Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa
File: 326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier: BtxfwQvueehDGJrNiwkb7VQOoetARww2saMZcqiUdbY=
Subject key identifier: 83:F7:DD:D5:8D:89:0E:7E:B2:12:9F:C6:51:F0:4D:06:E5:CC:47:9E
Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial: 18F3B2B5D9F34AD5E0A1E906BC047DBF18476A64
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa
Signing time: Tue 06 May 2025 08:50:49 +0000
ROA not before: Tue 06 May 2025 08:45:49 +0000
ROA not after: Tue 05 May 2026 08:50:49 +0000
asID: 58339
IP address blocks: 2a05:dfc1:5f30::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f3:b2:b5:d9:f3:4a:d5:e0:a1:e9:06:bc:04:7d:bf:18:47:6a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Validity
Not Before: May 6 08:45:49 2025 GMT
Not After : May 5 08:50:49 2026 GMT
Subject: CN=83F7DDD58D890E7EB2129FC651F04D06E5CC479E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:61:fa:10:28:cb:66:80:52:b3:a8:9f:fb:b8:
27:d1:71:c5:ec:a0:ec:b3:44:8b:4b:e1:da:bc:ad:
59:e1:c7:6f:05:8e:a5:93:4a:9e:98:5f:33:91:56:
2e:45:71:86:bf:11:d6:e7:57:0b:32:aa:31:33:88:
f7:ca:36:47:66:c9:e6:d2:24:3f:e4:6d:3d:90:74:
0c:52:e6:4f:0f:33:1b:75:6c:82:41:f3:95:5e:8f:
93:3a:65:be:62:e6:fc:b8:9c:f7:e0:23:34:49:92:
a9:9f:27:f8:16:c5:36:bb:c0:cc:67:bc:0c:22:51:
16:6f:be:8f:c9:4a:63:04:97:d1:21:e8:3d:cb:b6:
f0:f6:f2:03:2e:e6:fc:cd:d4:d5:76:e5:d2:7e:49:
45:5d:db:a6:22:7f:fd:1b:37:3d:bf:5d:45:8f:19:
a8:3c:bb:d4:12:b4:54:7a:f6:7d:7c:78:4e:7c:00:
5f:0e:39:af:63:a1:99:35:62:86:bd:8b:b8:1c:20:
0a:bf:e6:2a:9f:49:24:c2:9c:a7:2c:87:c9:aa:a7:
94:8e:9d:e9:2f:ed:14:a0:6d:d5:15:e3:f1:7e:4b:
f5:21:5b:f4:8a:de:c0:39:4b:79:17:78:6e:db:7c:
09:52:fd:ef:65:36:ad:53:09:21:93:6a:76:d3:05:
4f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F7:DD:D5:8D:89:0E:7E:B2:12:9F:C6:51:F0:4D:06:E5:CC:47:9E
X509v3 Authority Key Identifier:
keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:5f30::/48
Signature Algorithm: sha256WithRSAEncryption
3b:cd:0a:18:38:73:85:54:e8:52:80:7a:c0:cc:91:13:74:23:
92:1b:81:42:b2:30:44:ea:c8:83:7d:7a:ef:ad:2c:70:52:75:
f3:52:d3:b9:c5:ae:0c:fe:a9:ac:7f:a8:0c:ed:a7:e7:f9:8f:
3f:78:14:8b:1d:49:aa:71:bb:2a:72:15:04:1d:67:36:d8:58:
a0:35:2e:5d:7e:ac:db:3d:94:08:e9:dd:3c:c5:40:e2:8f:70:
cb:5b:9e:c0:fd:2f:52:e2:18:73:ac:3a:fd:df:a8:36:43:0d:
c6:47:e8:38:96:e6:37:69:0b:a8:a6:92:a5:10:5f:d2:42:d7:
e8:9a:22:00:7c:8e:76:4e:e9:a7:31:68:7e:fa:bf:18:0a:b5:
fc:c1:31:56:93:61:7d:4e:1f:1a:1d:1e:40:48:31:c6:d3:d4:
73:68:f2:a1:dc:0e:3c:49:1c:64:8d:cf:03:9c:98:98:ce:19:
db:ef:91:31:64:68:0c:b6:de:7d:d3:8e:35:59:ca:17:5b:20:
d9:4c:0c:f9:ce:40:6b:65:22:bf:66:a3:54:35:91:74:59:ad:
e5:e3:61:3d:f3:b3:e4:4b:04:aa:17:80:d9:fd:df:ce:b3:11:
e8:04:de:12:ea:28:63:e0:c8:e4:90:74:27:dd:59:7e:d8:0f:
06:cf:2d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:38:12 2025 by rpki-client