Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6665313a3a2f34382d3438203d3e20323033313639.roa
File: 323630323a666166643a6665313a3a2f34382d3438203d3e20323033313639.roa (raw, json)
Hash identifier: tKIDC1H+jOWlCdd0PJQhcujIWtzKTyGia775bL3kTsg=
Subject key identifier: C6:E9:12:12:8D:C2:B8:1E:81:59:38:80:69:A0:2E:46:4F:B7:83:C2
Certificate issuer: /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial: 4ADF904224342BA23381B60B00C7A07277CF5ED8
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6665313a3a2f34382d3438203d3e20323033313639.roa
Signing time: Thu 15 Aug 2024 12:49:45 +0000
ROA not before: Thu 15 Aug 2024 12:44:45 +0000
ROA not after: Thu 14 Aug 2025 12:49:45 +0000
asID: 203169
IP address blocks: 2602:fafd:fe1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Dec 2024 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:df:90:42:24:34:2b:a2:33:81:b6:0b:00:c7:a0:72:77:cf:5e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Validity
Not Before: Aug 15 12:44:45 2024 GMT
Not After : Aug 14 12:49:45 2025 GMT
Subject: CN=C6E912128DC2B81E8159388069A02E464FB783C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:e5:10:b0:0c:01:58:c3:b1:ef:71:dd:cc:
1a:92:c8:39:23:6d:94:95:35:46:e7:2e:6a:c1:fb:
ee:1d:a9:91:34:6d:aa:ad:ea:ff:25:57:69:ef:b8:
91:72:4f:24:49:e3:dc:22:4b:7c:b5:79:32:03:5f:
49:c9:03:85:48:8a:05:1d:3c:36:df:63:1b:fd:6e:
95:5c:65:78:cd:9b:4f:9c:8c:b4:30:35:31:54:c1:
53:8a:33:25:0b:d1:cc:cb:6a:2d:11:6e:f8:1f:4a:
d1:87:c0:b9:63:5f:05:39:a4:49:65:c2:5b:4b:3e:
13:bf:10:2d:8c:e4:31:2a:1b:54:6e:b1:ba:fd:2f:
e9:43:30:60:8f:29:de:9b:f7:83:f6:44:07:9e:88:
c6:02:84:f5:26:71:e3:b5:fb:10:13:0c:aa:90:01:
1a:cd:cc:d8:d1:ac:f6:bc:9f:df:23:65:ed:ef:cd:
00:2b:64:8f:7c:b2:3e:a2:9a:bb:14:ef:e4:9c:b0:
e5:b2:bc:20:f5:c3:3d:b4:ce:e9:a2:6e:75:59:f2:
4c:2d:4b:4a:7e:66:73:40:89:d7:c4:a4:74:55:60:
4c:17:b0:b1:ae:29:05:d8:27:c3:73:7f:b5:49:0c:
d1:d2:cb:3f:9b:55:0d:d2:b9:a0:56:f5:f9:55:8b:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E9:12:12:8D:C2:B8:1E:81:59:38:80:69:A0:2E:46:4F:B7:83:C2
X509v3 Authority Key Identifier:
keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6665313a3a2f34382d3438203d3e20323033313639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fafd:fe1::/48
Signature Algorithm: sha256WithRSAEncryption
4e:2b:f5:c1:34:e9:a2:27:a2:ed:e8:85:b4:f1:20:f7:83:ed:
e2:59:02:07:f1:1c:24:a8:88:1c:be:78:f2:e5:6e:75:5d:a6:
6e:04:20:eb:bc:74:c7:02:99:4b:f6:e9:fd:ff:37:b1:b4:89:
bd:60:9d:1c:94:e8:a5:67:3f:90:07:5c:5e:c2:a0:aa:da:4a:
59:3f:b1:2f:41:6d:70:59:ae:4a:1b:5c:a2:35:0f:ff:fa:c6:
09:ba:10:42:fc:c9:97:50:7e:f9:88:59:69:35:6f:69:9e:18:
1b:4a:78:1b:3a:13:8b:80:c5:98:aa:00:0b:7e:59:14:5b:96:
44:4d:fe:cb:9a:52:59:b2:27:6d:ab:67:53:10:61:9a:f8:cc:
cb:80:ab:58:5b:0c:ae:3c:f2:d5:d6:e1:d8:63:08:8e:b0:85:
df:27:9f:b5:53:f8:c6:fc:45:04:56:56:01:cf:6b:f6:4f:38:
5d:4b:16:df:10:a8:b7:f7:dc:90:1b:73:57:85:cc:b1:39:51:
f1:96:77:5d:be:73:59:0b:52:e1:dd:19:8f:90:e0:6e:a1:4e:
6d:cc:d1:e3:7b:59:16:59:09:ec:ec:60:47:aa:0a:73:66:cc:
a8:76:d5:2e:6b:50:fd:e3:82:ef:9e:a2:0a:d7:e5:0d:61:a0:
06:47:50:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:29:42 2025 by rpki-client