:c4:82:32:a7:55:11:e1:c5:d1:60:fa:
d4:b8:f3:4b:41:cc:3c:fd:5a:dd:5e:f0:d4:3f:96:95:82:cd:
90:82:d0:06:4e:f1:d6:ff:7c:1f:53:ac:f9:74:30:86:a9:86:
15:b6:1c:d7:39:fc:d3:c3:ae:d2:44:a2:ab:7c:23:e5:9e:6e:
83:d6:07:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:23 2025 by rpki-client