Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393137633a3a2f34382d3438203d3e20313938303537.roa
File: 326130353a646663313a393137633a3a2f34382d3438203d3e20313938303537.roa (raw, json)
Hash identifier: QMFKIfDtUOG44TJQRkXsAQgcOh/bjVEUEakuHOioa3U=
Subject key identifier: 7C:BB:28:10:CD:26:9A:FC:42:E2:90:ED:BB:06:12:C7:B0:F9:A3:1E
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 28C14B94ABEFC3F36ED727B00631851D84B9C085
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393137633a3a2f34382d3438203d3e20313938303537.roa
Signing time: Tue 30 Jan 2024 21:28:08 +0000
ROA not before: Tue 30 Jan 2024 21:23:08 +0000
ROA not after: Tue 28 Jan 2025 21:28:08 +0000
asID: 198057
IP address blocks: 2a05:dfc1:917c::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:c1:4b:94:ab:ef:c3:f3:6e:d7:27:b0:06:31:85:1d:84:b9:c0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Jan 30 21:23:08 2024 GMT
Not After : Jan 28 21:28:08 2025 GMT
Subject: CN=7CBB2810CD269AFC42E290EDBB0612C7B0F9A31E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:c0:68:dd:e7:16:6d:41:b3:08:d3:d8:be:
3e:16:e7:5f:6c:3f:b9:a7:e6:28:d5:72:d8:a4:f8:
7d:98:4b:c2:a8:3c:18:f6:7f:e5:fd:77:c1:e1:98:
0d:80:f0:58:19:28:22:ba:b0:e4:b2:6a:94:93:68:
fe:6d:81:3c:5d:91:48:f1:ba:ca:4b:15:8a:71:1d:
9b:29:80:e4:0c:25:2e:05:5b:39:35:b4:d5:0c:4d:
75:ab:21:2c:93:69:c6:93:44:b8:3a:d0:97:3f:41:
e6:fa:2c:19:3a:f6:23:ec:99:a1:47:71:2a:47:f3:
8e:02:92:a0:ef:96:74:b3:ba:8c:37:02:79:8f:8b:
f6:32:84:56:0d:9f:3d:b2:36:80:e5:7f:36:0f:db:
7d:50:44:72:80:06:41:30:77:8c:9e:6d:21:8f:ec:
7e:21:9b:f4:c9:1a:1a:7d:b8:59:e8:88:5b:29:f5:
5d:2c:be:01:71:0d:a9:77:2f:31:c0:6f:3e:0f:15:
dd:f9:80:f5:6e:26:eb:33:3d:eb:40:21:f2:15:b9:
4f:32:56:b2:a3:c0:a1:59:02:3e:e3:d9:12:1c:0a:
f1:a3:ef:1f:c2:fe:6e:5b:63:3e:68:c8:80:1a:87:
1d:1a:1a:2d:28:fe:e9:9a:ee:88:16:a1:1c:03:d9:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BB:28:10:CD:26:9A:FC:42:E2:90:ED:BB:06:12:C7:B0:F9:A3:1E
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393137633a3a2f34382d3438203d3e20313938303537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:917c::/48
Signature Algorithm: sha256WithRSAEncryption
0f:81:3b:13:04:52:bf:60:4d:f8:e4:bc:18:9f:6a:4c:c3:7e:
31:f4:95:24:a6:2d:d9:44:45:dc:e5:27:f5:f1:86:f1:eb:dd:
3b:ac:00:f9:93:27:3b:3a:dc:77:d6:1c:8f:67:ee:f0:18:1a:
72:ad:03:53:3f:9b:fc:e1:c7:09:0d:f4:3c:a9:75:93:91:a7:
ce:8a:b1:0c:91:3b:8d:5a:a3:ed:79:71:dd:98:92:e1:d0:3d:
cd:96:15:44:04:32:f6:f3:ed:51:f0:88:87:09:c5:e7:ed:b9:
d0:69:cb:47:e4:0e:76:b8:45:8e:2e:75:a3:67:93:8c:52:ea:
d4:65:30:25:9a:32:65:1c:e4:2c:08:90:d4:c0:9e:f5:21:e2:
34:33:8f:e8:ac:52:ba:84:1a:b2:00:e0:73:8b:c6:7e:93:42:
eb:58:8f:b0:45:09:8c:f2:e8:f0:ae:b4:23:39:91:4d:3c:24:
c1:13:5c:39:b3:f2:18:fb:28:4d:76:df:63:3f:f7:a8:6d:75:
9b:e9:5d:85:75:5d:d7:00:59:ab:58:3f:90:8c:ec:6d:ac:5a:
ec:8d:f2:63:e8:fe:d7:4e:db:be:6d:0c:7e:a5:9e:08:2b:59:
e4:c4:26:df:27:ab:01:c7:64:74:93:1a:12:80:5f:3f:a3:81:
39:c5:3b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:51 2025 by rpki-client