![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e203335393133.roa
File: 3231362e3134362e32372e302f32342d3234203d3e203335393133.roa (raw, json)
Hash identifier: ewkOZlCUXitrMratsBA5pKGxYwSocBdw3/KV0qkV8LY=
Subject key identifier: 37:EE:C4:69:B2:95:8A:AE:8D:D9:DC:6E:44:68:52:31:1B:30:67:E0
Certificate issuer: /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial: 25F957726BD7E5D8EE6039A78D04D7FD35ACFB5F
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e203335393133.roa
Signing time: Sat 24 Jun 2023 00:04:48 +0000
ROA not before: Fri 23 Jun 2023 23:59:48 +0000
ROA not after: Sat 22 Jun 2024 00:04:48 +0000
asID: 35913
IP address blocks: 216.146.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f9:57:72:6b:d7:e5:d8:ee:60:39:a7:8d:04:d7:fd:35:ac:fb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Validity
Not Before: Jun 23 23:59:48 2023 GMT
Not After : Jun 22 00:04:48 2024 GMT
Subject: CN=37EEC469B2958AAE8DD9DC6E446852311B3067E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:4d:b3:fd:9c:a1:c9:11:31:e1:2a:43:b8:
36:ec:ff:04:fd:ec:0d:72:2b:0a:7c:c6:2c:d2:8e:
f6:98:a7:be:af:d7:f1:b4:70:d9:21:12:30:a0:df:
96:ca:e5:ca:33:ed:c5:95:7f:1d:fb:5e:06:ee:2c:
7b:d4:78:49:7d:4a:46:62:1b:94:84:36:e0:83:0f:
ae:1e:2f:72:94:ae:35:f7:a9:67:f6:6c:9a:50:a7:
4a:4e:a7:44:ad:f6:28:f9:ad:1e:31:f6:a6:38:30:
92:25:8e:bf:18:6a:e3:41:c4:37:f9:8b:34:3f:69:
30:9d:14:56:8c:28:c3:a0:e3:15:cd:fa:25:69:92:
40:75:c4:ea:62:b9:27:10:1e:ab:ba:91:a0:73:57:
31:2e:bd:e7:f0:f6:1a:58:ff:7b:39:40:30:ec:8e:
cb:d1:08:43:87:e7:da:54:0a:57:db:12:57:f1:e2:
8c:49:d3:83:b4:ae:15:dd:3e:f8:57:9e:80:38:c7:
f4:d2:b1:be:f0:ad:0d:07:7d:a9:6d:bc:2f:cf:74:
d6:6f:d4:be:a3:3c:15:cf:87:bf:c2:3a:99:ea:ab:
22:ab:95:9c:53:6e:e5:19:de:b9:c6:d3:83:02:d7:
8d:9b:67:c9:55:ec:1e:a8:c0:88:0e:72:28:6a:f1:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EE:C4:69:B2:95:8A:AE:8D:D9:DC:6E:44:68:52:31:1B:30:67:E0
X509v3 Authority Key Identifier:
keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e203335393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.27.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:bb:3f:4d:12:b3:1e:63:22:12:6c:29:a9:2d:a5:90:02:06:
0c:7a:9c:ca:58:83:f1:55:48:65:24:e4:31:32:fa:b6:8a:14:
48:f8:bf:3f:d2:d3:7e:38:49:80:f7:03:52:42:1a:ab:98:50:
8e:8a:9d:49:14:7b:98:7a:ce:3a:af:aa:a2:22:31:7a:02:96:
2e:fa:2f:cf:d2:ca:0f:1e:27:1d:0f:e7:d4:50:56:7a:04:a7:
3f:72:45:96:64:bc:91:40:bc:07:57:71:fb:c8:8a:16:e5:a8:
52:47:2b:3e:54:89:1f:dd:2f:ec:23:e4:ec:33:f8:b9:a7:6a:
3c:a6:36:78:e5:52:63:5b:81:7b:85:cb:bc:e5:24:02:70:ae:
55:42:5b:c8:d7:ba:fc:a8:82:af:44:e1:9a:30:05:e0:5b:b2:
6b:f5:76:f6:77:c4:fd:94:a7:a2:7f:4c:5e:8c:e1:ed:4b:b7:
30:9f:37:dd:15:8c:e6:83:b1:4d:bb:09:22:9d:49:60:68:d3:
e4:b5:85:6b:2c:da:a5:e0:8f:e5:ff:37:a8:9e:7e:7a:ce:8b:
35:61:48:e6:97:17:5c:b8:2e:c8:0e:76:da:c3:72:ad:81:13:
48:cc:04:8e:00:cd:42:07:26:1a:2f:1b:56:5b:fa:bc:da:df:
21:5d:50:e7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIUJflXcmvX5djuYDmnjQTX/TWs+18wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTExYWU5MjEz
YjUwNmI3OGJmOTkyNGFkNDIwHhcNMjMwNjIzMjM1OTQ4WhcNMjQwNjIyMDAwNDQ4
WjAzMTEwLwYDVQQDEygzN0VFQzQ2OUIyOTU4QUFFOEREOURDNkU0NDY4NTIzMTFC
MzA2N0UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLZNs/2cockR
MeEqQ7g27P8E/ewNcisKfMYs0o72mKe+r9fxtHDZIRIwoN+WyuXKM+3FlX8d+14G
7ix71HhJfUpGYhuUhDbggw+uHi9ylK4196ln9myaUKdKTqdErfYo+a0eMfamODCS
JY6/GGrjQcQ3+Ys0P2kwnRRWjCjDoOMVzfolaZJAdcTqYrknEB6rupGgc1cxLr3n
8PYaWP97OUAw7I7L0QhDh+faVApX2xJX8eKMSdODtK4V3T74V56AOMf00rG+8K0N
B32pbbwvz3TWb9S+ozwVz4e/wjqZ6qsiq5WcU27lGd65xtODAteNm2fJVeweqMCI
DnIoavEjawIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFDfuxGmylYqujdncbkRoUjEb
MGfgMB8GA1UdIwQYMBaAFGvsGu1lCLsHURsBsXdVF5La6yyQMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8yLzZCRUMxQUVENjUwOEJCMDc1MTFCMDFC
MTc3NTUxNzkyREFFQjJDOTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMTMwMzVjZC1jNDZkLTQy
MWMtYjllMC1lNmQ0ZGQzMzZkMjEvY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTEx
YWU5MjEzYjUwNmI3OGJmOTkyNGFkNDIuY2VyMIGIBggrBgEFBQcBCwR8MHoweAYI
KwYBBQUHMAuGbHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xP
VURJRS1SUEtJLzIvMzIzMTM2MmUzMTM0MzYyZTMyMzcyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzMzM1MzkzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JIbMA0GCSqGSIb3DQEBCwUA
A4IBAQCduz9NErMeYyISbCmpLaWQAgYMepzKWIPxVUhlJOQxMvq2ihRI+L8/0tN+
OEmA9wNSQhqrmFCOip1JFHuYes46r6qiIjF6ApYu+i/P0soPHicdD+fUUFZ6BKc/
ckWWZLyRQLwHV3H7yIoW5ahSRys+VIkf3S/sI+TsM/i5p2o8pjZ45VJjW4F7hcu8
5SQCcK5VQlvI17r8qIKvROGaMAXgW7Jr9Xb2d8T9lKeif0xejOHtS7cwnzfdFYzm
g7FNuwkinUlgaNPktYVrLNql4I/l/zeonn56zos1YUjmlxdcuC7IDnbaw3KtgRNI
zASOAM1CByYaLxtWW/q82t8hXVDn
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:07 2025 by rpki-client