Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa
File: 326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier: tzZ2jtcH1oc3Agcu1MFCgJiJoxSXYMwAs4vIx6WbfQU=
Subject key identifier: A1:80:5D:17:5A:4A:6C:BA:C1:0C:83:E3:63:8C:4F:CC:07:D7:32:75
Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial: 2DE295BD839A7386B6D7337B87AF31C011E65EB6
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa
Signing time: Tue 06 May 2025 08:50:50 +0000
ROA not before: Tue 06 May 2025 08:45:50 +0000
ROA not after: Tue 05 May 2026 08:50:50 +0000
asID: 58339
IP address blocks: 2a05:dfc1:8e80::/44 maxlen: 44
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e2:95:bd:83:9a:73:86:b6:d7:33:7b:87:af:31:c0:11:e6:5e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Validity
Not Before: May 6 08:45:50 2025 GMT
Not After : May 5 08:50:50 2026 GMT
Subject: CN=A1805D175A4A6CBAC10C83E3638C4FCC07D73275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:e1:76:81:7c:e3:15:d1:a7:23:25:d0:7a:
63:9b:3b:22:20:69:98:89:c4:a6:42:f7:42:d5:a5:
7b:62:36:36:6f:89:1c:79:62:00:be:b7:d9:9b:ed:
ab:dc:66:da:19:72:4a:32:e2:09:0d:84:76:e0:41:
31:6a:6d:d7:ec:02:20:ed:8b:e5:40:1d:3c:f4:da:
5a:46:4b:d6:c5:22:44:b8:8f:20:3c:ba:aa:27:35:
65:d6:ee:3e:bf:65:df:c7:3c:22:39:69:b0:f3:e0:
9e:df:1b:84:10:75:aa:21:74:9a:9d:f2:3b:be:8a:
5f:f9:50:bc:23:05:38:4e:b8:2a:5b:db:d2:73:ec:
d3:97:ad:4d:ba:84:ed:76:57:31:27:ea:07:46:20:
ff:3a:42:1c:06:c3:68:a1:0b:6f:c7:83:79:06:1b:
72:9b:44:69:62:06:28:8e:cc:d1:ba:70:e0:9d:0e:
13:ec:5b:e1:03:39:cc:d1:1e:af:35:75:b2:83:ef:
7b:e4:04:70:d0:ab:35:61:88:4b:6b:ed:80:7d:f6:
d2:ec:ff:19:96:b4:7f:68:f6:de:a0:cb:c5:14:0a:
e7:29:da:0b:c5:16:88:5c:5e:1a:1b:72:04:99:34:
e0:4e:5b:05:c6:5a:aa:75:af:e0:e0:e5:9e:58:b4:
1d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:80:5D:17:5A:4A:6C:BA:C1:0C:83:E3:63:8C:4F:CC:07:D7:32:75
X509v3 Authority Key Identifier:
keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8e80::/44
Signature Algorithm: sha256WithRSAEncryption
60:ed:60:7d:b6:92:8f:e9:64:a5:56:52:29:fe:c7:cd:a1:87:
25:29:e3:03:44:1f:fd:28:e8:75:77:e3:b8:c4:cf:01:e3:57:
f1:38:af:11:08:4d:eb:2b:d8:14:85:0f:e5:a0:53:e1:42:e2:
d2:b8:bd:dc:df:c3:1b:f0:89:6b:cc:2f:da:cf:6e:1f:5f:92:
1c:4b:ae:1e:06:f4:63:89:2e:10:a0:dd:29:6a:2d:1d:c7:ee:
cd:3e:b0:7e:c1:66:c7:a3:eb:a4:11:c2:5e:b5:0e:de:ff:48:
18:8e:71:76:a4:13:28:49:87:ed:59:09:c1:03:56:58:78:45:
82:24:25:78:9c:89:c0:d9:74:e8:3d:a2:d2:26:9b:f1:a8:9f:
9f:ec:eb:9f:88:6e:45:76:65:ff:68:8f:61:47:9a:ba:1b:f2:
49:3a:55:6f:9c:82:fe:09:07:1b:10:44:0b:27:3a:92:de:15:
76:d3:15:39:aa:ab:b7:48:e3:a7:e3:4e:4d:6e:92:57:2e:7b:
d6:2c:d6:38:c4:79:42:d3:9b:c6:54:a8:7d:cd:1d:77:02:b6:
f9:c5:e1:d3:b0:8a:40:cf:44:e1:67:4c:7b:ba:02:f4:e8:2c:
6d:93:3a:16:4a:fe:24:44:a8:b9:cc:ff:05:d3:59:2a:a5:cc:
06:14:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:28:00 2025 by rpki-client