Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151544.roa
File: AS151544.roa (raw, json)
Hash identifier: vNwDRUcEqFKwUUXHAF0TnjtVnNhaWPEs1V5rLE499yo=
Subject key identifier: EB:17:FE:AC:E7:11:01:65:95:2C:6D:2E:06:54:F6:49:01:4B:10:80
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 133140F77962EA1143E833AABFD5B62EE665303D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151544.roa
Signing time: Mon 24 Feb 2025 17:23:41 +0000
ROA not before: Mon 24 Feb 2025 17:18:41 +0000
ROA not after: Mon 23 Feb 2026 17:23:41 +0000
asID: 151544
IP address blocks: 146.103.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 00:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:31:40:f7:79:62:ea:11:43:e8:33:aa:bf:d5:b6:2e:e6:65:30:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 24 17:18:41 2025 GMT
Not After : Feb 23 17:23:41 2026 GMT
Subject: CN=EB17FEACE7110165952C6D2E0654F649014B1080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a4:4d:4a:63:67:dc:a9:d8:f8:82:aa:e6:9a:
39:d7:9c:d8:60:f4:54:b2:06:fd:4f:9c:ed:23:97:
16:d4:5f:6d:05:97:56:fc:ed:ac:20:e2:3c:eb:92:
fb:04:d0:70:0f:0e:9c:ec:1a:b1:5b:1f:61:9c:e4:
6a:b8:73:fb:37:fb:4f:17:23:cf:94:4c:77:7b:1a:
c1:09:f4:f9:19:b2:82:65:97:78:2e:94:ea:9c:8a:
4e:60:09:b2:69:2a:3c:99:27:30:d2:03:37:5c:69:
28:eb:39:78:32:c9:b7:f4:25:c3:cf:b4:97:5d:95:
b1:9b:fe:22:84:64:07:01:a7:27:ba:dd:ec:d9:3e:
90:bf:81:31:01:e0:32:e5:e6:96:e1:00:b3:5b:a4:
1a:b0:8a:19:ba:af:54:12:db:5a:ef:5c:dd:49:d4:
7f:87:a7:18:b1:9d:19:20:92:dc:02:e7:08:3a:03:
e7:0d:d8:5a:65:0d:27:66:e3:96:a9:cf:50:3c:a8:
d1:02:23:9a:3b:d1:ec:cb:cd:7c:15:4e:15:ef:31:
fb:22:1c:3d:41:6f:cc:51:7e:0a:bf:b8:02:71:c9:
4e:a9:06:3d:13:3b:9a:35:44:53:d5:c1:0b:4f:2a:
d2:13:14:d9:99:7d:57:af:bd:87:0b:62:a9:11:dd:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:17:FE:AC:E7:11:01:65:95:2C:6D:2E:06:54:F6:49:01:4B:10:80
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151544.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.18.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:0b:dd:af:5d:f8:38:dd:7b:98:77:0f:c0:ea:9b:9e:fa:7c:
01:d3:50:f5:b2:fe:bf:20:3a:27:59:71:81:be:f3:d9:54:1c:
52:2c:44:5c:39:6c:0e:b6:33:ad:ec:fe:ba:67:ca:1d:38:c5:
e5:47:55:b3:ce:4b:58:e9:b7:e1:25:14:dd:fc:ee:3a:8a:05:
30:a3:5c:27:04:ea:3f:9f:90:4b:b0:01:42:40:66:57:7d:71:
8a:7c:32:53:dc:66:3e:d9:a9:50:d8:1e:4a:d0:d7:ac:51:1e:
83:4d:d3:47:48:c1:37:23:91:ab:96:4c:bc:3a:09:60:56:d3:
d7:8f:a2:c2:e0:03:51:a5:f6:cd:a3:b3:7e:89:dd:bb:c7:ca:
db:27:ea:30:08:a8:d1:41:c9:c9:4a:4f:79:02:d4:d4:21:bd:
09:ed:1b:5c:c0:06:0d:15:a6:19:e3:58:80:e7:63:0d:c9:90:
fd:79:a7:15:80:77:c5:5e:0e:35:78:a0:5d:09:d1:40:56:08:
c7:e2:b7:e8:6e:68:70:37:55:a2:8b:82:ad:ff:15:88:e6:a2:
4a:d1:b6:60:2a:6d:26:31:f8:ee:70:71:33:d6:32:e2:33:21:
77:b1:4e:85:d0:7a:eb:e8:fe:b4:d7:78:7b:34:98:80:f5:92:
76:bf:65:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:26 2025 by rpki-client