Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa
File: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (raw, json)
Hash identifier: osL3/jDdIUC4nSO/8sgXvP/URENbIO8+dFSvIWvh0hs=
Subject key identifier: 92:FB:B9:26:8A:C6:EE:85:C7:BD:E3:BA:BB:21:A2:52:B2:E3:41:86
Certificate issuer: /CN=3509F37A88DA7D8DF5D8355261259C1D418E541C
Certificate serial: 24DAACA69699BF3BFCE7D56FCCC22349E7BC8B85
Authority key identifier: 35:09:F3:7A:88:DA:7D:8D:F5:D8:35:52:61:25:9C:1D:41:8E:54:1C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa
Signing time: Thu 20 Mar 2025 09:05:58 +0000
ROA not before: Thu 20 Mar 2025 09:00:58 +0000
ROA not after: Thu 19 Mar 2026 09:05:58 +0000
asID: 204844
IP address blocks: 2a14:7581:6000::/36 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:da:ac:a6:96:99:bf:3b:fc:e7:d5:6f:cc:c2:23:49:e7:bc:8b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3509F37A88DA7D8DF5D8355261259C1D418E541C
Validity
Not Before: Mar 20 09:00:58 2025 GMT
Not After : Mar 19 09:05:58 2026 GMT
Subject: CN=92FBB9268AC6EE85C7BDE3BABB21A252B2E34186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1f:95:f6:c5:01:55:d3:c9:2e:be:31:cc:7a:
e3:a0:2b:de:d2:f1:50:ab:02:45:08:13:6a:ce:1d:
ca:e7:17:f6:94:c9:e2:83:9d:62:57:54:66:08:b8:
11:aa:d4:1c:52:0f:22:2f:53:2c:d1:bc:10:47:22:
42:5e:9d:ac:98:9f:13:0f:65:47:71:39:9f:57:01:
a2:34:71:55:2c:42:d7:57:84:fc:6a:36:a3:cf:b1:
94:cb:31:5e:32:02:5f:70:38:27:e7:62:3d:1d:5c:
4e:31:ed:3c:b3:e5:75:b0:cc:2c:ea:b8:be:44:ef:
70:5f:1a:80:18:71:1e:59:4f:bd:3d:bb:1c:eb:15:
bc:0d:70:02:54:60:e0:2a:5a:ad:5e:12:d7:00:cc:
7d:7f:91:cc:93:08:76:44:e6:55:7c:2a:76:97:63:
60:24:6d:cc:19:05:eb:48:f7:a7:0d:c0:7a:90:77:
67:f5:e3:78:32:a7:b7:0e:94:05:af:77:5f:2c:58:
d3:1b:22:03:0a:35:2a:a9:6a:38:e9:78:6c:8b:e8:
81:d2:e0:03:5a:31:46:0e:46:2e:56:c3:38:b2:36:
db:34:47:8e:96:9e:78:30:de:2f:93:9b:60:5b:e8:
a7:a6:bb:56:85:5d:28:ea:4d:53:09:0d:f7:a9:05:
28:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FB:B9:26:8A:C6:EE:85:C7:BD:E3:BA:BB:21:A2:52:B2:E3:41:86
X509v3 Authority Key Identifier:
keyid:35:09:F3:7A:88:DA:7D:8D:F5:D8:35:52:61:25:9C:1D:41:8E:54:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:6000::/36
Signature Algorithm: sha256WithRSAEncryption
71:51:0f:66:10:ab:a2:69:a8:8d:24:c2:d3:00:f8:3b:c7:ff:
e2:50:33:20:f9:a7:79:a2:ec:2b:48:8f:04:46:6d:a8:e9:fd:
b8:75:9a:3e:60:93:06:b1:90:14:13:12:ec:0c:ab:4d:71:3b:
f1:e6:5b:37:d9:f7:a4:4a:20:e0:34:cf:b2:f6:cd:9e:f0:aa:
83:85:8e:9d:fb:61:4e:14:ff:b0:fb:24:3d:e7:0c:e2:55:99:
72:9d:f1:64:28:9d:7d:c2:a8:f7:f6:19:3d:89:c2:6d:87:23:
4d:1f:f6:94:a7:76:ee:93:ed:4c:47:7d:a6:3c:55:20:16:93:
9c:d1:80:8f:77:ae:c4:83:2d:e0:35:14:2c:07:0a:ae:cf:a3:
23:c4:36:c3:9c:f1:05:b7:d4:e4:28:c0:1c:3e:51:2a:1c:f8:
1c:97:e2:dc:ee:4c:b5:de:22:58:ea:1c:e1:8d:58:22:10:c6:
58:10:fc:7e:fc:46:5f:9c:dd:3e:3e:49:51:3f:bc:1f:fe:22:
cc:a8:73:48:80:0f:25:bc:3b:b1:93:fd:21:60:42:a4:b7:82:
d5:61:06:cf:fe:33:a0:6e:ae:c3:7b:7e:92:a9:48:42:0a:39:
f5:6c:a4:bd:2e:f8:25:ec:b3:c7:9e:97:be:2f:78:18:5e:97:
d7:7f:6e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:07 2025 by rpki-client