Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa
File: 326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier: xve/M9zUs9ktX2sNcw/HWBsIrUCDhCrYkjAdF0FmYDs=
Subject key identifier: EA:01:2E:09:71:5B:E2:76:91:57:3B:E9:2D:9A:96:F5:8E:A5:80:94
Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial: 0A8DE10553432A0A5730ACABF9280A6D3C713791
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa
Signing time: Tue 06 May 2025 08:50:49 +0000
ROA not before: Tue 06 May 2025 08:45:49 +0000
ROA not after: Tue 05 May 2026 08:50:49 +0000
asID: 58339
IP address blocks: 2a05:dfc1:5f00::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:8d:e1:05:53:43:2a:0a:57:30:ac:ab:f9:28:0a:6d:3c:71:37:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Validity
Not Before: May 6 08:45:49 2025 GMT
Not After : May 5 08:50:49 2026 GMT
Subject: CN=EA012E09715BE27691573BE92D9A96F58EA58094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:43:a8:06:2f:dd:ad:80:e1:1d:bc:5c:1b:
91:96:e6:40:ff:b4:04:60:cc:2c:21:38:d2:3f:da:
35:ae:59:8c:5d:6d:d8:97:b9:c5:f5:5a:6a:2d:ea:
8b:25:88:b6:15:dd:3c:18:79:6c:45:bb:82:8f:ec:
07:b2:22:88:72:ea:64:1e:bb:dd:24:a1:d9:3c:a2:
08:16:68:e8:e3:06:83:16:99:ac:8a:7c:8a:63:44:
05:c7:02:7c:81:e5:d0:e0:c5:28:d8:04:01:2a:10:
80:56:e5:ae:f2:1d:d9:d2:e1:82:a1:46:15:2d:37:
7f:58:7a:2e:1d:7b:be:62:26:6e:98:5e:d1:36:42:
cc:35:f9:b6:2e:09:0e:ec:a8:0e:bc:5a:9b:e7:b9:
98:41:39:b7:a9:69:7c:85:6c:94:c5:be:df:a6:8d:
0a:fb:08:f9:d1:5f:f9:dd:dd:23:83:19:29:af:7e:
5d:8d:57:71:07:2c:2e:55:a2:89:8b:a9:c1:c3:40:
54:2e:a5:9b:ad:26:ba:2a:b2:59:9e:3e:d0:83:83:
d4:72:b5:74:af:91:c7:9d:43:7b:f7:c4:ef:c6:5d:
54:0e:57:d6:35:da:02:5c:14:8f:37:27:5d:5e:e0:
75:ff:bb:32:85:ce:1d:ff:21:67:a1:1f:00:c3:ef:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:01:2E:09:71:5B:E2:76:91:57:3B:E9:2D:9A:96:F5:8E:A5:80:94
X509v3 Authority Key Identifier:
keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:5f00::/48
Signature Algorithm: sha256WithRSAEncryption
3a:99:2d:49:6e:0f:8f:85:47:5f:45:16:3e:50:45:cf:9b:09:
4d:44:06:b8:8f:ce:0c:e8:52:71:82:58:ce:10:f8:f9:da:a1:
70:ed:56:18:aa:2e:1f:76:41:94:8f:12:0b:92:f8:47:16:36:
53:ee:30:2c:22:37:f2:14:da:51:8b:23:60:59:14:0c:6a:cd:
8c:a2:46:4e:4c:92:05:02:1c:45:0d:18:9c:08:a1:99:e6:a1:
ec:f8:90:ed:1f:6a:31:84:f1:a5:43:37:95:d1:94:60:b0:cf:
3a:17:c8:44:61:1a:f2:99:68:b3:e7:50:b9:9c:c7:1e:f7:b3:
cc:27:d8:81:2f:38:a3:38:fa:95:aa:77:f0:4e:ba:4f:51:1a:
a0:71:1b:87:a2:fb:1a:50:4e:19:5f:5e:b3:06:43:b0:cc:ab:
a5:0a:98:84:39:2b:15:1e:33:b7:49:32:97:75:24:14:09:62:
97:61:cb:9d:6c:11:c0:77:27:1b:a3:dd:72:d0:b2:2b:75:7e:
d3:38:73:95:29:ff:2f:42:96:b8:13:1f:b4:8c:f3:e6:b8:90:
71:6f:fe:ca:f3:d1:44:de:ec:e0:92:46:30:2e:21:d6:41:65:
57:11:ff:1e:5c:5e:42:e7:17:71:57:db:b6:13:81:0c:e4:b9:
35:4d:da:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:44:09 2025 by rpki-client