Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa
File: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (raw, json)
Hash identifier: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=
Subject key identifier: 7B:EB:21:9F:FC:83:D6:3B:B8:0D:00:55:3B:AD:3F:69:99:2A:AA:04
Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial: 576930496FF0858EA204E29E4EF07724065DEF91
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa
Signing time: Thu 02 Oct 2025 01:34:20 +0000
ROA not before: Thu 02 Oct 2025 01:29:20 +0000
ROA not after: Thu 01 Oct 2026 01:34:20 +0000
asID: 141067
IP address blocks: 2a14:7581:485c::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:69:30:49:6f:f0:85:8e:a2:04:e2:9e:4e:f0:77:24:06:5d:ef:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Validity
Not Before: Oct 2 01:29:20 2025 GMT
Not After : Oct 1 01:34:20 2026 GMT
Subject: CN=7BEB219FFC83D63BB80D00553BAD3F69992AAA04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:7d:3a:4f:62:41:13:07:30:20:f0:05:8e:
cb:86:ea:2b:49:52:98:db:8f:da:f2:e3:da:57:12:
0f:a3:f1:40:d0:77:c6:22:e6:3a:bc:3e:b3:f9:9e:
b6:19:ad:b6:81:2a:4c:7c:f5:ad:04:79:1b:06:a6:
07:4a:f8:b6:a6:61:db:4b:d9:d1:54:48:60:bf:1d:
77:dd:9e:40:f6:2f:e3:ad:2e:7a:c1:6d:60:f9:52:
d3:31:aa:e4:a9:9c:52:5c:d8:56:9d:54:02:cd:91:
62:c1:da:94:d8:0c:20:62:44:45:f7:e8:28:17:86:
b1:6b:10:e4:18:1d:93:f1:fd:86:11:a5:b4:cd:5f:
8d:f9:c4:81:e3:1b:93:71:03:b7:87:b2:9f:2a:f6:
80:cb:0e:16:a2:5f:91:a0:70:e0:fd:e3:c9:69:fa:
4b:00:ef:54:0d:fc:9e:eb:f2:72:7f:fc:04:21:7c:
c3:89:7c:22:6f:2a:bd:e5:9a:f8:df:56:a1:9a:20:
97:db:9e:f8:7c:0a:c9:04:c3:ce:77:76:5f:61:eb:
6e:a2:26:26:1f:95:84:1b:0a:26:e2:44:01:c4:d7:
d3:3b:c4:f2:f0:05:f6:72:fd:ab:12:ac:31:5d:86:
08:ba:d6:e6:1f:9a:8c:4b:6e:6a:32:67:38:4c:3d:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EB:21:9F:FC:83:D6:3B:B8:0D:00:55:3B:AD:3F:69:99:2A:AA:04
X509v3 Authority Key Identifier:
keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:485c::/48
Signature Algorithm: sha256WithRSAEncryption
47:65:14:09:fb:4e:0b:48:1a:a4:e8:a6:32:41:9b:f4:9b:3a:
e3:a6:b6:40:fc:42:18:e4:c8:49:0c:1e:df:f1:aa:23:10:0d:
07:a5:5e:7d:c7:8a:bc:a8:2e:bb:14:c0:af:80:bd:a3:7c:a7:
62:93:23:b5:c1:ff:5f:78:4d:e0:3c:fc:bc:22:d8:c8:fa:fa:
55:4e:b1:f2:5e:0e:db:05:ac:3e:49:e9:5a:ad:23:93:f8:71:
b0:1f:11:4f:85:38:20:9c:59:0c:b3:e1:48:cb:4c:bf:4e:94:
41:a9:2d:c4:51:7d:b9:a8:66:15:78:74:96:9c:27:3a:30:13:
85:37:02:c4:c1:46:6c:82:cc:09:11:fd:31:61:53:d3:da:7a:
75:c5:17:55:3a:e0:6c:fe:48:c0:b5:c0:1b:6a:d2:99:9c:4f:
ed:3a:37:6e:3f:13:be:35:84:d7:8d:78:a6:36:45:f3:53:70:
02:31:69:59:1f:29:7a:79:2a:e0:9c:e0:68:e9:a0:15:43:bc:
6d:5f:aa:31:14:51:98:86:2b:52:be:bd:5c:1c:29:4a:8a:96:
71:73:4c:c7:e5:3e:4d:1f:c5:10:81:f4:d1:9c:41:f6:e8:07:
21:42:5b:0a:0b:ea:70:61:22:45:df:83:30:cb:8c:4a:fb:73:
d3:34:d3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:16:44 2025 by rpki-client