Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3230303a3a2f34302d3430203d3e20323136303036.roa
File: 326131333a656534303a3230303a3a2f34302d3430203d3e20323136303036.roa (raw, json)
Hash identifier: 0r8CyXXe7vRNmGU5QrNT21GheaMvy4pPzGZI9/DDZ78=
Subject key identifier: E3:21:3A:EE:DC:C0:BA:05:CA:83:59:DB:59:95:CD:FD:44:B0:9B:5E
Certificate issuer: /CN=9da23cc2cf88ae4585cf8aaf9a714a9ad2e6f198
Certificate serial: 62143EE166A0669B8C84816F25D519267DF64F4E
Authority key identifier: 9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3230303a3a2f34302d3430203d3e20323136303036.roa
Signing time: Sat 18 Nov 2023 02:21:03 +0000
ROA not before: Sat 18 Nov 2023 02:16:03 +0000
ROA not after: Sat 16 Nov 2024 02:21:03 +0000
asID: 216006
IP address blocks: 2a13:ee40:200::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:14:3e:e1:66:a0:66:9b:8c:84:81:6f:25:d5:19:26:7d:f6:4f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da23cc2cf88ae4585cf8aaf9a714a9ad2e6f198
Validity
Not Before: Nov 18 02:16:03 2023 GMT
Not After : Nov 16 02:21:03 2024 GMT
Subject: CN=E3213AEEDCC0BA05CA8359DB5995CDFD44B09B5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:b5:6c:80:55:24:e3:c4:90:93:5e:ee:f6:
1a:09:fd:e5:e8:97:ec:1f:c4:d5:7f:3c:4e:22:92:
cc:5f:58:8e:45:f8:ea:7e:a2:cf:70:73:5c:4e:da:
58:a4:69:2a:be:b5:84:2d:7e:9e:21:c5:bb:6a:99:
06:89:9b:f9:74:3a:d5:61:48:1a:15:3c:e0:cd:61:
16:92:66:fb:8e:1f:14:bc:26:0e:67:4c:51:d0:eb:
5f:09:b6:10:42:49:1a:c0:10:18:ef:2e:be:89:24:
9d:a3:45:c0:fc:12:33:12:57:4b:79:57:09:c4:32:
e8:76:07:cc:51:b8:55:d0:98:7e:fd:3d:6c:0d:a5:
11:4e:cd:b7:21:10:9f:5c:ba:e6:5a:6d:13:b2:09:
05:3f:64:3c:cf:d5:b1:4e:9f:9d:85:34:0a:0c:6b:
3d:0a:c2:0b:ef:03:14:3c:5c:9a:0a:4b:9c:41:3d:
db:20:ec:00:07:4b:3b:e4:de:57:89:e0:65:52:1c:
e9:33:13:2c:39:e0:24:97:9c:71:fa:69:0c:1e:66:
2c:65:34:ef:83:c0:e4:a5:16:43:c9:d2:02:a1:0e:
1d:79:37:02:00:66:ca:da:41:fc:59:57:f1:e1:b6:
cf:d8:11:83:96:b0:6a:5b:c0:bc:86:09:93:7c:a5:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:21:3A:EE:DC:C0:BA:05:CA:83:59:DB:59:95:CD:FD:44:B0:9B:5E
X509v3 Authority Key Identifier:
keyid:9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/9DA23CC2CF88AE4585CF8AAF9A714A9AD2E6F198.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3230303a3a2f34302d3430203d3e20323136303036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ee40:200::/40
Signature Algorithm: sha256WithRSAEncryption
78:4f:57:70:94:f8:54:b5:8b:58:7e:ff:86:78:bf:66:e2:4a:
fc:6c:bb:3d:9b:8c:df:f2:a3:23:52:43:47:ad:3a:77:96:d7:
7c:bc:b0:39:e9:e2:7d:ad:62:69:94:a9:5b:42:b9:17:30:73:
17:1d:ad:aa:b9:a3:a6:3a:d5:a9:84:08:91:c0:8a:32:9a:8d:
4f:4b:d3:78:4a:59:d5:79:9a:53:f0:cd:b0:26:72:0c:e3:6c:
6a:c8:12:35:22:c8:d9:4a:d1:f0:e3:cb:eb:27:db:31:a3:a6:
af:20:20:0d:b1:e2:f6:af:c7:dc:10:e4:7c:f7:50:b0:d6:6b:
89:ff:28:11:50:79:77:55:1f:a8:87:9a:ea:35:c4:77:48:24:
27:07:91:37:28:d0:2e:89:b0:89:7c:4c:f7:a6:02:e5:48:a1:
69:50:52:39:79:d1:8f:06:9c:55:2e:30:2f:0a:51:02:5a:8f:
52:2a:ee:64:6f:27:a9:2e:14:90:67:21:25:b7:f6:26:4b:cc:
51:5c:df:ff:9a:9b:1f:60:ac:6e:95:5f:87:4e:11:42:c3:34:
dc:86:43:8d:04:17:b3:0b:ac:f9:76:e8:5f:03:1e:06:84:f3:
0c:f3:a2:12:8b:5b:a0:97:03:65:60:7b:99:f7:8c:ba:9c:7a:
79:09:24:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:11:03 2025 by rpki-client