Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa
File: 326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa (raw, json)
Hash identifier: 9FuIWN2ec49H8+soA+LiveYXJ3y0qS/R7Tx2QWopf0U=
Subject key identifier: F5:B4:86:81:58:C0:16:E9:4A:1D:D0:14:09:AE:93:6A:E1:75:6D:34
Certificate issuer: /CN=CF1D094BB231C3433115D5C53880889E2E701056
Certificate serial: 72CFC63BFD5D37115DC5784E7D90891B9657785E
Authority key identifier: CF:1D:09:4B:B2:31:C3:43:31:15:D5:C5:38:80:88:9E:2E:70:10:56
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/CF1D094BB231C3433115D5C53880889E2E701056.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa
Signing time: Thu 21 Aug 2025 11:41:42 +0000
ROA not before: Thu 21 Aug 2025 11:36:42 +0000
ROA not after: Thu 20 Aug 2026 11:41:42 +0000
asID: 205941
IP address blocks: 2a0b:4e07:af0::/44 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:cf:c6:3b:fd:5d:37:11:5d:c5:78:4e:7d:90:89:1b:96:57:78:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF1D094BB231C3433115D5C53880889E2E701056
Validity
Not Before: Aug 21 11:36:42 2025 GMT
Not After : Aug 20 11:41:42 2026 GMT
Subject: CN=F5B4868158C016E94A1DD01409AE936AE1756D34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:dc:14:be:67:82:16:c3:72:49:3b:1e:c6:
a9:86:8c:63:6c:5d:cd:2f:dd:f7:fc:7c:d3:03:4a:
ee:e4:47:0c:92:d8:49:f5:b6:fc:15:0e:cc:c9:5d:
5d:5d:0a:d3:7a:9a:54:8d:b5:c2:60:a4:1f:8e:15:
5b:61:a1:a9:e8:82:c3:45:2b:3f:b2:f7:e0:cf:6d:
e2:8d:ce:60:7c:c6:da:38:70:14:77:60:6c:77:47:
76:0f:55:9d:33:b9:34:fc:97:85:31:d1:74:ab:3e:
43:7a:f1:a5:3a:79:ba:14:97:b9:66:51:a2:a6:b9:
2d:bf:f3:9e:7d:da:85:9d:93:20:1d:27:f7:18:20:
57:15:0c:12:55:90:7e:b6:1f:0c:35:d6:ed:61:bf:
58:91:65:87:9a:df:e8:37:32:61:3d:0a:b5:03:5c:
59:1a:9e:ca:db:eb:26:c0:a3:39:04:87:c7:54:db:
1b:b2:8c:19:51:b6:d9:ed:6f:75:60:48:c2:ec:56:
8a:a9:57:25:e4:07:7d:80:f3:d8:40:3b:46:02:82:
b4:48:2c:89:7c:8e:c9:b7:56:e2:c3:e9:c2:af:83:
ab:7a:fa:a5:ae:eb:2c:c9:61:d0:a5:ad:9f:aa:4f:
1d:37:c8:58:15:c8:4b:b3:ec:6d:0e:5c:47:74:98:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:86:81:58:C0:16:E9:4A:1D:D0:14:09:AE:93:6A:E1:75:6D:34
X509v3 Authority Key Identifier:
keyid:CF:1D:09:4B:B2:31:C3:43:31:15:D5:C5:38:80:88:9E:2E:70:10:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/CF1D094BB231C3433115D5C53880889E2E701056.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:af0::/44
Signature Algorithm: sha256WithRSAEncryption
43:1a:b1:20:f5:70:38:e8:9f:72:3f:94:83:b0:e6:87:de:95:
75:ad:c0:a3:67:2e:6a:60:01:90:8d:56:fe:d0:a8:b0:25:55:
e8:9f:93:92:98:50:4d:bf:71:84:91:77:ac:13:9a:3c:90:99:
4b:5d:20:61:67:c8:29:47:48:19:c4:4c:62:e1:63:d2:b3:f4:
8b:97:12:b4:9a:bf:25:07:ea:6b:d9:df:1e:7b:cb:af:47:7e:
8c:03:f5:f6:da:67:b4:e2:d9:83:ca:94:23:ee:36:3b:25:44:
a0:18:41:02:bd:cd:07:de:3c:0b:4d:2b:91:2d:92:01:80:c6:
bf:10:07:65:0b:94:23:b2:b0:ff:2f:51:ea:f4:04:ee:49:8b:
08:e3:4b:4a:17:af:74:eb:6b:36:3c:d4:5a:15:a7:1d:05:cd:
9a:16:8a:b5:ee:fd:f3:3c:62:37:5c:6d:35:fe:69:85:d7:0d:
81:1e:6f:ac:e3:c5:f8:ae:56:e1:48:2f:24:84:dc:72:2e:2d:
91:3f:aa:21:c9:0e:88:5a:f6:20:1f:da:62:f0:ba:94:13:7c:
cd:37:fd:56:38:9f:a3:0d:58:36:53:e9:f8:23:85:61:d9:07:
52:72:e3:5e:a0:14:4f:20:62:2d:f1:37:6a:6f:cd:90:38:66:
ed:39:ea:81
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUcs/GO/1dNxFdxXhOfZCJG5ZXeF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxRDA5NEJCMjMxQzM0MzMxMTVENUM1Mzg4MDg4OUUy
RTcwMTA1NjAeFw0yNTA4MjExMTM2NDJaFw0yNjA4MjAxMTQxNDJaMDMxMTAvBgNV
BAMTKEY1QjQ4NjgxNThDMDE2RTk0QTFERDAxNDA5QUU5MzZBRTE3NTZEMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgNwUvmeCFsNySTsexqmGjGNs
Xc0v3ff8fNMDSu7kRwyS2En1tvwVDszJXV1dCtN6mlSNtcJgpB+OFVthoanogsNF
Kz+y9+DPbeKNzmB8xto4cBR3YGx3R3YPVZ0zuTT8l4Ux0XSrPkN68aU6eboUl7lm
UaKmuS2/85592oWdkyAdJ/cYIFcVDBJVkH62Hww11u1hv1iRZYea3+g3MmE9CrUD
XFkansrb6ybAozkEh8dU2xuyjBlRttntb3VgSMLsVoqpVyXkB32A89hAO0YCgrRI
LIl8jsm3VuLD6cKvg6t6+qWu6yzJYdClrZ+qTx03yFgVyEuz7G0OXEd0mDm3AgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQU9bSGgVjAFulKHdAUCa6TauF1bTQwHwYDVR0j
BBgwFoAUzx0JS7Ixw0MxFdXFOICIni5wEFYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjdlYmRlMDMtMzRkZi00ZjJjLTkyZmEtOGZlMWQwODNk
MTVkLzIvQ0YxRDA5NEJCMjMxQzM0MzMxMTVENUM1Mzg4MDg4OUUyRTcwMTA1Ni5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz
MDUzZjgyMGY1LzEvQ0YxRDA5NEJCMjMxQzM0MzMxMTVENUM1Mzg4MDg4OUUyRTcw
MTA1Ni5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjdlYmRlMDMt
MzRkZi00ZjJjLTkyZmEtOGZlMWQwODNkMTVkLzIvMzI2MTMwNjIzYTM0NjUzMDM3
M2E2MTY2MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMwMzUzOTM0MzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQqC04HCvAwDQYJKoZIhvcNAQELBQADggEBAEMasSD1cDjon3I/lIOw
5ofelXWtwKNnLmpgAZCNVv7QqLAlVeifk5KYUE2/cYSRd6wTmjyQmUtdIGFnyClH
SBnETGLhY9Kz9IuXErSavyUH6mvZ3x57y69HfowD9fbaZ7Ti2YPKlCPuNjslRKAY
QQK9zQfePAtNK5EtkgGAxr8QB2ULlCOysP8vUer0BO5JiwjjS0oXr3TrazY81FoV
px0FzZoWirXu/fM8YjdcbTX+aYXXDYEeb6zjxfiuVuFILySE3HIuLZE/qiHJDoha
9iAf2mLwupQTfM03/VY4n6MNWDZT6fgjhWHZB1Jy416gFE8gYi3xN2pvzZA4Zu05
6oE=
-----END CERTIFICATE-----
Generated at Sun Sep 7 17:29:08 2025 by rpki-client