Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa
File: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (raw, json)
Hash identifier: pxkwC1tXh5AA3dY0ImOI+evo8PccYn8siWbTpsnS3+U=
Subject key identifier: 0F:AD:AC:E4:F6:DA:4A:FE:96:C5:30:01:E6:31:E6:DA:B5:0E:DC:C3
Certificate issuer: /CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801
Certificate serial: 3311B6C1CF2EEA65196B4AF059CDC309D65ED91A
Authority key identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa
Signing time: Fri 04 Jul 2025 19:50:13 +0000
ROA not before: Fri 04 Jul 2025 19:45:13 +0000
ROA not after: Fri 03 Jul 2026 19:50:13 +0000
asID: 47496
IP address blocks: 2a05:dfc1:c420::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:11:b6:c1:cf:2e:ea:65:19:6b:4a:f0:59:cd:c3:09:d6:5e:d9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801
Validity
Not Before: Jul 4 19:45:13 2025 GMT
Not After : Jul 3 19:50:13 2026 GMT
Subject: CN=0FADACE4F6DA4AFE96C53001E631E6DAB50EDCC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:f0:af:f9:c8:4c:65:5d:56:42:c5:24:fd:
20:30:d7:89:88:99:c6:18:f6:af:50:8c:16:b6:ad:
55:aa:b0:71:ac:f5:42:e0:7e:7e:23:14:5e:f8:0b:
92:57:df:64:95:3d:82:a2:ad:c0:d3:8f:1d:45:f6:
73:2c:d4:50:f9:c9:9d:a7:a5:6a:0f:c4:09:d0:4f:
a1:b1:c4:c9:ec:7f:96:5f:f6:71:b6:48:13:d9:44:
60:ac:a1:01:72:30:d9:c0:b8:78:40:18:55:66:b5:
22:0c:db:bc:de:cf:9d:c2:01:4e:8c:24:63:0c:df:
74:48:57:65:d7:66:51:d5:f1:62:c2:9b:5e:7f:1e:
f9:40:9e:45:fc:74:85:30:b6:14:91:16:ec:60:c2:
d2:80:79:7d:b1:24:0b:34:8b:22:17:bc:13:c0:e5:
2e:f6:ed:ff:c3:29:74:44:d7:72:75:16:09:4d:88:
2f:68:fa:df:56:54:b5:64:58:e5:f9:3f:2e:f5:39:
07:18:90:dc:96:1a:5d:3e:94:0b:91:15:37:31:1a:
74:7c:b4:cd:ef:81:cd:01:9b:11:99:bd:e0:14:c2:
3a:d7:d9:44:57:a7:31:d9:a9:21:6a:02:5f:87:45:
74:ee:9f:55:75:3e:56:74:0a:14:b5:9d:0a:ad:cc:
70:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AD:AC:E4:F6:DA:4A:FE:96:C5:30:01:E6:31:E6:DA:B5:0E:DC:C3
X509v3 Authority Key Identifier:
keyid:D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:c420::/48
Signature Algorithm: sha256WithRSAEncryption
8b:8a:34:5c:a9:0e:5d:52:89:40:ed:ee:51:d5:50:26:ae:e1:
db:85:52:1a:96:45:73:ab:f1:7e:32:dd:ff:c1:ee:74:3a:c3:
51:7e:99:5b:4e:4e:8f:f6:94:be:f7:f9:a2:a3:49:ef:d9:0d:
bc:41:17:11:36:6a:a5:66:f4:6d:fe:96:bf:86:ac:70:ac:89:
13:00:a1:97:bc:b0:13:15:b4:66:61:9a:7b:ba:64:a2:61:9a:
f1:2d:18:2b:b5:78:41:4f:58:d8:61:db:67:e9:57:ef:6a:f9:
98:0f:76:ec:37:a9:51:7e:99:61:a3:cc:e7:e4:89:a6:f6:33:
87:11:ee:89:9a:34:0a:10:60:b0:9c:38:ea:ea:80:c8:22:64:
14:f6:b8:f3:36:15:92:d3:ed:cd:a9:cf:11:e3:5f:ef:e5:e5:
5a:b3:11:c9:2c:9f:c4:84:2e:b6:d7:e7:d8:a9:22:0d:99:d3:
c6:e2:4e:4d:f2:6c:84:a0:0a:22:d5:75:de:9a:f1:8d:87:85:
5b:9f:a7:67:fa:31:ae:cb:8f:d3:37:80:40:5e:5f:30:f3:55:
10:b8:e4:a2:57:27:9b:d7:5f:8a:af:a0:22:d7:7e:f6:22:73:
51:9a:9f:98:ec:10:98:2c:8b:e7:db:19:bf:07:33:1f:7f:2a:
19:bb:bc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:27:26 2025 by rpki-client