Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139989.roa
File: AS139989.roa (raw, json)
Hash identifier: ENOkeDzelTomyCTN0IEMd3S6StZ0qz/hgFKYA/KGAkQ=
Subject key identifier: A1:04:0F:15:C1:F0:AD:05:59:72:E4:76:4E:0D:00:28:1D:DF:12:DE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0E172A2EC425361B1EFEFAE1E9C268D0C76CD6A9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139989.roa
Signing time: Thu 20 Feb 2025 10:27:46 +0000
ROA not before: Thu 20 Feb 2025 10:22:46 +0000
ROA not after: Thu 19 Feb 2026 10:27:46 +0000
asID: 139989
IP address blocks: 148.135.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 11:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:17:2a:2e:c4:25:36:1b:1e:fe:fa:e1:e9:c2:68:d0:c7:6c:d6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 20 10:22:46 2025 GMT
Not After : Feb 19 10:27:46 2026 GMT
Subject: CN=A1040F15C1F0AD055972E4764E0D00281DDF12DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:63:29:19:b9:76:d8:db:fb:21:33:15:8d:
0f:3d:cc:48:b7:7b:d6:4a:2d:61:bd:9f:bf:62:05:
c3:5b:92:86:0c:bc:fb:9a:67:03:75:32:68:3a:cf:
d1:cb:74:f5:7e:c1:79:fa:21:97:00:d7:b5:79:73:
0b:75:1a:c6:49:72:a4:d7:90:c1:a5:91:d5:6a:a0:
b4:67:36:e4:f5:b4:23:1e:71:a1:e5:56:13:b2:e8:
30:28:d7:7c:a4:92:1e:88:08:d8:e4:c4:ba:db:24:
ba:2e:58:60:df:fc:3b:6d:12:68:62:00:f7:43:56:
3e:8d:f5:a6:1e:9a:ca:08:f5:4a:57:7c:5d:fb:07:
62:4b:14:37:17:57:e7:c7:88:82:3b:46:98:15:37:
eb:2f:76:6d:3c:63:1f:ba:1d:ff:74:1e:c5:58:40:
57:17:a3:bc:23:ba:dc:a4:35:a9:64:9e:09:97:41:
e2:64:e1:3f:cf:2c:68:b4:e6:1f:0e:3d:38:58:fd:
d2:40:e9:37:0c:7b:1f:b9:c6:92:59:a3:a9:32:6d:
5f:c8:41:42:80:b1:3f:10:51:df:ae:9c:1d:f0:db:
e2:03:06:4b:72:43:59:ee:74:cc:92:db:ec:3c:05:
a4:4a:12:fc:9e:fe:81:21:49:05:0e:47:ed:ca:d3:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:04:0F:15:C1:F0:AD:05:59:72:E4:76:4E:0D:00:28:1D:DF:12:DE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.181.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:1f:25:b3:d5:15:de:87:80:a4:09:56:91:a7:ae:c9:bc:60:
4f:77:09:10:c6:5c:43:8c:20:91:c1:0d:4d:92:8c:be:dc:23:
7a:6e:b0:88:ae:4f:bb:42:6f:7b:29:4e:2b:55:d4:cf:1e:ca:
31:ea:b7:c2:4e:80:e9:56:c0:45:39:87:1d:fd:18:ce:97:58:
4c:fa:3e:3c:66:61:6e:0e:b5:90:ff:3f:5a:39:be:4f:af:01:
d7:d9:65:4b:d9:42:63:4f:d4:79:a8:11:ec:67:5e:66:f5:e8:
88:c3:5c:2f:93:18:30:03:9e:07:bf:43:c6:ef:0c:ca:34:42:
1f:db:b3:56:3d:80:cd:0f:da:94:fd:66:e8:30:d1:09:f4:7a:
31:af:2b:29:b6:4e:b2:8a:bd:bd:bd:58:62:41:59:ee:74:60:
d3:9d:d6:90:60:28:a7:0e:c1:a0:1c:4c:c7:e8:04:7b:62:03:
15:54:06:7e:b7:47:44:d2:ed:90:94:0f:f2:49:29:e1:a8:31:
75:3d:1b:08:74:da:53:f7:a7:41:78:9f:42:9b:7a:df:f6:f9:
f5:72:e9:f8:bf:51:22:72:ef:48:d0:75:0e:3b:00:ad:c6:be:
93:4c:d5:99:4f:4c:d8:fa:5e:62:d5:54:67:64:66:a1:7d:02:
62:ce:31:a2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUDhcqLsQlNhse/vrh6cJo0Mds1qkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTAyMjAxMDIyNDZaFw0yNjAyMTkxMDI3NDZaMDMxMTAvBgNV
BAMTKEExMDQwRjE1QzFGMEFEMDU1OTcyRTQ3NjRFMEQwMDI4MURERjEyREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oWMpGbl22Nv7ITMVjQ89zEi3
e9ZKLWG9n79iBcNbkoYMvPuaZwN1Mmg6z9HLdPV+wXn6IZcA17V5cwt1GsZJcqTX
kMGlkdVqoLRnNuT1tCMecaHlVhOy6DAo13ykkh6ICNjkxLrbJLouWGDf/DttEmhi
APdDVj6N9aYemsoI9UpXfF37B2JLFDcXV+fHiII7RpgVN+svdm08Yx+6Hf90HsVY
QFcXo7wjutykNalkngmXQeJk4T/PLGi05h8OPThY/dJA6TcMex+5xpJZo6kybV/I
QUKAsT8QUd+unB3w2+IDBktyQ1nudMyS2+w8BaRKEvye/oEhSQUOR+3K05F/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUoQQPFcHwrQVZcuR2Tg0AKB3fEt4wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM5OTg5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlIe1
MA0GCSqGSIb3DQEBCwUAA4IBAQCyHyWz1RXeh4CkCVaRp67JvGBPdwkQxlxDjCCR
wQ1Nkoy+3CN6brCIrk+7Qm97KU4rVdTPHsox6rfCToDpVsBFOYcd/RjOl1hM+j48
ZmFuDrWQ/z9aOb5PrwHX2WVL2UJjT9R5qBHsZ15m9eiIw1wvkxgwA54Hv0PG7wzK
NEIf27NWPYDND9qU/WboMNEJ9Hoxrysptk6yir29vVhiQVnudGDTndaQYCinDsGg
HEzH6AR7YgMVVAZ+t0dE0u2QlA/ySSnhqDF1PRsIdNpT96dBeJ9Cm3rf9vn1cun4
v1Eicu9I0HUOOwCtxr6TTNWZT0zY+l5i1VRnZGahfQJizjGi
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:24 2025 by rpki-client