Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336665663a3a2f34382d3438203d3e20323033303639.roa
File: 326130613a363034303a336665663a3a2f34382d3438203d3e20323033303639.roa (raw, json)
Hash identifier: 4qBSivitqqJ4/DmmQ9V90MqdyE+/65fJ/Ylo5zYg7A8=
Subject key identifier: C2:62:54:B8:29:8C:6F:43:22:61:74:6A:9B:5E:BA:7B:B3:3E:6E:15
Certificate issuer: /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Certificate serial: 1DAF1409D7D9B2ECEBF8B2F03550922B75B6CD05
Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336665663a3a2f34382d3438203d3e20323033303639.roa
Signing time: Sat 21 Jan 2023 03:19:15 +0000
ROA not before: Sat 21 Jan 2023 03:14:15 +0000
ROA not after: Sat 20 Jan 2024 03:19:15 +0000
asID: 203069
IP address blocks: 2a0a:6040:3fef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:af:14:09:d7:d9:b2:ec:eb:f8:b2:f0:35:50:92:2b:75:b6:cd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Validity
Not Before: Jan 21 03:14:15 2023 GMT
Not After : Jan 20 03:19:15 2024 GMT
Subject: CN=C26254B8298C6F432261746A9B5EBA7BB33E6E15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:a5:6e:56:11:12:3a:f1:1b:1c:4d:34:c5:
0e:36:00:5d:d2:c0:17:09:23:8d:92:88:39:91:91:
df:63:dd:12:4f:7f:b2:db:f0:08:69:22:76:e0:1e:
99:0b:1a:64:c5:6a:75:cb:05:33:e4:56:37:4f:4d:
5d:2d:c8:61:f2:6e:3e:49:13:9d:90:26:c1:9e:48:
c9:32:0a:75:1c:07:9d:30:f5:cd:98:a5:68:15:77:
b2:03:b5:76:3c:35:f1:e0:3a:83:37:70:0c:f7:66:
4b:1c:fa:3d:d0:0f:be:42:2d:f8:14:af:74:02:8d:
5a:35:08:29:15:2a:d5:4a:ed:db:ad:2e:60:2c:a2:
86:76:b5:bd:26:27:f2:fa:ac:e6:47:58:d0:cf:c7:
14:db:6f:fa:ce:1a:d6:72:28:39:68:9d:4b:6b:89:
37:61:8c:6d:b2:e3:1c:e6:4c:12:45:12:20:9f:4a:
24:f4:8f:af:37:43:6b:80:ed:f3:d4:14:70:e0:55:
73:23:ff:87:09:f3:da:73:dc:69:f5:d4:62:43:39:
c2:76:eb:f5:06:67:12:fd:81:56:80:a0:67:ea:20:
6f:9f:36:d4:e8:de:9d:7d:2a:42:44:b9:30:73:7f:
6c:5d:cd:79:a5:5f:c8:17:d9:8d:49:8d:d4:11:19:
74:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:62:54:B8:29:8C:6F:43:22:61:74:6A:9B:5E:BA:7B:B3:3E:6E:15
X509v3 Authority Key Identifier:
keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336665663a3a2f34382d3438203d3e20323033303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:3fef::/48
Signature Algorithm: sha256WithRSAEncryption
1d:45:18:7b:79:0a:c6:15:b5:e7:f5:a6:f4:fb:6e:17:f3:82:
bd:08:2e:e9:93:d6:91:0c:07:20:30:3a:be:11:dd:a0:72:f3:
27:3c:34:89:b7:71:ee:de:22:50:5f:70:70:60:89:ec:5b:7b:
58:f8:f4:bb:04:1d:01:49:c6:ce:51:a9:15:e1:b4:fa:91:41:
91:ff:c4:f5:53:8a:a0:36:d5:ff:bd:fc:e2:2a:57:31:b7:8a:
25:f8:dd:f5:a5:c5:7d:98:d3:6a:8c:05:51:a3:cc:52:c0:63:
2a:56:ab:02:5f:b2:0e:38:10:5d:ad:51:54:0a:c7:af:d6:41:
3c:3f:df:27:ef:2d:97:09:25:dc:25:bb:02:bd:76:eb:5f:c0:
7b:40:99:19:d9:9e:d3:9d:c9:c7:17:9c:5d:42:3a:80:b8:c3:
2e:2c:76:ce:1f:cd:89:be:25:13:64:25:e2:db:f2:2f:bd:d2:
b4:90:39:2a:f8:b9:d4:b5:c9:c6:62:5e:4d:fe:32:1e:bb:3a:
41:e6:40:3e:2a:cc:13:f2:af:fc:5a:24:8b:d5:cf:af:16:5d:
b2:dd:22:4d:99:6c:b8:d6:e7:95:ef:f0:ce:7a:f9:d1:0b:1b:
8e:1f:27:41:45:e3:1e:df:f0:88:22:d5:be:64:1d:df:31:b3:
9d:7d:51:7b
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUHa8UCdfZsuzr+LLwNVCSK3W2zQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAw
MTFBQzEyMjAeFw0yMzAxMjEwMzE0MTVaFw0yNDAxMjAwMzE5MTVaMDMxMTAvBgNV
BAMTKEMyNjI1NEI4Mjk4QzZGNDMyMjYxNzQ2QTlCNUVCQTdCQjMzRTZFMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XaVuVhESOvEbHE00xQ42AF3S
wBcJI42SiDmRkd9j3RJPf7Lb8AhpInbgHpkLGmTFanXLBTPkVjdPTV0tyGHybj5J
E52QJsGeSMkyCnUcB50w9c2YpWgVd7IDtXY8NfHgOoM3cAz3Zksc+j3QD75CLfgU
r3QCjVo1CCkVKtVK7dutLmAsooZ2tb0mJ/L6rOZHWNDPxxTbb/rOGtZyKDlonUtr
iTdhjG2y4xzmTBJFEiCfSiT0j683Q2uA7fPUFHDgVXMj/4cJ89pz3Gn11GJDOcJ2
6/UGZxL9gVaAoGfqIG+fNtTo3p19KkJEuTBzf2xdzXmlX8gX2Y1JjdQRGXQ5AgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUwmJUuCmMb0MiYXRqm166e7M+bhUwHwYDVR0j
BBgwFoAU+QC8ZeK2RuusRypd6hK9sAEawSIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y5MDBCQzY1RTJCNjQ2
RUJBQzQ3MkE1REVBMTJCREIwMDExQUMxMjIuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0
ZS8zLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzM2NjY1NjYzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMjMwMzMzMDM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAP+8wDQYJKoZIhvcN
AQELBQADggEBAB1FGHt5CsYVtef1pvT7bhfzgr0ILumT1pEMByAwOr4R3aBy8yc8
NIm3ce7eIlBfcHBgiexbe1j49LsEHQFJxs5RqRXhtPqRQZH/xPVTiqA21f+9/OIq
VzG3iiX43fWlxX2Y02qMBVGjzFLAYypWqwJfsg44EF2tUVQKx6/WQTw/3yfvLZcJ
JdwluwK9dutfwHtAmRnZntOdyccXnF1COoC4wy4sds4fzYm+JRNkJeLb8i+90rSQ
OSr4udS1ycZiXk3+Mh67OkHmQD4qzBPyr/xaJIvVz68WXbLdIk2ZbLjW55Xv8M56
+dELG44fJ0FF4x7f8Igi1b5kHd8xs519UXs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:56 2024 by rpki-client on console-ams.rpki-client.org