Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa
File: 326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier: ikocRTZQ9+VmscNR/S4mme6u6SVmmBPtHdfMJ1+UhH4=
Subject key identifier: A3:51:4D:F1:7C:DA:F3:12:2B:B3:66:BE:DF:CC:D8:64:4D:BF:08:35
Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial: 57155AFF2730BED7E7CF902E8BA29D6BFF29CF63
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa
Signing time: Tue 06 May 2025 08:50:51 +0000
ROA not before: Tue 06 May 2025 08:45:51 +0000
ROA not after: Tue 05 May 2026 08:50:51 +0000
asID: 58339
IP address blocks: 2a05:dfc1:5f50::/44 maxlen: 44
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:15:5a:ff:27:30:be:d7:e7:cf:90:2e:8b:a2:9d:6b:ff:29:cf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Validity
Not Before: May 6 08:45:51 2025 GMT
Not After : May 5 08:50:51 2026 GMT
Subject: CN=A3514DF17CDAF3122BB366BEDFCCD8644DBF0835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:96:f4:9c:3e:25:8c:15:13:37:36:6d:6e:4c:
9f:af:ac:c1:22:f1:4a:b4:16:31:e0:7c:4c:2a:31:
7f:5d:2c:09:a0:cb:f1:02:00:e1:4a:87:fb:ab:ba:
cb:b9:7a:b7:be:6c:72:ee:9e:3d:30:a5:73:03:b5:
dc:16:70:37:cd:09:e8:2d:7a:6d:4a:b4:c4:df:09:
75:b3:eb:5d:44:e6:b4:9d:a6:31:ac:7f:9b:0c:0b:
b8:45:c9:40:ec:9c:e6:55:0d:f4:5c:b1:f2:6b:b1:
c4:12:43:25:0a:08:63:f3:89:8d:a1:ae:40:ec:55:
c8:78:2a:45:e6:38:07:92:bb:ed:75:12:ff:72:4b:
74:73:17:d7:3e:85:84:54:87:a2:50:6a:f3:11:4d:
f3:a4:67:3b:3d:73:18:62:3d:4d:1b:78:22:68:b3:
24:e8:0e:f1:b0:43:22:37:0f:98:53:40:47:8f:32:
7f:1c:75:68:07:83:d9:1c:bc:4d:af:08:ad:ca:e5:
2e:f9:66:21:6a:dc:dd:94:b7:ab:ad:1b:2f:aa:a2:
e2:c6:af:23:d1:58:9e:35:84:73:4d:8d:3f:3d:92:
3f:90:86:41:68:7b:99:35:50:02:11:19:d2:6d:6a:
f9:ae:70:4e:f1:52:9b:b3:77:73:74:9e:37:66:e3:
94:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:51:4D:F1:7C:DA:F3:12:2B:B3:66:BE:DF:CC:D8:64:4D:BF:08:35
X509v3 Authority Key Identifier:
keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:5f50::/44
Signature Algorithm: sha256WithRSAEncryption
50:bc:a1:fe:35:55:d5:86:23:21:9d:6e:cd:12:78:14:52:1f:
3a:1a:dd:e2:38:43:70:70:19:a8:40:23:79:0f:13:f2:c9:d0:
65:24:02:47:63:40:78:9c:54:6c:d7:3f:5c:80:7d:91:35:bc:
60:fe:e5:dd:99:b8:fa:cc:c1:52:9a:12:fd:9a:a1:67:12:da:
a3:4c:da:d9:95:8d:e7:9e:bc:e1:54:64:63:5a:cd:f5:f5:e7:
b7:b7:d3:e8:ec:28:0d:62:9e:c8:63:79:d4:6b:b2:38:42:94:
55:39:c2:f1:a5:99:45:30:2c:53:97:11:62:12:53:fc:e8:81:
2c:98:72:c6:44:8d:fd:b5:d2:40:f8:44:16:df:a7:67:0c:1e:
f1:60:70:14:71:05:59:f7:36:d8:04:ce:15:9c:a4:7a:5d:3a:
47:41:8f:ca:f2:10:80:42:91:af:81:3e:bd:ea:a6:ec:1f:af:
99:d7:03:da:68:45:06:f1:1c:aa:e5:40:0d:b1:1e:91:e7:f1:
e3:fa:c1:b1:5a:33:10:76:4a:70:b8:e6:44:fa:d9:84:e0:b7:
3c:cb:a8:88:75:69:1f:f3:b3:ec:02:0d:7f:a8:fb:f1:7b:e6:
ba:6e:26:e5:fc:e6:e0:c0:48:30:46:df:8f:4f:c2:e2:1f:ad:
00:f8:27:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:40:37 2025 by rpki-client