Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393139303a3a2f34382d3438203d3e20323136313132.roa
File: 326130353a646663313a393139303a3a2f34382d3438203d3e20323136313132.roa (raw, json)
Hash identifier: Bg++tq8wik3kyNsTYisCzPqZ7Pig6MaPGY5d2SBWKqk=
Subject key identifier: CA:7C:28:C0:AB:63:CF:53:6A:3A:8B:F6:EA:99:F4:CD:42:13:1C:8B
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 0A3E9084DC6CA1A7130B51450428F9A09A8C19D0
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393139303a3a2f34382d3438203d3e20323136313132.roa
Signing time: Mon 25 Mar 2024 14:26:19 +0000
ROA not before: Mon 25 Mar 2024 14:21:19 +0000
ROA not after: Mon 24 Mar 2025 14:26:19 +0000
asID: 216112
IP address blocks: 2a05:dfc1:9190::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:3e:90:84:dc:6c:a1:a7:13:0b:51:45:04:28:f9:a0:9a:8c:19:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Mar 25 14:21:19 2024 GMT
Not After : Mar 24 14:26:19 2025 GMT
Subject: CN=CA7C28C0AB63CF536A3A8BF6EA99F4CD42131C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:04:b6:5e:a2:67:94:68:99:ae:3d:bc:ec:
ae:5c:91:ce:08:4d:a8:82:91:9e:ce:98:c7:ca:14:
49:5a:ee:53:16:d7:48:d1:fe:8f:2d:70:b7:07:66:
30:d8:a1:19:92:48:7f:91:9d:7a:92:bb:d6:74:05:
ca:12:da:c6:7e:11:9d:a2:ec:1e:2b:b3:f4:29:02:
4e:5e:cf:84:61:90:71:81:dd:e6:a1:45:6b:d6:40:
79:27:27:6b:e1:eb:ef:5c:cf:a5:8f:3f:95:c9:c9:
f0:9a:92:0e:4f:e1:01:d2:43:36:68:86:a4:5c:23:
4d:d5:72:1a:42:f5:39:b4:bf:50:bc:d2:2a:34:90:
61:11:b4:b7:0e:55:22:41:a1:98:6a:04:86:ff:31:
ba:3d:31:69:08:07:97:fa:03:e9:01:36:8b:23:d3:
1b:a3:c6:1a:ff:dc:e1:c7:27:37:de:61:87:61:c4:
1e:43:bf:84:50:c9:d5:5f:b3:6b:51:cc:97:0e:c6:
b5:dc:c6:8d:d0:77:82:d4:36:d1:01:7e:c2:dc:8b:
fc:d4:cb:ee:43:23:e3:a8:86:66:46:a8:65:ef:a6:
5c:f9:81:a9:80:29:17:fd:2e:45:cb:79:84:95:0c:
c9:35:4a:ff:88:19:3d:af:7b:e9:78:b6:a6:c1:09:
33:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7C:28:C0:AB:63:CF:53:6A:3A:8B:F6:EA:99:F4:CD:42:13:1C:8B
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393139303a3a2f34382d3438203d3e20323136313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9190::/48
Signature Algorithm: sha256WithRSAEncryption
55:cb:08:fe:88:35:4e:ef:83:9f:a2:5a:a4:ea:c8:b5:b7:0e:
4a:0e:f9:f6:cc:dc:51:10:77:96:29:de:ca:da:22:c5:7d:6c:
7d:47:62:da:2f:5b:38:6c:52:58:2b:d7:1a:1b:43:fe:22:54:
25:2a:45:d1:cd:fa:e0:de:2a:fe:2a:22:77:1d:51:75:2c:97:
50:99:a1:cd:f3:b9:6c:48:3e:9b:4f:dd:f0:55:57:2c:ce:81:
61:b7:6d:37:99:84:23:17:21:ec:97:2d:56:b4:04:14:9e:de:
95:1c:f6:a3:13:07:c1:7b:dc:c7:05:fb:31:fd:43:77:02:68:
4f:67:3a:e6:56:9d:a6:ad:12:37:91:c5:b4:1f:1d:61:a1:b0:
7b:45:75:5b:35:81:b3:2b:71:32:77:8e:fd:ce:d4:aa:ed:33:
66:51:41:0f:29:f9:5b:6c:89:f6:45:af:a0:81:30:99:fe:90:
1a:64:21:35:21:46:d2:c4:17:a5:60:cf:ac:0f:09:dd:40:4c:
ab:7c:23:2e:08:4d:aa:68:30:43:2b:e0:6f:ef:9b:0c:9f:bf:
7f:40:47:07:5c:d6:58:54:f5:96:09:c1:d8:a5:ae:33:32:83:
54:2e:20:38:67:37:42:42:f2:9b:e9:30:c9:da:9f:7b:dc:43:
00:5c:c4:85
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUCj6QhNxsoacTC1FFBCj5oJqMGdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRF
MDVFN0I3NjAeFw0yNDAzMjUxNDIxMTlaFw0yNTAzMjQxNDI2MTlaMDMxMTAvBgNV
BAMTKENBN0MyOEMwQUI2M0NGNTM2QTNBOEJGNkVBOTlGNENENDIxMzFDOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyuAS2XqJnlGiZrj287K5ckc4I
TaiCkZ7OmMfKFEla7lMW10jR/o8tcLcHZjDYoRmSSH+RnXqSu9Z0BcoS2sZ+EZ2i
7B4rs/QpAk5ez4RhkHGB3eahRWvWQHknJ2vh6+9cz6WPP5XJyfCakg5P4QHSQzZo
hqRcI03VchpC9Tm0v1C80io0kGERtLcOVSJBoZhqBIb/Mbo9MWkIB5f6A+kBNosj
0xujxhr/3OHHJzfeYYdhxB5Dv4RQydVfs2tRzJcOxrXcxo3Qd4LUNtEBfsLci/zU
y+5DI+OohmZGqGXvplz5gamAKRf9LkXLeYSVDMk1Sv+IGT2ve+l4tqbBCTMPAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUynwowKtjz1NqOov26pn0zUITHIswHwYDVR0j
BBgwFoAU9zfYG/vv/e7J7DK3uGQRLeBee3YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzEvRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRFMDVFN0I3Ni5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y3MzdEODFCRkJFRkZE
RUVDOUVDMzJCN0I4NjQxMTJERTA1RTdCNzYuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2EyNWM3
ZC8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzkzMTM5MzAzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMjMxMzYzMTMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/BkZAwDQYJKoZIhvcN
AQELBQADggEBAFXLCP6INU7vg5+iWqTqyLW3DkoO+fbM3FEQd5Yp3sraIsV9bH1H
YtovWzhsUlgr1xobQ/4iVCUqRdHN+uDeKv4qIncdUXUsl1CZoc3zuWxIPptP3fBV
VyzOgWG3bTeZhCMXIeyXLVa0BBSe3pUc9qMTB8F73McF+zH9Q3cCaE9nOuZWnaat
EjeRxbQfHWGhsHtFdVs1gbMrcTJ3jv3O1KrtM2ZRQQ8p+VtsifZFr6CBMJn+kBpk
ITUhRtLEF6Vgz6wPCd1ATKt8Iy4ITapoMEMr4G/vmwyfv39ARwdc1lhU9ZYJwdil
rjMyg1QuIDhnN0JC8pvpMMnan3vcQwBcxIU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:24 2025 by rpki-client