Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393161343a3a2f34382d3438203d3e20323135313932.roa
File: 326130353a646663313a393161343a3a2f34382d3438203d3e20323135313932.roa (raw, json)
Hash identifier: SjUAQmTciFngdgQoBz+6zjajisYsUVE8zRSV6+CbMIY=
Subject key identifier: 60:1D:A8:CC:5F:44:57:C0:00:0B:A1:18:03:03:A9:42:7E:7A:58:F2
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 79AE1543553138EBCF7F1EC9BE146E323093B7D2
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393161343a3a2f34382d3438203d3e20323135313932.roa
Signing time: Wed 03 Apr 2024 12:38:49 +0000
ROA not before: Wed 03 Apr 2024 12:33:49 +0000
ROA not after: Wed 02 Apr 2025 12:38:49 +0000
asID: 215192
IP address blocks: 2a05:dfc1:91a4::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ae:15:43:55:31:38:eb:cf:7f:1e:c9:be:14:6e:32:30:93:b7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Apr 3 12:33:49 2024 GMT
Not After : Apr 2 12:38:49 2025 GMT
Subject: CN=601DA8CC5F4457C0000BA1180303A9427E7A58F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:77:17:50:aa:3d:1b:90:d6:eb:d1:89:44:
48:a1:24:d6:b1:0f:c3:e7:0d:80:0f:8e:aa:1b:aa:
46:4a:77:6c:46:6b:dc:5b:be:25:22:19:16:e6:bb:
a1:16:e8:2d:18:26:2e:89:8f:54:fb:a8:db:f4:47:
fc:08:47:96:7d:c3:b3:ae:7d:d8:7b:40:b7:c6:37:
ad:cd:c0:0a:6b:fd:ab:5d:c1:05:9f:e2:f5:4a:df:
7e:1d:e4:50:18:b4:29:da:61:b3:fa:de:a8:9c:35:
ea:59:5b:5a:7b:25:c0:49:e2:42:46:88:0e:d0:5c:
b4:6c:c0:b1:4d:4a:43:34:38:62:dd:05:e9:d8:dd:
78:5c:5e:4a:14:a0:be:d3:bc:cf:63:73:47:ed:e2:
8f:16:a1:d5:75:f7:31:7a:83:17:a8:05:7b:30:87:
1c:9b:4c:a1:2e:fb:cb:fc:35:27:9f:4a:01:12:83:
a8:a6:c0:b5:c1:e8:b5:42:2b:53:e7:88:f8:79:7d:
fd:50:ec:a8:02:2e:74:d2:21:b0:0a:d7:97:52:03:
22:ff:bc:7b:c5:b4:a1:16:a6:71:a1:f3:93:3a:6c:
44:d7:88:b9:1d:96:37:ba:93:ba:ed:2f:9f:87:55:
c3:08:f9:10:b6:ce:b9:7c:b0:04:a6:b3:6e:83:a6:
2b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1D:A8:CC:5F:44:57:C0:00:0B:A1:18:03:03:A9:42:7E:7A:58:F2
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393161343a3a2f34382d3438203d3e20323135313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:91a4::/48
Signature Algorithm: sha256WithRSAEncryption
12:3b:89:2e:1f:8c:cd:b5:b0:10:0a:07:b6:b7:36:98:9d:ea:
0d:74:b0:81:26:b8:f2:4e:4a:20:26:89:19:14:8f:fb:24:96:
24:75:da:db:33:60:f1:47:e2:38:be:bd:55:3e:71:1b:97:6e:
41:1c:c7:fa:e7:de:58:60:be:d8:9d:4b:5f:4d:f4:c6:04:04:
87:1f:b1:07:c7:af:c9:f7:72:eb:79:12:c9:11:fe:3e:d4:df:
70:6e:16:04:64:82:2c:07:c5:07:75:d0:89:6a:5f:ac:93:bb:
c4:ca:18:11:4c:fd:f8:34:28:f6:16:22:87:ac:c4:6c:9d:e2:
3a:7d:e3:28:d5:3f:09:84:06:66:c0:f8:4c:40:a6:4b:77:87:
58:96:0b:20:cf:fa:db:29:ac:70:1a:9d:94:ee:a0:06:de:32:
dd:aa:30:4f:7f:3d:18:f6:eb:2c:d0:78:97:51:4a:2d:fe:20:
79:a8:45:d7:0e:04:c1:9f:b5:90:ff:b5:38:f6:3a:62:c3:06:
25:d8:73:35:2a:93:f5:4f:97:c6:3b:ea:b6:1e:5a:ea:c4:d1:
41:71:e7:66:a5:a8:82:4a:32:2d:ff:63:d5:84:ef:7c:6d:ed:
8f:a1:d0:88:6f:57:69:24:bf:fb:9a:92:1d:23:3e:7f:3b:54:
63:f4:c2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:07 2025 by rpki-client