Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6632303a3a2f34342d3438203d3e20313939393732.roa
File: 323630323a666166643a6632303a3a2f34342d3438203d3e20313939393732.roa (raw, json)
Hash identifier: CPAcd/Nuh7aUQ6ki8d86mTNbTX8Bjo47sGzTQPg1Yus=
Subject key identifier: 60:40:82:DF:15:27:B7:79:5D:2E:58:2B:51:47:66:D9:B6:1E:68:F6
Certificate issuer: /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial: 434B907214C410B18F1B50E41771A82B096C2D13
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6632303a3a2f34342d3438203d3e20313939393732.roa
Signing time: Thu 12 Dec 2024 11:45:36 +0000
ROA not before: Thu 12 Dec 2024 11:40:36 +0000
ROA not after: Thu 11 Dec 2025 11:45:36 +0000
asID: 199972
IP address blocks: 2602:fafd:f20::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Dec 2024 09:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4b:90:72:14:c4:10:b1:8f:1b:50:e4:17:71:a8:2b:09:6c:2d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Validity
Not Before: Dec 12 11:40:36 2024 GMT
Not After : Dec 11 11:45:36 2025 GMT
Subject: CN=604082DF1527B7795D2E582B514766D9B61E68F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:e8:cf:09:bf:22:81:8c:e1:9b:b8:b8:23:
f0:e4:7b:f1:b8:5f:e2:ef:47:d7:46:52:9a:0c:ec:
c6:ba:5f:38:d7:a3:12:04:06:9f:c8:16:c5:92:d2:
52:d8:03:ca:90:4a:b8:87:ea:33:b7:bd:8b:d0:94:
c6:3d:8e:21:34:6e:0f:7b:61:47:67:9a:67:3a:b3:
fd:c0:cb:25:69:28:7a:3a:f4:01:23:fb:1c:21:7c:
fe:1b:65:07:ca:c0:b5:7c:bd:cf:82:23:9e:e2:c6:
70:02:eb:ca:7f:b0:f7:79:4a:15:dd:10:58:20:bc:
14:66:f7:4e:41:84:31:5f:08:a0:80:b6:ed:51:29:
33:8e:36:53:aa:6e:83:64:c8:3d:06:bb:ad:43:11:
b7:12:ff:20:36:f5:e9:01:f8:7d:a7:b7:f9:03:12:
9a:be:21:8b:72:2b:77:ef:b1:d2:a9:5a:b3:d9:fe:
00:2e:85:fe:25:e9:88:be:72:c8:b8:a8:2e:8c:be:
de:80:27:03:75:80:b3:10:ad:cb:6d:b4:3e:d5:a3:
c7:07:f8:b0:62:1d:ee:de:fc:f3:69:fd:d3:87:f7:
c7:0f:9c:d9:a4:f6:0f:ca:50:1a:2f:68:1c:9e:6d:
62:0f:f1:c8:6b:c6:8c:2d:1b:44:cd:52:02:af:28:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:40:82:DF:15:27:B7:79:5D:2E:58:2B:51:47:66:D9:B6:1E:68:F6
X509v3 Authority Key Identifier:
keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6632303a3a2f34342d3438203d3e20313939393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fafd:f20::/44
Signature Algorithm: sha256WithRSAEncryption
15:99:20:78:fc:7b:15:ad:d2:48:8b:80:cd:b9:5e:4e:47:fd:
b5:a2:dd:0b:16:6b:40:6c:82:3e:13:28:b5:bb:d3:c4:45:ce:
5e:7f:e9:00:a9:e3:12:24:05:05:e3:73:3b:32:b3:72:b5:79:
c6:e6:a9:b4:aa:a6:fc:7a:7c:2b:a5:2f:d7:b0:f2:a7:7f:dc:
38:a7:3e:91:8c:81:26:2b:f7:2e:6d:18:b5:ab:a4:26:32:50:
98:2d:a1:05:6d:99:67:b5:30:a5:59:c9:f9:e4:92:43:da:9c:
87:84:e1:01:04:a9:45:d2:ba:31:ac:c8:e0:0a:ed:02:6b:31:
ab:19:84:89:1c:55:34:43:17:5e:05:3b:fb:f3:23:10:da:8f:
4d:e6:e6:c3:b2:11:5b:c5:4e:4a:f1:c6:1d:25:44:78:a8:dd:
4c:bb:38:9d:0d:b9:3e:35:a7:88:04:68:47:75:93:9e:b0:9d:
d4:e6:5f:0d:db:b3:73:97:d6:00:99:c1:49:4e:ed:3e:eb:58:
3a:09:eb:2a:32:bc:aa:68:9b:bc:46:2f:89:c8:35:1b:b3:e8:
a2:49:c9:57:a1:5b:b5:be:6e:ea:8c:31:45:fa:3f:7f:68:e1:
d0:01:c9:3a:01:11:c5:ab:55:87:94:d0:b6:b9:a8:ed:ce:2c:
1b:43:0e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:30:54 2025 by rpki-client