Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa
File: 326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier: yG1S+CdPa7hKoaBIM0RNhq34ItnOYKjgvC+nKfKXLxU=
Subject key identifier: 75:37:D8:69:82:3A:9D:E9:87:81:7D:0F:36:58:1C:1A:AE:85:62:0F
Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial: 47ED7E8752C86979EA96088C60390C0B0BB07390
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa
Signing time: Tue 06 May 2025 08:50:50 +0000
ROA not before: Tue 06 May 2025 08:45:50 +0000
ROA not after: Tue 05 May 2026 08:50:50 +0000
asID: 58339
IP address blocks: 2a05:dfc1:8e10::/44 maxlen: 44
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ed:7e:87:52:c8:69:79:ea:96:08:8c:60:39:0c:0b:0b:b0:73:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Validity
Not Before: May 6 08:45:50 2025 GMT
Not After : May 5 08:50:50 2026 GMT
Subject: CN=7537D869823A9DE987817D0F36581C1AAE85620F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:50:e8:1e:e7:39:2e:00:75:9f:1e:a7:06:
ba:f5:17:69:72:48:ef:bf:5a:2f:3e:16:19:10:61:
e8:74:90:06:15:4b:04:b6:85:13:9d:26:e6:5a:b7:
2f:3e:22:bb:21:f4:8e:bd:fb:cf:d3:af:3e:59:da:
5a:86:03:71:6f:0d:ef:19:b6:16:48:dd:d2:7c:0d:
a9:1a:04:52:ac:99:13:69:aa:ec:8e:55:ea:42:8f:
b9:cb:5c:1d:a6:eb:74:bb:92:38:8d:b7:b6:90:dc:
21:de:b6:77:f3:49:50:5c:b6:af:57:97:98:1f:42:
ba:87:e5:26:17:79:ab:c9:c3:f0:d6:5e:8c:df:4d:
49:8a:9b:96:7d:bb:df:06:1a:54:f4:51:c8:9b:3b:
ee:7d:45:fe:cd:7e:06:29:3f:4b:e2:09:84:5d:32:
0d:7f:0e:77:d2:54:c4:b3:e8:5c:be:c7:e4:e5:49:
47:52:75:a5:d4:7d:cf:0a:be:3b:87:64:8a:26:93:
93:87:a9:eb:02:67:55:e1:84:e5:33:ad:56:ef:40:
02:f7:42:92:99:10:41:1d:1c:3a:a3:b4:9a:f9:96:
43:4e:15:af:1f:af:c5:0d:5f:b1:0a:48:83:d5:94:
6a:d6:84:7b:14:08:38:58:05:7e:ae:db:58:e1:d8:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:37:D8:69:82:3A:9D:E9:87:81:7D:0F:36:58:1C:1A:AE:85:62:0F
X509v3 Authority Key Identifier:
keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8e10::/44
Signature Algorithm: sha256WithRSAEncryption
51:e4:94:0d:f4:fe:f6:42:bf:c8:80:01:e2:03:c8:de:1e:df:
ce:28:bf:5a:8b:0e:22:28:23:45:42:82:fd:7c:5a:43:41:72:
61:4c:e0:c5:f4:2a:1b:c3:bc:36:98:92:19:e1:66:65:77:a0:
5b:29:f4:5e:c6:d2:8c:7b:e2:4d:b2:52:ee:6f:7e:5f:30:70:
2a:f5:c4:ac:1a:5a:9d:3f:41:52:ac:09:33:f9:5c:f1:eb:57:
5c:a2:d2:d6:03:31:a2:ca:be:75:9c:c0:19:e8:84:fe:6c:08:
fb:49:e9:8f:bd:37:2b:c1:4b:dd:10:91:d4:b7:e1:ab:28:e7:
e3:d9:78:ab:bc:79:97:c0:5b:3a:9b:12:a4:85:88:3a:e9:ea:
af:68:ef:20:5f:6e:85:57:4e:d4:fd:e5:8e:24:4c:94:0e:20:
35:69:a3:8e:0c:bd:8c:db:9d:af:34:17:51:36:fe:8d:9d:39:
d1:60:40:5d:85:4c:cd:53:af:c5:6f:79:bc:77:9c:e3:c5:5d:
a5:b2:34:29:b5:fb:45:3e:4f:6b:70:4f:70:f9:cd:75:32:83:
0a:70:2d:52:44:32:17:29:a8:28:57:54:ea:a9:9f:60:a7:b5:
a0:ab:28:89:f8:80:2a:92:b9:21:dc:a8:76:94:c1:45:5a:8b:
bf:c5:9f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:30:52 2025 by rpki-client