Route Origin Authorization
$ rpki-client -vvf rpki.folf.systems/repo/Folf-Systems/0/323030313a3637633a6233383a3a2f34382d3438203d3e20323030333630.roa
File: 323030313a3637633a6233383a3a2f34382d3438203d3e20323030333630.roa (raw, json)
Hash identifier: g4fNdJtpN2rLCg3iRNMOyoWFwLKLfsfPe0jg4vP/nkc=
Subject key identifier: 06:46:ED:0E:83:E7:17:C3:92:E6:A1:B0:67:07:CD:C2:3A:E4:E8:62
Certificate issuer: /CN=e883d1d2313a14e8659f604a65d65ce39a3f826b
Certificate serial: 7509768346895CA3ED1CC0AA3D811C25B1E1C455
Authority key identifier: E8:83:D1:D2:31:3A:14:E8:65:9F:60:4A:65:D6:5C:E3:9A:3F:82:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IPR0jE6FOhln2BKZdZc45o_gms.cer
Subject info access: rsync://rpki.folf.systems/repo/Folf-Systems/0/323030313a3637633a6233383a3a2f34382d3438203d3e20323030333630.roa
Signing time: Thu 28 Nov 2024 04:17:43 +0000
ROA not before: Thu 28 Nov 2024 04:12:43 +0000
ROA not after: Thu 27 Nov 2025 04:17:43 +0000
asID: 200360
IP address blocks: 2001:67c:b38::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:09:76:83:46:89:5c:a3:ed:1c:c0:aa:3d:81:1c:25:b1:e1:c4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e883d1d2313a14e8659f604a65d65ce39a3f826b
Validity
Not Before: Nov 28 04:12:43 2024 GMT
Not After : Nov 27 04:17:43 2025 GMT
Subject: CN=0646ED0E83E717C392E6A1B06707CDC23AE4E862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a3:05:c3:91:bc:39:52:75:8a:c6:95:57:bf:
33:a3:d2:ce:06:a0:4a:9f:5c:4c:c4:b7:a2:6e:af:
e6:61:40:75:0c:4a:55:5c:bb:dd:63:09:1a:c2:7d:
82:c9:6b:3e:5f:4a:bb:c0:dd:d5:8d:b5:95:93:b3:
d5:df:4f:02:00:58:00:ad:0d:2b:38:6f:a4:c3:31:
0f:82:10:e7:40:a7:32:98:35:fb:d6:39:b5:2f:b9:
2f:13:e2:54:a9:f3:a7:c1:1d:07:96:ae:f0:f6:df:
f8:7e:fe:59:bf:cd:6f:98:a6:17:28:84:2d:e3:fd:
78:e7:22:53:e8:67:6a:b5:9a:4f:78:f0:5c:ef:6f:
e1:ed:c8:f5:44:a9:75:46:c5:68:ba:1b:be:f2:64:
f4:d8:dc:66:44:70:69:c5:25:f0:78:d8:00:64:bd:
4e:f6:54:4d:cb:0e:92:93:00:35:22:07:67:b8:c4:
2b:ec:fb:1a:d1:d5:29:68:b8:15:de:1d:8a:8c:d9:
3f:b6:9e:e7:cc:ff:82:b2:84:46:fa:de:b8:f7:cd:
50:bd:15:78:4d:0b:22:3b:c8:75:72:d7:a5:29:0e:
df:1c:18:46:7a:6a:c1:2a:d4:a7:55:ee:77:3c:f0:
eb:8f:15:c8:17:96:59:de:79:55:70:b0:40:8b:f8:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:46:ED:0E:83:E7:17:C3:92:E6:A1:B0:67:07:CD:C2:3A:E4:E8:62
X509v3 Authority Key Identifier:
keyid:E8:83:D1:D2:31:3A:14:E8:65:9F:60:4A:65:D6:5C:E3:9A:3F:82:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.folf.systems/repo/Folf-Systems/0/E883D1D2313A14E8659F604A65D65CE39A3F826B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IPR0jE6FOhln2BKZdZc45o_gms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.folf.systems/repo/Folf-Systems/0/323030313a3637633a6233383a3a2f34382d3438203d3e20323030333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b38::/48
Signature Algorithm: sha256WithRSAEncryption
51:24:f4:99:cb:88:17:93:55:19:70:70:3e:88:89:97:9b:ff:
8d:f1:9f:0d:63:ed:e5:4a:9f:b6:66:ae:9e:1c:ed:e0:39:7e:
12:cc:5b:c1:3b:e6:50:bf:a8:0f:93:54:c6:bf:e5:bb:ad:a4:
0a:d8:1b:65:57:58:d5:5b:b8:9b:79:4b:f9:1e:e2:1c:a7:1d:
b0:e7:df:6b:41:4d:d2:23:54:e6:24:bf:8a:4d:2d:89:51:17:
99:26:66:7f:fa:6b:b2:9b:58:18:29:bc:6b:51:c5:86:6b:f7:
a1:72:e2:5e:27:f5:91:50:95:51:01:b2:9f:cd:e2:9f:5d:e3:
6e:6f:63:80:8d:7d:10:e2:15:45:be:e7:65:c3:cd:cb:a7:4d:
7f:7c:64:ec:e2:39:07:59:bc:49:2e:59:4e:ef:d1:8d:00:ac:
a9:f1:3f:e2:05:41:86:67:89:12:c3:cb:38:37:de:5c:cf:e4:
17:b0:9c:69:2b:e8:ce:4a:49:fd:bb:1d:44:01:cd:fc:63:ef:
3c:72:fb:fe:b1:d7:0e:69:88:a6:c5:3a:dc:ba:80:68:4b:54:
b2:df:81:9b:37:09:0e:8e:6c:19:a2:42:c3:96:81:2d:13:35:
c7:d4:02:55:15:5e:93:6c:fb:e7:75:1a:71:b4:7d:1f:9e:c8:
4b:2c:03:b5
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUdQl2g0aJXKPtHMCqPYEcJbHhxFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTg4M2QxZDIzMTNhMTRlODY1OWY2MDRhNjVkNjVjZTM5
YTNmODI2YjAeFw0yNDExMjgwNDEyNDNaFw0yNTExMjcwNDE3NDNaMDMxMTAvBgNV
BAMTKDA2NDZFRDBFODNFNzE3QzM5MkU2QTFCMDY3MDdDREMyM0FFNEU4NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwowXDkbw5UnWKxpVXvzOj0s4G
oEqfXEzEt6Jur+ZhQHUMSlVcu91jCRrCfYLJaz5fSrvA3dWNtZWTs9XfTwIAWACt
DSs4b6TDMQ+CEOdApzKYNfvWObUvuS8T4lSp86fBHQeWrvD23/h+/lm/zW+Yphco
hC3j/XjnIlPoZ2q1mk948Fzvb+HtyPVEqXVGxWi6G77yZPTY3GZEcGnFJfB42ABk
vU72VE3LDpKTADUiB2e4xCvs+xrR1SlouBXeHYqM2T+2nufM/4KyhEb63rj3zVC9
FXhNCyI7yHVy16UpDt8cGEZ6asEq1KdV7nc88OuPFcgXllneeVVwsECL+Kk9AgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUBkbtDoPnF8OS5qGwZwfNwjrk6GIwHwYDVR0j
BBgwFoAU6IPR0jE6FOhln2BKZdZc45o/gmswDgYDVR0PAQH/BAQDAgeAMGsGA1Ud
HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnBraS5mb2xmLnN5c3RlbXMvcmVwby9Gb2xm
LVN5c3RlbXMvMC9FODgzRDFEMjMxM0ExNEU4NjU5RjYwNEE2NUQ2NUNFMzlBM0Y4
MjZCLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNklQUjBqRTZGT2hsbjJCS1pk
WmM0NW9fZ21zLmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUFBzALhm5yc3lu
YzovL3Jwa2kuZm9sZi5zeXN0ZW1zL3JlcG8vRm9sZi1TeXN0ZW1zLzAvMzIzMDMw
MzEzYTM2Mzc2MzNhNjIzMzM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDMw
MzMzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAIAEGfAs4MA0GCSqGSIb3DQEBCwUAA4IBAQBRJPSZ
y4gXk1UZcHA+iImXm/+N8Z8NY+3lSp+2Zq6eHO3gOX4SzFvBO+ZQv6gPk1TGv+W7
raQK2BtlV1jVW7ibeUv5HuIcpx2w599rQU3SI1TmJL+KTS2JUReZJmZ/+muym1gY
KbxrUcWGa/ehcuJeJ/WRUJVRAbKfzeKfXeNub2OAjX0Q4hVFvudlw83Lp01/fGTs
4jkHWbxJLllO79GNAKyp8T/iBUGGZ4kSw8s4N95cz+QXsJxpK+jOSkn9ux1EAc38
Y+88cvv+sdcOaYimxTrcuoBoS1Sy34GbNwkOjmwZokLDloEtEzXH1AJVFV6TbPvn
dRpxtH0fnshLLAO1
-----END CERTIFICATE-----
Generated at Mon Apr 21 14:59:37 2025 by rpki-client