Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/326130613a363034343a626336383a3a2f34382d3634203d3e20313939373633.roa
File: 326130613a363034343a626336383a3a2f34382d3634203d3e20313939373633.roa (raw, json)
Hash identifier: eTFrY7xqIUaJE3xy0dLYyXkZTEmWIDmEdlG91gFSl1g=
Subject key identifier: 64:15:D2:DF:68:E1:8C:0C:74:73:13:2E:D2:9F:20:01:1B:93:F8:E4
Certificate issuer: /CN=FBB1A565920DA754D7062D7A1B5CAE8FF5D93266
Certificate serial: 059BD20E768264144747A042A90CDE2D6A813F2D
Authority key identifier: FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/326130613a363034343a626336383a3a2f34382d3634203d3e20313939373633.roa
Signing time: Sun 25 May 2025 06:46:19 +0000
ROA not before: Sun 25 May 2025 06:41:19 +0000
ROA not after: Sun 24 May 2026 06:46:19 +0000
asID: 199763
IP address blocks: 2a0a:6044:bc68::/48 maxlen: 64
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:9b:d2:0e:76:82:64:14:47:47:a0:42:a9:0c:de:2d:6a:81:3f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBB1A565920DA754D7062D7A1B5CAE8FF5D93266
Validity
Not Before: May 25 06:41:19 2025 GMT
Not After : May 24 06:46:19 2026 GMT
Subject: CN=6415D2DF68E18C0C7473132ED29F20011B93F8E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:1c:c0:f4:da:76:24:a5:dd:76:89:e6:71:
54:c9:33:85:f2:e8:55:50:e5:97:5d:58:8d:d2:03:
9b:ad:60:86:0f:a7:93:ee:17:ec:c0:fa:8e:87:52:
af:b5:c9:bb:2a:c9:b9:a9:9d:03:9f:81:e8:ad:55:
d0:93:c0:b9:04:69:53:b5:41:f9:2a:9e:3b:58:6c:
2f:4c:bc:af:5c:30:e5:7d:29:6b:45:dc:dc:42:1a:
74:41:28:54:29:45:f7:9f:85:45:40:17:22:db:7a:
5e:a0:e4:52:ab:c6:28:98:49:97:b0:82:5f:da:90:
15:f0:cf:94:f0:22:b3:9a:8e:46:f9:d7:5f:de:eb:
fa:ac:ca:03:f7:c6:90:2f:a0:e3:e3:bf:bb:e3:50:
91:1d:5e:6e:6e:18:24:4c:0d:d4:df:c6:48:0a:4a:
f9:a7:12:aa:e7:1a:4f:62:2b:ce:57:bd:47:06:96:
e8:b6:ca:7e:3d:89:47:ed:e3:df:10:0f:e9:db:40:
cc:b8:af:57:af:12:e2:02:24:65:fc:72:7d:c2:d8:
4f:d1:7e:ee:98:40:89:76:cc:1a:5d:22:8d:a0:2e:
26:b8:3c:af:4d:d5:af:08:1b:a8:46:77:3c:5c:5b:
9c:32:e3:9f:dd:42:d9:13:2f:12:16:44:f9:61:1c:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:15:D2:DF:68:E1:8C:0C:74:73:13:2E:D2:9F:20:01:1B:93:F8:E4
X509v3 Authority Key Identifier:
keyid:FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/326130613a363034343a626336383a3a2f34382d3634203d3e20313939373633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:bc68::/48
Signature Algorithm: sha256WithRSAEncryption
0f:a1:1d:71:37:d9:22:6d:bd:7b:18:ff:c4:29:93:4d:48:36:
bc:54:1e:c1:dc:1b:d2:f0:2f:4c:ff:bb:07:16:05:2f:ba:72:
11:85:ee:21:22:2f:8d:c9:45:f7:92:a2:0b:fa:d3:8c:91:50:
56:c0:54:53:5d:3e:d5:d3:d2:c5:8f:32:a5:a0:4c:2d:ff:ad:
53:2b:02:20:8c:23:25:07:75:ac:12:af:85:26:3a:b6:59:11:
56:50:ef:ca:c5:8d:f3:82:8b:a0:55:12:b2:f3:97:20:9c:3f:
5b:8c:aa:53:10:9a:fa:b5:ad:c6:63:e8:3d:a8:79:75:8f:56:
d6:cc:fa:49:5f:9d:2d:9e:cc:fe:13:40:1e:16:99:5e:2b:35:
39:b6:af:9c:81:c5:59:01:99:47:62:a8:8c:42:2a:f9:4a:ae:
b7:5b:9b:f3:d4:40:81:ee:b9:17:f0:85:02:48:1d:8d:0a:29:
ee:da:78:5c:19:81:c1:40:ed:14:c9:6f:b6:f8:4a:eb:d1:8d:
df:6b:a7:f2:55:cd:3c:aa:93:2f:8f:a8:6b:0b:d4:ef:b1:a5:
8d:87:4e:bd:52:f1:62:7e:83:62:74:bf:51:74:c8:15:5c:10:
b4:69:36:9b:51:32:c7:1d:de:cf:83:3c:66:1c:cb:77:25:35:
a8:54:cb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:01:16 2025 by rpki-client