Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538303a356666663a3a2f34382d3438203d3e20323134333434.roa
File: 326131343a373538303a356666663a3a2f34382d3438203d3e20323134333434.roa (raw, json)
Hash identifier: pH1DpsNoBXAL0l4o2dyKb1VUo6J4k0AUCBSFbohk97k=
Subject key identifier: 7E:21:16:A9:95:74:F3:42:13:12:91:4D:0C:5E:4D:39:78:A5:86:8A
Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945
Certificate serial: 2CE8F7D496132821AF24A8D1D4B9C17B97E9653E
Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538303a356666663a3a2f34382d3438203d3e20323134333434.roa
Signing time: Mon 28 Apr 2025 16:31:01 +0000
ROA not before: Mon 28 Apr 2025 16:26:01 +0000
ROA not after: Mon 27 Apr 2026 16:31:01 +0000
asID: 214344
IP address blocks: 2a14:7580:5fff::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e8:f7:d4:96:13:28:21:af:24:a8:d1:d4:b9:c1:7b:97:e9:65:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945
Validity
Not Before: Apr 28 16:26:01 2025 GMT
Not After : Apr 27 16:31:01 2026 GMT
Subject: CN=7E2116A99574F3421312914D0C5E4D3978A5868A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:18:f3:71:dd:3c:58:17:36:a3:9d:cc:b7:
e6:a9:c1:f6:0d:16:29:14:35:55:78:c9:08:c0:a3:
d1:f3:94:49:cf:4e:4d:46:5a:0e:ab:69:36:d7:60:
e0:69:1b:88:08:bf:12:41:64:7f:8a:45:c6:4a:b3:
8f:ba:c3:3c:44:dd:2b:b5:49:db:6a:81:41:39:f2:
51:11:8f:5d:b9:e1:b9:bb:6e:7d:ca:f4:60:00:4a:
25:43:07:e4:60:18:92:b7:27:ec:6e:71:b9:40:69:
76:84:85:51:74:74:e4:6a:0c:31:04:5b:22:df:62:
51:1b:8b:38:e8:02:66:b9:7c:12:43:9b:c0:b3:b5:
64:88:31:2c:d6:85:39:78:88:32:7c:b5:16:a4:af:
d5:c1:47:bb:22:5f:29:73:ff:d1:24:4a:c4:6d:64:
d0:d4:22:be:a7:72:e2:33:69:0f:6c:d1:fd:8b:85:
73:d6:ba:44:07:f0:6d:02:c1:34:6d:14:43:26:21:
80:58:a9:a9:0f:9f:cc:2b:ce:e3:93:e3:87:84:ad:
de:f5:3b:36:3e:f8:ea:51:be:93:b7:7a:8d:3c:ee:
d6:d3:9a:66:fc:90:1f:a9:ea:b0:8d:ef:c6:5c:89:
69:b8:63:da:cf:2d:f0:8c:32:00:79:27:5b:df:fa:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:21:16:A9:95:74:F3:42:13:12:91:4D:0C:5E:4D:39:78:A5:86:8A
X509v3 Authority Key Identifier:
keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538303a356666663a3a2f34382d3438203d3e20323134333434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:5fff::/48
Signature Algorithm: sha256WithRSAEncryption
21:1f:52:55:ab:16:57:26:ca:8a:90:3d:90:2d:2b:64:74:d6:
84:b6:e9:18:a2:6b:76:a6:67:76:97:45:94:6a:9e:17:af:4b:
57:29:72:91:91:a6:15:23:f9:2d:45:57:e8:ee:16:7b:49:8a:
cb:78:a3:40:5c:86:84:6e:7f:63:4d:95:fa:ac:f2:63:fb:38:
ab:8e:64:5b:17:d7:9e:db:92:ce:6b:27:e1:00:78:30:ce:eb:
66:db:a7:55:35:d1:28:6a:b0:03:20:53:bf:02:fa:5f:4d:da:
4f:38:46:89:d9:26:e6:75:49:c1:63:2e:90:85:57:c5:7e:2e:
0f:5c:7a:5c:77:6d:85:3d:ee:a2:7b:f4:2d:58:92:20:95:b6:
d7:39:0d:80:cc:1d:be:11:2e:7a:2a:6a:79:14:46:4c:01:5e:
7b:30:f1:c0:9f:b1:99:5a:69:76:7d:29:9e:98:b4:7a:1f:8e:
ad:ea:a7:4a:b1:da:25:a6:3f:69:05:70:cc:31:bc:72:52:b3:
d1:10:5a:0b:b0:f1:80:ca:f1:a9:da:3f:2b:1b:2f:75:8d:e6:
90:d2:17:f1:8a:73:82:43:25:71:32:4b:e3:de:0d:05:53:17:
fa:79:12:1e:8a:0c:39:7b:54:34:7e:51:19:cb:f5:b2:2e:df:
3a:6a:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:02:39 2025 by rpki-client