Route Origin Authorization
$ rpki-client -vvf rpki.folf.systems/repo/Folf-Systems/0/323030313a3637633a6233633a3a2f34382d3438203d3e20323030333630.roa
File: 323030313a3637633a6233633a3a2f34382d3438203d3e20323030333630.roa (raw, json)
Hash identifier: 98s2WLcK8CtFXPMYBcW3kjxXqSPzhe63B6uFv2wvGm8=
Subject key identifier: 12:ED:52:0D:F2:F6:57:0B:BB:C6:BA:DA:60:9D:B2:40:DE:7F:D3:DE
Certificate issuer: /CN=e883d1d2313a14e8659f604a65d65ce39a3f826b
Certificate serial: 253BFE48EFA39F86B39E92D33BEB0E28446285A2
Authority key identifier: E8:83:D1:D2:31:3A:14:E8:65:9F:60:4A:65:D6:5C:E3:9A:3F:82:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IPR0jE6FOhln2BKZdZc45o_gms.cer
Subject info access: rsync://rpki.folf.systems/repo/Folf-Systems/0/323030313a3637633a6233633a3a2f34382d3438203d3e20323030333630.roa
Signing time: Wed 04 Dec 2024 17:17:43 +0000
ROA not before: Wed 04 Dec 2024 17:12:43 +0000
ROA not after: Wed 03 Dec 2025 17:17:43 +0000
asID: 200360
IP address blocks: 2001:67c:b3c::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3b:fe:48:ef:a3:9f:86:b3:9e:92:d3:3b:eb:0e:28:44:62:85:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e883d1d2313a14e8659f604a65d65ce39a3f826b
Validity
Not Before: Dec 4 17:12:43 2024 GMT
Not After : Dec 3 17:17:43 2025 GMT
Subject: CN=12ED520DF2F6570BBBC6BADA609DB240DE7FD3DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:04:47:9d:c8:e8:77:88:99:4d:33:48:a7:
d0:87:a8:9d:6d:58:f8:20:dc:a2:a2:96:72:92:29:
87:b0:41:84:c2:e5:96:74:c3:c7:8b:2f:e5:99:ba:
56:bf:f9:24:cb:7f:a9:20:ff:ac:9d:8f:c2:f1:fd:
93:d1:bd:98:ef:9a:24:ce:ee:fc:ae:8e:ae:19:1b:
29:d2:51:38:a2:71:17:0a:26:4b:06:10:7c:05:fa:
c3:ff:bf:c8:57:e5:5a:74:ff:ee:1e:53:8d:e5:7a:
06:5f:5f:25:82:71:92:3a:49:87:c0:2d:57:db:e2:
83:11:bd:4a:d2:ca:42:5c:92:62:a8:02:22:44:97:
5a:34:93:64:ed:c2:5e:f7:d9:3b:c8:e8:bc:35:ed:
07:8f:4a:23:c0:b7:cf:c3:ea:92:ad:ba:f0:38:bf:
93:ba:49:be:18:18:58:90:29:13:f3:d4:41:ad:7c:
8f:1b:0c:e1:88:70:e7:43:20:6f:68:0e:ae:fc:29:
c2:1c:91:b1:12:b9:31:c2:7d:7c:fa:cd:1c:07:57:
d2:95:2e:7c:25:a9:86:66:1e:c9:fe:91:e2:1a:1d:
11:84:cb:fb:16:71:3f:76:21:14:3a:6d:5b:18:fb:
aa:30:bb:64:7a:77:be:59:b2:7a:26:d9:66:d0:44:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:ED:52:0D:F2:F6:57:0B:BB:C6:BA:DA:60:9D:B2:40:DE:7F:D3:DE
X509v3 Authority Key Identifier:
keyid:E8:83:D1:D2:31:3A:14:E8:65:9F:60:4A:65:D6:5C:E3:9A:3F:82:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.folf.systems/repo/Folf-Systems/0/E883D1D2313A14E8659F604A65D65CE39A3F826B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IPR0jE6FOhln2BKZdZc45o_gms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.folf.systems/repo/Folf-Systems/0/323030313a3637633a6233633a3a2f34382d3438203d3e20323030333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b3c::/48
Signature Algorithm: sha256WithRSAEncryption
23:9a:a7:26:24:8d:84:8e:6d:cd:13:c8:0e:a2:ef:aa:e0:c0:
33:54:ff:8f:ab:2d:27:72:21:94:8f:fa:b1:af:f3:a4:2e:d6:
56:02:27:83:d9:53:3d:05:01:a8:72:3f:e3:41:93:95:66:a2:
7f:d3:23:9e:b3:93:31:e6:14:5c:79:7d:90:a5:c5:00:2c:8f:
ac:af:f2:18:0b:1c:25:4d:d3:2d:03:73:21:cc:5a:d2:83:c3:
0a:59:c7:07:84:5f:9e:c2:e8:fd:cd:c2:5f:68:60:da:63:5c:
f9:06:b8:1b:42:98:32:df:1d:0c:73:3f:a3:20:37:d3:96:56:
e4:dd:2b:f6:eb:0e:2e:09:c0:fc:8c:b5:94:f6:4c:e0:98:6e:
12:2f:94:3a:b3:4b:ae:d2:4b:34:da:d1:6e:09:6c:4e:41:e1:
36:ab:52:7b:75:fd:1c:e9:81:aa:32:af:6d:31:c1:8f:f9:36:
47:94:e9:b6:46:f5:2e:8c:4c:89:21:f9:24:25:a0:45:a5:89:
0f:9e:18:91:ca:d3:fa:c2:2a:be:61:46:49:1d:e3:07:36:7a:
ca:4c:51:4f:5e:39:d5:a2:4b:fb:96:18:33:91:68:57:4f:1f:
56:8e:4b:21:68:52:3a:bd:27:e6:b7:1a:62:26:ca:0c:fc:4b:
76:98:be:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 14:59:35 2025 by rpki-client