Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f33392d3438203d3e203532303235.roa
File: 326130353a646663313a3430303a3a2f33392d3438203d3e203532303235.roa (raw, json)
Hash identifier: oTk7pMopFJ+gY3pHweyd4jeO9+Bs1xX/Ry0NZSiyWuw=
Subject key identifier: 8F:48:F6:83:DE:1C:01:50:95:2A:E0:9B:C2:3D:19:A7:FE:52:3A:E2
Certificate issuer: /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial: 2EDB242774D7B638413B24538850D9C3CCF89D86
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f33392d3438203d3e203532303235.roa
Signing time: Mon 08 May 2023 23:26:25 +0000
ROA not before: Mon 08 May 2023 23:21:25 +0000
ROA not after: Mon 06 May 2024 23:26:25 +0000
asID: 52025
IP address blocks: 2a05:dfc1:400::/39 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:db:24:27:74:d7:b6:38:41:3b:24:53:88:50:d9:c3:cc:f8:9d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Validity
Not Before: May 8 23:21:25 2023 GMT
Not After : May 6 23:26:25 2024 GMT
Subject: CN=8F48F683DE1C0150952AE09BC23D19A7FE523AE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:e2:53:c7:80:97:7a:18:77:cf:66:4e:5c:
4c:c0:fb:68:0e:62:70:f9:ea:f8:60:03:79:90:8b:
50:ec:29:0e:ea:4a:f0:82:32:24:d4:8e:b8:fc:75:
b6:4a:4f:49:f8:bb:c5:b1:be:d6:88:0a:6c:38:9a:
2a:26:ac:c3:36:97:33:8e:21:bd:b2:d9:22:f3:43:
0a:ef:77:9a:83:5c:d9:c0:89:f1:c6:1f:01:c6:18:
49:71:bb:0b:9d:66:b6:b1:85:6a:1d:9e:5a:2f:b6:
2e:10:66:06:ca:37:77:58:e2:69:69:a3:7e:1f:7b:
6f:72:57:34:90:52:9f:1b:07:5e:e8:4f:f0:de:57:
27:e6:d7:7b:3b:fd:54:8b:42:4b:f9:02:11:ab:85:
0e:c0:6e:a2:e5:83:1a:e6:4f:f1:8a:7f:c3:2e:cf:
45:20:08:cf:44:96:db:df:67:4f:ec:06:ca:95:c0:
58:ef:4c:5d:f4:1c:41:91:f4:22:3d:0d:a6:76:79:
56:c2:a7:49:94:a2:d2:fe:e3:a0:63:78:89:71:f2:
dc:0e:a8:e6:9a:7d:65:67:78:0d:f8:21:6c:f8:29:
11:c7:b6:b8:c3:fa:78:f0:39:26:14:13:fb:bc:67:
6c:a2:1f:07:7a:e3:96:77:12:79:ab:4b:7d:c0:25:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:48:F6:83:DE:1C:01:50:95:2A:E0:9B:C2:3D:19:A7:FE:52:3A:E2
X509v3 Authority Key Identifier:
keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f33392d3438203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:400::/39
Signature Algorithm: sha256WithRSAEncryption
6e:7d:4a:b2:c0:0d:3d:3d:f1:3e:06:ef:24:99:4d:ff:65:85:
64:32:92:39:63:15:61:c8:11:2b:11:20:d0:4d:47:ab:f6:df:
ec:d5:b0:db:43:3f:49:55:0b:f1:73:19:18:41:10:00:41:19:
68:db:32:a5:61:cd:3f:d6:6a:b0:c2:c7:ef:9e:b2:ea:c6:41:
49:f3:e5:39:b3:7c:e1:0a:94:f8:8d:81:6a:aa:76:30:51:fc:
d9:58:54:31:2a:1a:49:45:95:ed:f3:2f:20:62:52:18:79:05:
17:56:7c:99:36:be:4b:f7:32:c4:ed:10:69:f1:a9:ea:04:15:
ba:9b:fa:25:9d:6d:09:51:08:9a:63:cc:76:9f:cc:2b:7c:b5:
54:c4:f0:34:65:e0:40:0f:0a:d1:ad:ff:89:be:5e:ba:82:1d:
38:4c:aa:ad:ed:4f:75:19:ea:18:ae:4c:e2:fb:2b:6f:ba:06:
7e:01:02:48:2c:ea:18:04:db:93:e6:a1:bf:af:65:1d:67:2e:
99:4c:57:d0:82:4b:cd:6b:3c:d5:84:ae:6b:09:95:42:5b:5e:
ab:48:fa:60:4f:17:16:70:15:c9:a7:e0:70:b2:9a:8f:23:b8:
70:7e:85:fe:a1:6e:30:4d:9f:87:a9:9a:26:53:c1:9f:64:f5:
32:16:1a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:29:58 2025 by rpki-client