Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199582.roa
File: AS199582.roa (raw, json)
Hash identifier: BSQTe46BcO9yz0kvZC1hpClBqRcrB6ugHpXzEHutsXw=
Subject key identifier: 97:E3:06:34:FB:E3:FA:E1:8D:95:BC:2A:92:6D:85:C2:AA:1D:B9:D1
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 1BF28BFB7834661AF4C9121F0FDBD61349C80F88
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199582.roa
Signing time: Fri 24 Mar 2023 06:08:36 +0000
ROA not before: Fri 24 Mar 2023 06:03:36 +0000
ROA not after: Fri 22 Mar 2024 06:08:36 +0000
asID: 199582
IP address blocks: 2a05:dfc1:1400::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:f2:8b:fb:78:34:66:1a:f4:c9:12:1f:0f:db:d6:13:49:c8:0f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Mar 24 06:03:36 2023 GMT
Not After : Mar 22 06:08:36 2024 GMT
Subject: CN=97E30634FBE3FAE18D95BC2A926D85C2AA1DB9D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:ad:ff:3d:12:b4:83:fb:06:df:67:b1:4d:
5f:6f:80:ff:17:94:79:06:7f:ca:f4:42:9b:ab:be:
97:3b:85:55:f0:1c:ec:4f:67:8b:27:58:e5:f9:75:
23:e2:8a:19:1c:20:1d:11:cf:50:07:f8:20:97:ef:
e3:c0:fd:3c:20:70:02:0f:ad:0c:a8:a3:c0:b0:46:
99:21:a2:7d:10:4d:32:9a:1a:41:b8:1e:d2:d0:16:
9e:c2:dd:f4:8d:c9:92:a9:1b:66:3c:71:a7:2b:54:
f0:91:a7:51:7b:92:51:25:27:10:be:69:bc:f1:8f:
b4:7b:9e:f1:7a:5c:2d:76:30:51:27:a3:fd:66:c8:
a8:50:c5:cb:57:a9:57:af:5b:6c:1b:2b:83:ae:12:
fe:38:8c:fb:65:7d:f9:40:50:b9:a4:f5:8b:f0:08:
26:83:36:94:d6:58:08:e9:05:03:2d:e5:e6:d6:eb:
a2:e3:45:d4:46:2a:bf:a2:f2:14:ef:17:3c:28:99:
d8:ba:89:7a:b6:3b:23:70:97:09:77:06:68:32:62:
65:88:d9:ab:12:be:f4:3d:9a:0c:af:52:0b:28:c0:
3b:05:c4:6b:aa:05:db:9d:7b:06:a6:e8:1e:2f:cf:
9e:4f:99:20:49:ec:1b:ac:6f:ae:d0:63:99:c8:23:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E3:06:34:FB:E3:FA:E1:8D:95:BC:2A:92:6D:85:C2:AA:1D:B9:D1
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199582.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:1400::/40
Signature Algorithm: sha256WithRSAEncryption
72:6c:34:66:87:d7:06:9b:90:e1:d3:1d:35:c0:e6:48:89:0e:
53:27:5c:af:da:63:3f:3a:ff:2a:b8:93:b2:1e:3d:0e:67:b2:
88:34:25:77:5d:34:52:d5:ab:cf:c2:98:ff:72:12:f7:0b:39:
8f:bd:e1:64:88:32:83:87:8d:f7:70:0c:1d:05:8b:8a:cc:d9:
fe:e0:62:29:29:36:58:e5:c9:1f:b2:69:e9:8a:db:7e:ed:6a:
9f:9e:61:8b:b6:8a:5f:48:6f:33:3a:e4:78:15:4c:5a:a4:d0:
2f:26:a7:4b:c7:c8:b3:92:c8:f1:9e:89:1a:bb:18:be:e0:de:
d0:3a:8b:cd:04:79:8f:a7:d1:25:05:fb:4d:35:72:48:d1:78:
c6:b3:6d:ea:d9:f1:0e:7d:f4:d8:7e:7c:28:12:70:aa:3c:e7:
10:81:81:41:12:5a:20:82:1f:31:19:3c:f5:83:51:ff:c8:c3:
dc:ee:2e:90:83:31:e8:5a:5f:46:24:03:7c:57:cc:a1:81:26:
56:b5:ce:35:70:02:1e:39:d7:bf:a0:1f:44:a3:e0:b0:ee:e4:
7a:e1:5b:8a:6c:b8:6f:28:94:9d:a7:ed:2f:6d:6f:5d:5e:47:
5b:06:52:7d:48:c9:a3:1b:ab:81:37:65:30:ba:bc:57:fe:e6:
03:6d:01:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org