Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393030373a3a2f34382d3438203d3e203437323732.roa
File: 326131313a323963303a393030373a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: mQgf0c2qxO+CSOad0LCnhnhgjq+4MwfgKLn+HDbipdE=
Subject key identifier: C3:3D:DA:DB:62:2B:2B:38:45:0B:E4:32:F9:7B:45:53:20:37:65:43
Certificate issuer: /CN=CDC014669D381152AFB94B76936268BFF73E7D50
Certificate serial: 7B431DA3F2BC29AF16F17D8165C38EBE496E8FF7
Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393030373a3a2f34382d3438203d3e203437323732.roa
Signing time: Sun 26 Nov 2023 11:08:44 +0000
ROA not before: Sun 26 Nov 2023 11:03:44 +0000
ROA not after: Sun 24 Nov 2024 11:08:44 +0000
asID: 47272
IP address blocks: 2a11:29c0:9007::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:43:1d:a3:f2:bc:29:af:16:f1:7d:81:65:c3:8e:be:49:6e:8f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50
Validity
Not Before: Nov 26 11:03:44 2023 GMT
Not After : Nov 24 11:08:44 2024 GMT
Subject: CN=C33DDADB622B2B38450BE432F97B455320376543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:c9:c7:c9:38:94:89:b5:01:2c:4d:7b:11:
75:b4:64:6d:8f:58:07:94:34:11:6a:ac:ce:67:89:
1e:f4:2f:af:4b:8d:4e:0b:f7:27:63:ff:9f:9d:69:
ed:fd:e8:90:e6:c3:e3:42:e4:91:a6:1c:1e:55:af:
26:b0:80:a9:10:86:2e:a7:f5:06:7a:d4:6a:da:bf:
1d:bd:47:be:f3:e6:22:ae:a9:3c:3b:d3:c3:00:3f:
c3:ac:07:28:9a:b2:15:c5:df:8f:77:ee:cb:80:4e:
94:00:c5:2d:98:49:15:92:56:86:fb:9e:9f:eb:40:
99:d4:56:58:a5:56:db:41:ba:e9:1d:63:c0:4d:42:
06:17:27:82:dc:69:8b:10:5b:3a:41:b4:ba:63:b1:
59:57:3a:28:20:3c:9c:48:88:0a:9f:71:24:2f:69:
0e:aa:b8:5e:a7:d8:cb:e6:81:bf:fd:d7:e7:67:4c:
cd:00:0c:6f:b5:ab:bc:88:c3:3f:97:c8:e0:60:75:
2d:c7:8f:cb:88:25:cf:cc:1f:6b:e2:a5:c8:47:74:
4d:98:a2:10:29:c0:86:d1:e9:8b:97:00:fa:ea:cf:
a8:89:00:b0:74:5d:77:f0:4c:20:1c:55:1d:f5:82:
6e:a2:89:11:d6:19:97:29:6a:04:60:4a:09:76:67:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3D:DA:DB:62:2B:2B:38:45:0B:E4:32:F9:7B:45:53:20:37:65:43
X509v3 Authority Key Identifier:
keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393030373a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:9007::/48
Signature Algorithm: sha256WithRSAEncryption
68:3c:45:1b:55:d7:b2:8e:8d:d7:00:32:9d:0c:f4:ca:4b:13:
e1:fa:31:51:4d:33:ec:45:cd:b7:11:28:42:ee:ba:67:8b:d8:
a2:2c:d4:26:9d:6a:b9:b5:4c:50:b1:32:24:36:2e:8b:a5:b8:
46:99:33:0d:41:16:c0:36:0c:44:f3:85:13:79:82:cd:df:5a:
47:f5:1c:e2:53:07:3e:48:b2:f1:22:d7:87:57:b5:e0:e8:5c:
cc:32:c2:87:44:92:23:88:68:79:a5:b7:e7:0d:54:c0:f7:db:
bd:69:61:04:e7:85:42:52:d1:39:dc:a1:3e:bb:2b:d0:23:d7:
19:41:88:7b:a0:ea:2f:b4:8d:43:91:6a:e5:15:3e:07:25:e8:
a4:9a:c8:68:62:36:52:16:4d:89:66:c2:fe:6e:c4:82:c2:9c:
0e:3c:e9:d1:b7:cd:ce:a3:3e:83:d1:0d:eb:51:47:34:17:96:
9b:75:21:f6:f5:3e:16:89:3c:1a:f1:08:c5:38:0d:b4:50:8c:
84:9a:b1:9a:06:db:f8:3c:32:ce:3a:6c:09:89:a0:bd:a9:a2:
89:03:87:5d:58:a0:b3:bd:8e:59:52:0d:63:87:0a:fe:e4:26:
20:27:bb:1c:93:a6:6e:08:dd:55:b0:0e:57:9f:c1:c5:45:af:
03:cf:a0:75
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUe0Mdo/K8Ka8W8X2BZcOOvkluj/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RDMDE0NjY5RDM4MTE1MkFGQjk0Qjc2OTM2MjY4QkZG
NzNFN0Q1MDAeFw0yMzExMjYxMTAzNDRaFw0yNDExMjQxMTA4NDRaMDMxMTAvBgNV
BAMTKEMzM0REQURCNjIyQjJCMzg0NTBCRTQzMkY5N0I0NTUzMjAzNzY1NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4jcnHyTiUibUBLE17EXW0ZG2P
WAeUNBFqrM5niR70L69LjU4L9ydj/5+dae396JDmw+NC5JGmHB5VryawgKkQhi6n
9QZ61Gravx29R77z5iKuqTw708MAP8OsByiashXF34937suATpQAxS2YSRWSVob7
np/rQJnUVlilVttBuukdY8BNQgYXJ4LcaYsQWzpBtLpjsVlXOiggPJxIiAqfcSQv
aQ6quF6n2Mvmgb/91+dnTM0ADG+1q7yIwz+XyOBgdS3Hj8uIJc/MH2vipchHdE2Y
ohApwIbR6YuXAPrqz6iJALB0XXfwTCAcVR31gm6iiRHWGZcpagRgSgl2Z8+TAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUwz3a22IrKzhFC+Qy+XtFUyA3ZUMwHwYDVR0j
BBgwFoAUzcAUZp04EVKvuUt2k2Jov/c+fVAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzIvQ0RDMDE0NjY5RDM4MTE1MkFGQjk0Qjc2OTM2MjY4QkZGNzNFN0Q1MC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTExNWJjNi0xMGY2LTRh
ZjMtYmEwOS04YjY4N2E1NmZiZjUvMC9DREMwMTQ2NjlEMzgxMTUyQUZCOTRCNzY5
MzYyNjhCRkY3M0U3RDUwLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8zMjUzZDk3My1kNWJmLTQ1NDEtYmNjMS0yNzY1NDNhMjVjN2QvMi8zMjYxMzEz
MTNhMzIzOTYzMzAzYTM5MzAzMDM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQz
NzMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoRKcCQBzANBgkqhkiG9w0BAQsFAAOCAQEAaDxF
G1XXso6N1wAynQz0yksT4foxUU0z7EXNtxEoQu66Z4vYoizUJp1qubVMULEyJDYu
i6W4RpkzDUEWwDYMRPOFE3mCzd9aR/Uc4lMHPkiy8SLXh1e14OhczDLCh0SSI4ho
eaW35w1UwPfbvWlhBOeFQlLROdyhPrsr0CPXGUGIe6DqL7SNQ5Fq5RU+ByXopJrI
aGI2UhZNiWbC/m7EgsKcDjzp0bfNzqM+g9EN61FHNBeWm3Uh9vU+Fok8GvEIxTgN
tFCMhJqxmgbb+DwyzjpsCYmgvamiiQOHXVigs72OWVINY4cK/uQmICe7HJOmbgjd
VbAOV5/BxUWvA8+gdQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:01:16 2025 by rpki-client