Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/326130613a363034303a646230303a3a2f34302d3438203d3e203531313834.roa
File: 326130613a363034303a646230303a3a2f34302d3438203d3e203531313834.roa (raw, json)
Hash identifier: B1uPCwx+olkDhtrFzNpIKJWaVhPp3+w1hq7Aa1GtW/o=
Subject key identifier: 0A:9C:E9:40:65:6F:5A:BF:4A:AD:4F:07:71:3E:B4:B9:68:A2:4B:B5
Certificate issuer: /CN=23D444E7DED3712847CAE2B46DDD886FC2914D54
Certificate serial: 75127AEDEBA836BAA8B78992EF33CEA048162FD7
Authority key identifier: 23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/326130613a363034303a646230303a3a2f34302d3438203d3e203531313834.roa
Signing time: Tue 16 May 2023 19:43:44 +0000
ROA not before: Tue 16 May 2023 19:38:44 +0000
ROA not after: Tue 14 May 2024 19:43:44 +0000
asID: 51184
IP address blocks: 2a0a:6040:db00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:12:7a:ed:eb:a8:36:ba:a8:b7:89:92:ef:33:ce:a0:48:16:2f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23D444E7DED3712847CAE2B46DDD886FC2914D54
Validity
Not Before: May 16 19:38:44 2023 GMT
Not After : May 14 19:43:44 2024 GMT
Subject: CN=0A9CE940656F5ABF4AAD4F07713EB4B968A24BB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b1:d6:3f:9a:df:ad:48:f4:fd:2d:bd:e8:b6:
2f:8f:88:09:e2:98:d6:52:51:1c:fe:0c:9a:10:ab:
e9:26:ea:91:c4:be:6d:53:21:5b:3b:ec:c2:36:dd:
37:03:f8:56:35:0b:ea:92:e3:ce:b4:63:dc:65:10:
9a:7d:da:b7:d1:df:1e:b9:45:7a:34:4e:cf:87:c2:
d6:d2:bd:db:71:27:04:36:b8:43:de:9f:23:71:f4:
c4:d4:d3:7a:b2:16:f2:11:c2:a7:81:1d:84:a4:98:
2a:2d:fe:01:bb:41:01:70:fe:2d:0c:dc:39:4d:34:
27:d3:78:44:95:31:53:e4:32:0e:50:ff:57:f4:25:
43:c9:3e:a8:41:7d:cf:50:6c:84:3a:46:86:8e:ad:
ef:9e:cb:1f:eb:fb:b7:29:a7:c9:07:13:f4:1b:9e:
59:5e:cd:bc:04:2c:fc:5d:7e:5a:e0:a6:ed:70:f1:
00:76:e3:69:04:87:fa:17:78:d3:22:33:96:bd:ec:
4d:71:9c:f7:7b:f1:2f:2f:73:b1:4b:e7:44:4c:e8:
cf:13:ad:b7:35:bf:ef:32:68:e6:ef:ae:34:fd:d8:
dd:6e:8a:51:64:3a:b7:6e:be:3f:97:a8:98:61:cb:
e2:58:4f:62:18:de:61:b1:15:ac:39:c1:96:53:01:
de:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9C:E9:40:65:6F:5A:BF:4A:AD:4F:07:71:3E:B4:B9:68:A2:4B:B5
X509v3 Authority Key Identifier:
keyid:23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/326130613a363034303a646230303a3a2f34302d3438203d3e203531313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:db00::/40
Signature Algorithm: sha256WithRSAEncryption
87:36:2a:49:33:bf:de:9e:64:06:f1:0b:ce:77:5f:b9:45:67:
73:70:af:71:50:49:69:a9:45:60:a5:d8:ff:9f:4e:08:c8:88:
eb:4e:69:a9:f9:4d:86:8d:eb:33:02:09:a9:71:04:57:a5:43:
c3:40:00:8d:cd:ee:62:a9:44:89:d0:30:18:75:cb:69:22:74:
67:d8:0c:f8:92:ca:7e:45:87:87:d8:9c:79:ac:2d:86:ff:ea:
f6:22:af:0b:13:ef:a8:db:fe:8f:fd:0a:4d:59:e2:51:41:8f:
23:0a:e2:2e:5b:1c:b0:bf:b8:93:4c:7b:6e:6e:6f:d1:e5:05:
e8:b7:7f:da:b1:14:8f:d9:82:a7:64:2b:18:2a:cc:af:05:5b:
8f:cb:3f:0b:47:60:11:56:2a:dd:13:53:3c:38:85:23:8c:78:
59:7d:17:45:2a:72:b5:a2:9c:bd:75:c4:13:09:1d:fe:68:22:
3f:c0:84:f6:7b:12:cb:cb:cf:d6:af:e5:40:ae:b3:d9:a5:af:
8e:f7:e2:d7:1f:87:c0:90:75:4b:85:e9:42:08:3c:0e:65:76:
ef:cc:24:df:c1:80:a3:ae:9e:6d:7e:3a:e5:f0:10:2c:20:5a:
7f:5a:e3:04:ec:47:3b:fc:d1:74:62:49:aa:ef:96:f7:53:eb:
52:5a:f4:54
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUdRJ67euoNrqot4mS7zPOoEgWL9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNENDQ0RTdERUQzNzEyODQ3Q0FFMkI0NkRERDg4NkZD
MjkxNEQ1NDAeFw0yMzA1MTYxOTM4NDRaFw0yNDA1MTQxOTQzNDRaMDMxMTAvBgNV
BAMTKDBBOUNFOTQwNjU2RjVBQkY0QUFENEYwNzcxM0VCNEI5NjhBMjRCQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwsdY/mt+tSPT9Lb3oti+PiAni
mNZSURz+DJoQq+km6pHEvm1TIVs77MI23TcD+FY1C+qS4860Y9xlEJp92rfR3x65
RXo0Ts+HwtbSvdtxJwQ2uEPenyNx9MTU03qyFvIRwqeBHYSkmCot/gG7QQFw/i0M
3DlNNCfTeESVMVPkMg5Q/1f0JUPJPqhBfc9QbIQ6RoaOre+eyx/r+7cpp8kHE/Qb
nllezbwELPxdflrgpu1w8QB242kEh/oXeNMiM5a97E1xnPd78S8vc7FL50RM6M8T
rbc1v+8yaObvrjT92N1uilFkOrduvj+XqJhhy+JYT2IY3mGxFaw5wZZTAd4ZAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUCpzpQGVvWr9KrU8HcT60uWiiS7UwHwYDVR0j
BBgwFoAUI9RE597TcShHyuK0bd2Ib8KRTVQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm
ODVjLzMvMjNENDQ0RTdERUQzNzEyODQ3Q0FFMkI0NkRERDg4NkZDMjkxNEQ1NC5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzIzRDQ0NEU3REVEMzcx
Mjg0N0NBRTJCNDZEREQ4ODZGQzI5MTRENTQuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2MxMjgyNzFlLWMyNjktNDk1NC04N2RiLWQxODRkZjE3Zjg1
Yy8zLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjQ2MjMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzNTMxMzEzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQNswDQYJKoZIhvcNAQEL
BQADggEBAIc2Kkkzv96eZAbxC853X7lFZ3Nwr3FQSWmpRWCl2P+fTgjIiOtOaan5
TYaN6zMCCalxBFelQ8NAAI3N7mKpRInQMBh1y2kidGfYDPiSyn5Fh4fYnHmsLYb/
6vYirwsT76jb/o/9Ck1Z4lFBjyMK4i5bHLC/uJNMe25ub9HlBei3f9qxFI/Zgqdk
KxgqzK8FW4/LPwtHYBFWKt0TUzw4hSOMeFl9F0UqcrWinL11xBMJHf5oIj/AhPZ7
EsvLz9av5UCus9mlr4734tcfh8CQdUuF6UIIPA5ldu/MJN/BgKOunm1+OuXwECwg
Wn9a4wTsRzv80XRiSarvlvdT61Ja9FQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org