Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/326131343a373538303a666666323a3a2f34382d3438203d3e20323037343237.roa
File: 326131343a373538303a666666323a3a2f34382d3438203d3e20323037343237.roa (raw, json)
Hash identifier: be9i66kYT9S8FN11kLwpL53RT8mHbO1o0DQS826QI9o=
Subject key identifier: 0E:77:69:5D:A7:94:85:33:EF:77:E2:0F:4A:75:2D:B5:6E:39:3E:F3
Certificate issuer: /CN=5BE6F0781C3A7A74F993C53DC07FC424ED911592
Certificate serial: 3B097A8B67B4DE6235930CCE4CEA654FE3675A38
Authority key identifier: 5B:E6:F0:78:1C:3A:7A:74:F9:93:C5:3D:C0:7F:C4:24:ED:91:15:92
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/326131343a373538303a666666323a3a2f34382d3438203d3e20323037343237.roa
Signing time: Mon 23 Jun 2025 12:46:14 +0000
ROA not before: Mon 23 Jun 2025 12:41:14 +0000
ROA not after: Mon 22 Jun 2026 12:46:14 +0000
asID: 207427
IP address blocks: 2a14:7580:fff2::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:09:7a:8b:67:b4:de:62:35:93:0c:ce:4c:ea:65:4f:e3:67:5a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BE6F0781C3A7A74F993C53DC07FC424ED911592
Validity
Not Before: Jun 23 12:41:14 2025 GMT
Not After : Jun 22 12:46:14 2026 GMT
Subject: CN=0E77695DA7948533EF77E20F4A752DB56E393EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:5e:d2:0a:40:fc:18:c8:cb:09:8a:98:67:
d7:36:bf:d9:b1:e1:4c:ad:19:5e:9f:53:83:05:e5:
06:2c:a4:46:ad:e0:a8:eb:0b:6b:25:5e:28:ad:ae:
b3:8e:6b:b9:cb:08:46:25:a9:6b:c9:52:f7:a5:cd:
6e:88:18:3c:17:ba:56:18:70:9c:47:f3:41:03:72:
f7:79:f9:b4:4c:b7:2e:ee:de:09:a3:7a:e1:ba:96:
c9:8a:d3:94:d9:cd:11:e3:cf:c9:5c:be:83:9b:01:
68:e0:54:c4:f0:1f:af:33:2e:a6:4c:23:96:b8:6a:
51:5e:7c:f5:d3:26:3b:fa:52:a2:47:ca:2a:7d:2f:
fe:c9:63:3f:3b:9b:d4:cf:a5:98:08:30:5b:37:6d:
04:d8:a7:c4:d8:a2:96:f5:c8:66:dd:22:1e:4b:7f:
f5:23:d7:95:2c:a1:65:ac:89:bc:1d:89:6c:da:e7:
ed:6e:3e:8d:c2:69:e8:19:c9:16:b7:b9:be:d1:4a:
e9:74:19:9d:50:29:80:32:bd:dc:4a:3e:22:86:90:
e0:b4:d2:b0:fa:7a:39:7b:e5:e0:54:ff:8b:1b:b6:
13:59:91:cb:d1:70:63:e3:5d:2c:ef:5f:9a:91:82:
b1:b0:f1:3d:22:99:d1:3e:f6:71:4d:ec:42:25:0b:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:77:69:5D:A7:94:85:33:EF:77:E2:0F:4A:75:2D:B5:6E:39:3E:F3
X509v3 Authority Key Identifier:
keyid:5B:E6:F0:78:1C:3A:7A:74:F9:93:C5:3D:C0:7F:C4:24:ED:91:15:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/326131343a373538303a666666323a3a2f34382d3438203d3e20323037343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fff2::/48
Signature Algorithm: sha256WithRSAEncryption
29:df:a5:bc:d4:dd:e9:bc:b5:e8:9e:95:c3:50:b8:9a:54:20:
e9:7e:3c:a0:5b:f6:5d:61:8d:c9:f2:a5:6d:50:c5:ed:a2:45:
3c:3a:f1:44:0c:53:be:96:c9:cd:65:c5:33:b5:c9:8c:36:07:
b4:49:a3:58:fd:69:07:bf:41:3a:97:8b:5b:de:3b:e9:4b:04:
1b:01:d5:0e:8c:15:05:a8:f1:22:8f:72:db:91:8c:cd:f9:d0:
cb:4b:44:7a:36:6c:c1:ff:9e:1a:c4:87:f6:e4:f6:56:fb:d6:
8f:65:23:c8:17:47:be:3e:d4:ee:b8:3f:26:b6:aa:38:26:76:
1d:3d:13:27:2c:28:c5:b8:b1:c7:0c:e2:59:2b:e2:57:37:64:
6a:44:33:46:3e:60:95:cf:14:80:60:7d:15:fd:7a:0d:a8:f0:
40:6d:4a:69:17:44:a9:0c:23:18:e1:f8:07:d9:9c:25:4a:cc:
06:85:9c:92:bb:65:11:a6:89:38:56:5f:6d:02:fc:a5:c4:4b:
5f:e5:15:1d:ce:58:25:a4:59:3e:4f:44:4c:e1:45:79:5a:de:
bc:13:96:9e:43:90:aa:9e:33:c2:2a:83:42:50:ea:21:12:f3:
e6:ab:df:fa:81:a2:73:f1:09:ee:44:1c:55:7a:80:95:23:7a:
b5:5e:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:09:20 2025 by rpki-client