Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215549.roa
File: AS215549.roa (raw, json)
Hash identifier: jeMeF5AqYIO9ZSj5a0vIXJ2BHdcjDjb9NRZb4oss44s=
Subject key identifier: 90:45:82:3E:7D:08:D3:B9:31:5F:21:48:AD:39:6B:D3:C3:9E:5B:05
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 09C768AE7B602B048D11B1BC93F1AC523E036C71
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215549.roa
Signing time: Tue 26 Mar 2024 10:16:34 +0000
ROA not before: Tue 26 Mar 2024 10:11:34 +0000
ROA not after: Tue 25 Mar 2025 10:16:34 +0000
asID: 215549
IP address blocks: 2a06:9f81:1300::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c7:68:ae:7b:60:2b:04:8d:11:b1:bc:93:f1:ac:52:3e:03:6c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Mar 26 10:11:34 2024 GMT
Not After : Mar 25 10:16:34 2025 GMT
Subject: CN=9045823E7D08D3B9315F2148AD396BD3C39E5B05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:9f:c9:58:bb:91:55:86:b0:4f:57:da:c9:
f7:65:6e:82:ed:cc:f6:da:62:07:f6:56:8e:4f:21:
70:f4:7c:24:60:79:55:46:1c:81:9d:93:4a:d3:61:
b8:74:89:3e:00:4b:2e:96:24:b6:ca:1d:6e:0d:cb:
53:80:9a:1e:94:0e:7f:36:06:f1:9a:02:1a:ff:03:
77:ce:d8:66:c5:06:d2:7b:52:5b:a5:75:a6:3b:ef:
f6:18:e0:fe:b0:4f:6d:8a:54:ad:ca:11:e9:57:19:
ad:31:c4:b0:43:c7:06:8c:82:f7:b5:ab:2c:f3:85:
7c:fa:c0:9d:be:04:c1:a8:39:d3:bb:b6:b9:60:d0:
15:e1:f2:17:58:c1:00:cb:d9:4e:3b:80:dc:20:22:
66:67:fd:63:07:04:3b:52:71:4c:5c:17:0b:f0:32:
55:65:b1:99:85:a6:70:a1:df:1d:ff:06:41:d4:46:
fc:a8:a7:2c:e9:49:91:17:a4:6c:46:96:7e:de:ac:
11:e2:4e:5e:71:ce:c0:e1:bd:e5:f2:52:44:dc:ed:
0e:50:f7:a4:0a:72:ab:19:a5:c8:9f:26:76:81:51:
6d:76:ce:8f:a1:f1:27:4b:50:fe:ce:d9:ad:26:99:
8f:a0:de:aa:7d:0b:fa:d2:11:1d:9c:67:23:5a:9b:
50:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:45:82:3E:7D:08:D3:B9:31:5F:21:48:AD:39:6B:D3:C3:9E:5B:05
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215549.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:1300::/40
Signature Algorithm: sha256WithRSAEncryption
20:0c:4f:a2:b5:84:b9:d4:3b:2e:67:e3:c4:fd:a8:74:1e:ea:
db:bc:47:10:ac:da:b5:a0:d5:9d:9e:c0:91:76:1a:66:5e:8a:
00:9d:3a:af:4b:6d:9f:7f:bb:62:a9:8d:a9:b8:5c:b0:27:e1:
5b:be:ab:d0:14:83:bb:e8:d2:45:54:3a:c8:61:0d:5f:fe:fd:
fc:12:e5:40:ba:98:06:f6:1f:d4:f0:20:48:e5:af:ee:a7:9d:
ac:8a:ab:68:0e:40:0a:59:c1:b8:0d:89:d6:13:26:d5:6a:10:
e9:a6:dd:04:c3:50:00:81:df:5a:92:03:8a:c9:44:25:64:ea:
29:67:c0:02:f6:fe:46:50:48:8d:08:4d:c4:f0:a1:61:e4:07:
dc:2e:a7:54:30:a5:23:63:5f:75:80:ab:61:d5:51:59:3b:07:
c4:aa:8d:3e:d0:46:87:c6:d6:e6:33:34:bf:4d:8f:ac:ef:3b:
62:06:7d:30:d5:c9:f5:3c:ef:0a:b7:77:1b:ca:54:1a:8a:06:
5b:cf:63:50:c3:f1:f8:e3:34:af:02:60:d6:63:ad:38:db:aa:
7d:78:fe:1f:ee:01:8b:dc:3c:c1:34:5f:91:48:b4:9d:fc:ba:
33:20:59:a1:34:7d:3a:6d:35:74:b6:f6:48:1c:b6:c4:3e:4d:
c9:59:a0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:25:37 2025 by rpki-client