Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393137343a3a2f34382d3438203d3e203537343833.roa
File: 326130353a646663313a393137343a3a2f34382d3438203d3e203537343833.roa (raw, json)
Hash identifier: v9dmjrzFnV5b2A6xdAui+Q4gF3ELLt9FJDdHXMck0Pw=
Subject key identifier: 29:05:A8:28:01:65:A9:49:9D:51:25:7B:98:69:57:CD:77:E0:1F:AA
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 1E026DA9EED7CBDEA85C643FF151354BCD28C5BE
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393137343a3a2f34382d3438203d3e203537343833.roa
Signing time: Tue 31 Dec 2024 19:19:59 +0000
ROA not before: Tue 31 Dec 2024 19:14:59 +0000
ROA not after: Tue 30 Dec 2025 19:19:59 +0000
asID: 57483
IP address blocks: 2a05:dfc1:9174::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:02:6d:a9:ee:d7:cb:de:a8:5c:64:3f:f1:51:35:4b:cd:28:c5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Dec 31 19:14:59 2024 GMT
Not After : Dec 30 19:19:59 2025 GMT
Subject: CN=2905A8280165A9499D51257B986957CD77E01FAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:9d:59:62:fc:fe:71:68:07:df:5a:aa:e6:
30:48:35:a1:87:e1:fb:97:96:7e:3c:e9:04:99:e3:
09:4d:a9:b7:b6:d0:28:ad:b2:e2:22:b3:e7:55:00:
53:65:da:ef:9a:81:2d:59:bd:8a:8f:5d:b4:7b:57:
78:90:d8:22:1f:8b:ad:04:f9:a6:1d:72:d7:41:80:
89:88:92:9c:92:14:1d:89:91:1d:9d:fa:30:0a:1d:
b4:8a:cb:e1:50:a6:92:02:d0:4b:0d:ca:73:2c:45:
84:dd:46:66:7b:72:75:e6:76:f2:8f:50:be:e0:54:
aa:a9:63:f7:94:c5:45:44:5a:ca:89:40:01:a6:e5:
ba:e9:8e:1a:84:ba:22:7c:b4:aa:f5:43:27:3c:2b:
46:fc:95:e7:90:69:a1:80:55:dd:d9:35:d0:79:12:
cf:33:ac:d3:e0:c3:13:66:bd:8f:d5:9a:d4:d2:7c:
a7:47:c0:2f:f0:e0:5d:43:66:c2:86:f0:db:44:d3:
68:60:5e:b5:18:af:13:e2:06:86:1c:3b:17:c3:6d:
ae:b5:d1:7c:d6:d9:e3:ea:99:01:e8:04:98:d9:36:
5f:59:9d:68:e7:cd:a8:c6:d4:cd:c9:b9:3b:25:35:
94:da:4f:11:47:9f:1c:74:79:70:4f:b4:89:d7:c2:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:05:A8:28:01:65:A9:49:9D:51:25:7B:98:69:57:CD:77:E0:1F:AA
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393137343a3a2f34382d3438203d3e203537343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9174::/48
Signature Algorithm: sha256WithRSAEncryption
4f:ef:8a:47:3e:18:27:e0:06:7e:8d:e8:7a:46:57:c8:37:ad:
99:ea:aa:09:92:a4:66:13:bb:82:40:72:71:db:e9:a4:c9:ff:
a8:62:08:8a:c5:d6:07:67:0c:4f:c2:4b:df:2c:7a:00:80:5f:
4e:c1:61:0c:1e:42:1d:3b:48:ed:08:4c:ba:1c:86:e8:b5:90:
f8:d8:0f:27:55:4f:56:81:b6:52:ee:8d:3f:36:8e:97:95:ce:
a7:d9:8a:cf:ba:98:81:ca:53:6e:77:0c:c3:b1:26:53:39:9e:
73:8d:c9:09:45:1d:9b:1f:0b:5c:dd:af:4c:17:30:7e:fa:4e:
a0:f4:94:0d:1e:81:43:e2:e2:8a:59:35:d1:b3:32:5b:d4:0b:
fc:d5:dc:14:78:45:0f:e8:08:24:35:05:52:4e:91:e1:21:38:
62:a4:08:ef:ff:0c:be:26:80:ca:d0:ad:e1:ca:c5:71:22:73:
c1:0c:6c:05:d5:41:23:89:30:05:47:fa:4d:11:2c:61:9a:6c:
21:af:a4:12:70:37:aa:29:a5:f7:51:7c:f7:e8:c8:0e:39:20:
6f:b7:6e:17:b6:f1:74:08:c6:d0:9c:62:3d:d2:0e:14:a8:d9:
7f:30:46:f3:ff:b6:7e:d0:77:7d:e4:17:9e:75:be:43:6b:a3:
f1:e8:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:04:07 2025 by rpki-client