Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff6c730e-cc30-43c0-a320-08514ba518f0.roa
File: ff6c730e-cc30-43c0-a320-08514ba518f0.roa (raw, json)
Hash identifier: 2EaUFYmITdZ80QUET7ED9TGmoROPWPmpE5ME66Pos24=
Subject key identifier: 75:FF:03:28:BF:79:84:8C:38:79:11:A2:2D:F2:8E:AC:AC:19:8D:B6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 58A494F858486F256BEB9B079BDBD280CEF69D7A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff6c730e-cc30-43c0-a320-08514ba518f0.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 87.238.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a4:94:f8:58:48:6f:25:6b:eb:9b:07:9b:db:d2:80:ce:f6:9d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=17b01561dbfb14c58e2d9387cf5e0a3ac3bb458547de8ed8a897e845dfa614c2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c4:1d:ab:33:28:8c:69:83:a9:f6:68:d5:57:
bb:a2:9c:1f:f9:34:b2:d4:ff:16:6e:99:fa:85:18:
2d:90:98:92:bb:83:2c:f5:98:b6:c0:5e:0f:3c:6e:
53:1b:3d:b4:df:0f:45:1e:7b:e7:a1:9d:a4:8e:83:
b0:2d:af:bd:2e:f6:00:ba:91:4f:99:45:d1:e8:a3:
55:11:b3:71:22:da:ef:d2:b2:7a:20:b3:df:7b:ca:
f2:4c:a1:b5:a3:36:82:a3:b0:ce:18:01:4f:7a:8e:
11:14:2d:76:1c:1e:54:f4:be:e2:a3:3a:d9:72:eb:
f4:32:26:e9:4b:bc:a4:b4:a2:62:d7:cc:4b:29:27:
61:ff:0c:f6:41:3e:d2:55:03:d8:04:29:86:88:91:
6a:d1:7c:24:99:59:f2:7f:1c:c9:c4:5d:21:df:dd:
d3:c7:c3:b8:14:77:38:91:37:50:60:94:db:18:8a:
ef:7f:10:77:23:f4:06:f7:8f:cc:f1:88:5e:ec:b2:
4b:ef:1b:8e:08:c5:2b:cd:18:0f:f5:bb:0f:47:8f:
1c:27:66:65:f2:59:58:e5:ef:37:42:76:be:3b:4b:
8b:82:e1:b8:95:37:f7:55:02:70:d4:3a:3a:fb:ed:
08:5c:c6:d3:cc:74:42:54:b2:99:1d:1f:b2:ce:5a:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FF:03:28:BF:79:84:8C:38:79:11:A2:2D:F2:8E:AC:AC:19:8D:B6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff6c730e-cc30-43c0-a320-08514ba518f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.80.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:a4:35:27:06:05:e9:5d:76:b2:ae:6f:5c:cb:04:3a:69:e8:
08:79:52:d0:0e:b9:94:70:0f:91:03:8d:d1:f9:7a:c2:6e:45:
ac:36:1b:55:f4:21:e4:55:fc:f9:4e:bb:64:6f:8f:cc:7b:c3:
fc:0a:5a:30:6d:3a:48:86:bd:f0:89:17:7b:dd:70:de:e2:0b:
ed:bc:63:a8:21:a0:6b:d1:49:23:9f:45:26:4f:7f:6f:58:40:
7a:34:9d:41:12:ee:5f:0d:9a:1b:67:d4:ad:89:1e:ad:33:9e:
6d:91:4b:11:d2:5a:a0:76:d4:d2:55:5c:65:48:fc:e9:a0:14:
8b:eb:d5:06:77:9a:f7:d2:48:ff:de:e4:76:24:d7:95:64:9c:
43:62:0b:fe:1d:8f:40:2f:6c:a3:c2:8c:30:86:e2:24:e7:50:
e9:ad:c0:df:69:33:ee:46:bd:ab:ee:30:16:21:a4:a6:5d:09:
8f:7b:a5:96:6d:1e:a8:3b:c0:67:3d:04:d3:6b:a3:1e:0d:85:
30:aa:fc:a8:a4:8e:3a:f3:6d:8e:65:41:de:32:3c:c1:e2:47:
68:a5:c1:ef:9c:2b:d8:ae:ed:44:6b:99:79:9b:fc:14:16:9a:
a4:14:4c:10:79:93:0f:b7:72:34:52:e9:f5:7a:bb:1e:3b:cd:
3c:47:fe:44
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUWKSU+FhIbyVr65sHm9vSgM72nXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDEyMzAwMDAwMDBaFw0yNTAyMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQDE3YjAxNTYxZGJmYjE0YzU4ZTJkOTM4N2NmNWUwYTNhYzNiYjQ1ODU0N2Rl
OGVkOGE4OTdlODQ1ZGZhNjE0YzIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI3EHaszKIxpg6n2aNVXu6KcH/k0stT/Fm6Z+oUYLZCYkruDLPWYtsBeDzxu
Uxs9tN8PRR5756GdpI6DsC2vvS72ALqRT5lF0eijVRGzcSLa79KyeiCz33vK8kyh
taM2gqOwzhgBT3qOERQtdhweVPS+4qM62XLr9DIm6Uu8pLSiYtfMSyknYf8M9kE+
0lUD2AQphoiRatF8JJlZ8n8cycRdId/d08fDuBR3OJE3UGCU2xiK738QdyP0BveP
zPGIXuyyS+8bjgjFK80YD/W7D0ePHCdmZfJZWOXvN0J2vjtLi4LhuJU391UCcNQ6
OvvtCFzG08x0QlSymR0fss5aA8MCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR1/wMo
v3mEjDh5EaIt8o6srBmNtjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmY2YzczMGUtY2MzMC00M2MwLWEzMjAtMDg1MTRiYTUxOGYwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1fuUDAN
BgkqhkiG9w0BAQsFAAOCAQEADaQ1JwYF6V12sq5vXMsEOmnoCHlS0A65lHAPkQON
0fl6wm5FrDYbVfQh5FX8+U67ZG+PzHvD/ApaMG06SIa98IkXe91w3uIL7bxjqCGg
a9FJI59FJk9/b1hAejSdQRLuXw2aG2fUrYkerTOebZFLEdJaoHbU0lVcZUj86aAU
i+vVBnea99JI/97kdiTXlWScQ2IL/h2PQC9so8KMMIbiJOdQ6a3A32kz7ka9q+4w
FiGkpl0Jj3ullm0eqDvAZz0E02ujHg2FMKr8qKSOOvNtjmVB3jI8weJHaKXB75wr
2K7tRGuZeZv8FBaapBRMEHmTD7dyNFLp9Xq7HjvNPEf+RA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:26:19 2025 by rpki-client