Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393137383a3a2f34382d3438203d3e20323135363134.roa
File: 326130353a646663313a393137383a3a2f34382d3438203d3e20323135363134.roa (raw, json)
Hash identifier: SEIKnVfhYHfXnUWeU0A3cHGCQBC6cucrcd/4RD4etOA=
Subject key identifier: 34:D4:EE:FC:FC:39:62:64:35:52:40:90:DB:9B:BD:BC:23:C1:D6:B0
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 0720F282B3491389B059DE7664422946F02981E0
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393137383a3a2f34382d3438203d3e20323135363134.roa
Signing time: Tue 30 Jan 2024 18:34:56 +0000
ROA not before: Tue 30 Jan 2024 18:29:56 +0000
ROA not after: Tue 28 Jan 2025 18:34:56 +0000
asID: 215614
IP address blocks: 2a05:dfc1:9178::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:20:f2:82:b3:49:13:89:b0:59:de:76:64:42:29:46:f0:29:81:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Jan 30 18:29:56 2024 GMT
Not After : Jan 28 18:34:56 2025 GMT
Subject: CN=34D4EEFCFC39626435524090DB9BBDBC23C1D6B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:07:1f:2e:65:fb:c9:6b:0e:4f:08:16:59:
17:63:d3:94:6a:f0:bc:70:00:ae:9d:e1:4d:a4:26:
2b:5e:4e:e5:8c:b4:e8:d7:82:1d:c3:71:c1:52:c6:
8e:cc:d5:1c:6e:18:31:84:a1:5f:50:1d:d1:be:09:
ac:78:09:7c:8d:e8:7a:1f:1a:65:5f:89:1e:3c:2c:
59:43:ff:55:f4:3b:98:b7:2d:4b:5b:16:61:fc:c3:
14:74:20:78:9f:1b:94:01:1c:c4:40:d9:63:b6:5b:
b0:57:f0:c4:09:a8:cb:51:aa:e0:25:20:4a:b0:95:
3c:fe:3b:7f:2f:dc:12:a9:05:1c:d8:87:4b:d3:a1:
43:88:d3:7b:3c:83:f7:88:93:fd:61:43:9b:80:b3:
a4:45:be:04:a6:e1:4e:06:d4:fa:4a:b7:bf:5d:e3:
36:b7:be:31:7c:3b:4d:7f:40:08:27:27:dd:28:44:
64:08:a2:86:cf:ab:5a:f7:96:87:f9:1b:5f:61:da:
8e:22:21:6a:4f:a2:d6:e5:43:3a:4d:ef:7d:a4:06:
85:ae:e2:70:66:0c:25:fc:3e:62:81:3e:5b:07:e9:
2b:f4:17:43:b7:51:c9:86:ac:39:a2:c8:7a:08:da:
7e:dc:1c:a5:d0:8c:6c:7f:c9:51:10:e3:c2:45:8f:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D4:EE:FC:FC:39:62:64:35:52:40:90:DB:9B:BD:BC:23:C1:D6:B0
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393137383a3a2f34382d3438203d3e20323135363134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9178::/48
Signature Algorithm: sha256WithRSAEncryption
2a:20:9b:28:7f:14:04:7b:b0:e7:79:6f:35:46:10:83:9d:5f:
e9:60:d1:08:8b:39:0f:9e:1a:ab:0b:86:c7:eb:54:27:ce:07:
79:fc:4e:21:4c:0b:d7:b7:01:7a:39:ad:cd:9c:5d:6c:c5:f7:
00:8b:6c:b8:c4:e0:fc:6b:bc:7b:54:ca:15:fe:20:0a:ee:ec:
37:7f:09:07:ea:09:6c:7a:13:2b:2e:d7:bc:f6:c5:74:0e:2c:
61:54:2b:46:36:cc:de:bb:b3:91:d8:e3:44:73:21:70:ba:31:
e7:4c:f0:07:bf:4e:8f:bc:fa:bc:a2:dc:ce:9f:b6:43:34:e3:
93:86:f7:b4:b8:12:fc:dc:61:87:0f:6b:47:ac:81:5d:fa:02:
9c:d4:72:c2:61:90:3e:a4:b0:5c:f7:48:a3:81:16:79:5c:76:
ee:8b:5c:54:77:9b:62:5d:99:ae:e6:61:64:2c:bb:68:04:1f:
41:f1:e0:b1:9c:13:1e:01:c2:da:ec:7c:e6:75:af:f9:71:d3:
59:74:5e:eb:58:75:70:d4:81:f6:62:d4:8d:0e:22:ce:84:12:
b7:8f:d0:3b:66:53:e8:39:f2:b0:6c:84:fb:5f:fd:b7:c4:73:
3e:cc:c7:6f:3d:e9:34:63:46:fd:66:f1:34:8c:58:a4:37:10:
62:97:9c:8a
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUByDygrNJE4mwWd52ZEIpRvApgeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRF
MDVFN0I3NjAeFw0yNDAxMzAxODI5NTZaFw0yNTAxMjgxODM0NTZaMDMxMTAvBgNV
BAMTKDM0RDRFRUZDRkMzOTYyNjQzNTUyNDA5MERCOUJCREJDMjNDMUQ2QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1lQcfLmX7yWsOTwgWWRdj05Rq
8LxwAK6d4U2kJiteTuWMtOjXgh3DccFSxo7M1RxuGDGEoV9QHdG+Cax4CXyN6Hof
GmVfiR48LFlD/1X0O5i3LUtbFmH8wxR0IHifG5QBHMRA2WO2W7BX8MQJqMtRquAl
IEqwlTz+O38v3BKpBRzYh0vToUOI03s8g/eIk/1hQ5uAs6RFvgSm4U4G1PpKt79d
4za3vjF8O01/QAgnJ90oRGQIoobPq1r3lof5G19h2o4iIWpPotblQzpN732kBoWu
4nBmDCX8PmKBPlsH6Sv0F0O3UcmGrDmiyHoI2n7cHKXQjGx/yVEQ48JFjxCxAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUNNTu/Pw5YmQ1UkCQ25u9vCPB1rAwHwYDVR0j
BBgwFoAU9zfYG/vv/e7J7DK3uGQRLeBee3YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzEvRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRFMDVFN0I3Ni5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y3MzdEODFCRkJFRkZE
RUVDOUVDMzJCN0I4NjQxMTJERTA1RTdCNzYuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2EyNWM3
ZC8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzkzMTM3MzgzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMjMxMzUzNjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/BkXgwDQYJKoZIhvcN
AQELBQADggEBACogmyh/FAR7sOd5bzVGEIOdX+lg0QiLOQ+eGqsLhsfrVCfOB3n8
TiFMC9e3AXo5rc2cXWzF9wCLbLjE4PxrvHtUyhX+IAru7Dd/CQfqCWx6Eysu17z2
xXQOLGFUK0Y2zN67s5HY40RzIXC6MedM8Ae/To+8+ryi3M6ftkM045OG97S4Evzc
YYcPa0esgV36ApzUcsJhkD6ksFz3SKOBFnlcdu6LXFR3m2Jdma7mYWQsu2gEH0Hx
4LGcEx4BwtrsfOZ1r/lx01l0XutYdXDUgfZi1I0OIs6EEreP0DtmU+g58rBshPtf
/bfEcz7Mx2896TRjRv1m8TSMWKQ3EGKXnIo=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:20 2025 by rpki-client