Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa
File: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (raw, json)
Hash identifier: RZ3mYxtXjyfnSAX6OB7Fb/NzyUR2Iaz1eYb6yM0niNc=
Subject key identifier: C3:C9:6F:48:74:A9:F2:B0:CA:D4:3E:65:FE:E1:D7:AA:AA:68:CD:98
Certificate issuer: /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631
Certificate serial: 1B75905A9D6834CA46597F90ECD9E60F01DE918B
Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa
Signing time: Fri 04 Jul 2025 10:19:18 +0000
ROA not before: Fri 04 Jul 2025 10:14:18 +0000
ROA not after: Fri 03 Jul 2026 10:19:18 +0000
asID: 8075
IP address blocks: 2a0a:6044:8fff::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:75:90:5a:9d:68:34:ca:46:59:7f:90:ec:d9:e6:0f:01:de:91:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631
Validity
Not Before: Jul 4 10:14:18 2025 GMT
Not After : Jul 3 10:19:18 2026 GMT
Subject: CN=C3C96F4874A9F2B0CAD43E65FEE1D7AAAA68CD98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:c3:88:d8:3e:6c:65:3e:b7:28:d9:2b:fa:
44:1c:ab:ae:ec:02:48:34:57:d0:69:6b:fc:c1:0f:
34:b6:45:64:18:c2:02:92:4f:05:a1:ab:5e:f3:f1:
12:5e:02:6a:53:61:d9:81:45:d0:be:35:02:e4:09:
a8:de:b7:f8:61:15:70:e6:cf:90:42:55:0f:4b:54:
c1:5a:b5:af:25:a5:5e:31:e1:22:2f:89:76:3b:57:
74:b3:c9:69:20:6e:25:5b:67:9c:80:80:99:e0:5f:
ba:c6:da:57:90:d4:c8:a7:ac:8f:ab:c6:eb:cf:e3:
23:9e:52:d0:07:85:67:91:bc:d9:a9:24:81:77:ea:
da:3e:04:d1:ab:8d:21:e2:fb:95:5d:2a:6a:c9:25:
4f:a0:d6:b0:ec:82:6b:40:80:fa:a6:e4:ed:6b:62:
88:14:ec:3a:f0:86:78:9e:d5:ca:01:8f:6e:cc:9a:
3e:76:f2:fc:97:67:83:fc:8f:11:2e:00:ec:3f:a8:
4d:7c:a3:cf:6c:32:d4:82:3f:a4:91:1c:7a:c8:d3:
12:09:cb:a3:3e:bb:1c:ce:11:06:9e:2e:23:db:cd:
65:39:70:c9:a4:ba:ba:de:45:b0:ff:8a:06:b8:94:
7c:91:57:b2:90:04:d4:d2:e9:62:c5:13:36:b2:0d:
95:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C9:6F:48:74:A9:F2:B0:CA:D4:3E:65:FE:E1:D7:AA:AA:68:CD:98
X509v3 Authority Key Identifier:
keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:8fff::/48
Signature Algorithm: sha256WithRSAEncryption
23:df:dd:d5:cd:56:04:63:c2:40:67:19:09:30:80:1c:3f:2e:
36:21:25:50:5c:b4:a4:52:58:9d:e7:2a:12:6e:2b:55:e6:00:
fc:ef:d4:06:41:06:34:44:f7:57:a3:ac:91:87:ab:53:de:f2:
a0:9d:c7:9e:00:fb:1c:ae:59:b2:05:1e:47:4f:33:45:f1:0f:
ac:f3:68:85:21:a6:30:99:59:35:bd:58:f6:2d:de:48:d0:c9:
e0:69:e5:97:6e:73:be:7e:31:97:14:74:6a:62:b6:b5:d7:bf:
c4:da:1b:cb:9a:eb:c7:af:f8:48:3f:67:0f:de:32:b2:e5:62:
bc:82:7c:57:fd:d7:77:5b:42:20:3b:87:1b:e0:98:dc:99:f3:
2a:e3:a4:5a:f5:d9:63:56:49:a4:51:e4:64:10:36:2b:52:5a:
3e:63:27:81:82:2d:60:e1:f9:c5:21:2a:b4:f2:98:07:e8:b8:
b7:a0:ed:bc:6b:61:47:7b:6f:db:b8:d8:0a:cf:11:17:a0:40:
e7:5d:3b:27:70:9d:cf:74:34:cb:07:ec:23:b7:4d:d5:f1:bf:
64:50:04:63:6e:68:3a:83:08:ae:1a:91:97:4c:d5:6c:7e:95:
00:9f:d2:34:28:d0:f6:b2:fc:09:0e:67:23:ce:26:60:06:ed:
4b:8b:04:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG3WQWp1oNMpGWX+Q7NnmDwHekYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQy
QzE3NzYzMTAeFw0yNTA3MDQxMDE0MThaFw0yNjA3MDMxMDE5MThaMDMxMTAvBgNV
BAMTKEMzQzk2RjQ4NzRBOUYyQjBDQUQ0M0U2NUZFRTFEN0FBQUE2OENEOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRMOI2D5sZT63KNkr+kQcq67s
Akg0V9Bpa/zBDzS2RWQYwgKSTwWhq17z8RJeAmpTYdmBRdC+NQLkCajet/hhFXDm
z5BCVQ9LVMFata8lpV4x4SIviXY7V3SzyWkgbiVbZ5yAgJngX7rG2leQ1MinrI+r
xuvP4yOeUtAHhWeRvNmpJIF36to+BNGrjSHi+5VdKmrJJU+g1rDsgmtAgPqm5O1r
YogU7Drwhnie1coBj27Mmj528vyXZ4P8jxEuAOw/qE18o89sMtSCP6SRHHrI0xIJ
y6M+uxzOEQaeLiPbzWU5cMmkurreRbD/iga4lHyRV7KQBNTS6WLFEzayDZVDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUw8lvSHSp8rDK1D5l/uHXqqpozZgwHwYDVR0j
BBgwFoAUfE4lcdOVNeuDtL3U5GaKLSwXdjEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2
MmNiLzUvN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3
MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRF
NDY2OEEyRDJDMTc3NjMxLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF
BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvNS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM4NjY2NjY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzgz
MDM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAqCmBEj/8wDQYJKoZIhvcNAQELBQADggEBACPf3dXN
VgRjwkBnGQkwgBw/LjYhJVBctKRSWJ3nKhJuK1XmAPzv1AZBBjRE91ejrJGHq1Pe
8qCdx54A+xyuWbIFHkdPM0XxD6zzaIUhpjCZWTW9WPYt3kjQyeBp5Zduc75+MZcU
dGpitrXXv8TaG8ua68ev+Eg/Zw/eMrLlYryCfFf913dbQiA7hxvgmNyZ8yrjpFr1
2WNWSaRR5GQQNitSWj5jJ4GCLWDh+cUhKrTymAfouLeg7bxrYUd7b9u42ArPEReg
QOddOydwnc90NMsH7CO3TdXxv2RQBGNuaDqDCK4akZdM1Wx+lQCf0jQo0Pay/AkO
ZyPOJmAG7UuLBLI=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:54:11 2025 by rpki-client