Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214654.roa
File: AS214654.roa (raw, json)
Hash identifier: fRfkZaUe4hJCptjhafPBBpEyN0l1mdbKDzczii+VCO4=
Subject key identifier: DA:F2:45:AA:A0:1B:D3:AE:D9:56:73:CE:32:93:35:0E:27:0B:F5:D3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3051ED952ACFC81F9E2F6C6D723BD22017749057
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214654.roa
Signing time: Fri 28 Feb 2025 00:00:35 +0000
ROA not before: Thu 27 Feb 2025 23:55:35 +0000
ROA not after: Fri 27 Feb 2026 00:00:35 +0000
asID: 214654
IP address blocks: 148.135.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:51:ed:95:2a:cf:c8:1f:9e:2f:6c:6d:72:3b:d2:20:17:74:90:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 27 23:55:35 2025 GMT
Not After : Feb 27 00:00:35 2026 GMT
Subject: CN=DAF245AAA01BD3AED95673CE3293350E270BF5D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:d4:f6:a3:71:50:64:3a:97:84:93:fa:43:
b3:68:69:46:1f:4b:7f:73:6f:04:22:d3:de:e4:a7:
3d:3c:d6:d7:6b:a8:9b:ef:d5:a6:2d:61:fb:20:af:
dd:89:9f:39:68:9a:77:73:bf:30:a2:79:8f:92:c4:
fd:77:7c:58:a2:e6:ac:45:11:04:87:eb:df:84:69:
5d:0a:24:e1:ee:fb:cd:3f:30:c1:95:9f:6c:84:d6:
25:de:dd:6a:60:6f:8b:7b:46:fe:08:c4:9f:7b:a8:
93:18:f4:9f:11:ad:3b:b4:8b:1c:38:43:73:4a:d5:
90:3a:a1:36:7e:9b:36:9b:f3:cd:4a:50:08:f6:76:
23:3f:e9:f5:b0:e2:bb:d6:81:bc:0d:cb:8f:e3:2b:
e1:63:f9:ab:9a:69:78:e3:c0:45:f5:b9:05:ae:53:
95:3f:17:9a:bd:97:b1:27:ce:20:4b:67:af:d0:49:
8e:02:f7:52:69:f7:5f:57:60:bd:6d:18:ce:ab:c9:
01:13:32:30:02:a7:2f:fc:a3:8e:00:a2:1b:4b:0d:
41:1c:2a:a7:eb:fb:0c:93:70:eb:99:46:79:69:92:
ac:64:b4:f8:9c:5d:39:81:cf:39:1f:f8:b2:e9:d4:
66:fd:e4:c6:ae:ce:59:db:2f:2c:09:7a:1c:4d:dd:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F2:45:AA:A0:1B:D3:AE:D9:56:73:CE:32:93:35:0E:27:0B:F5:D3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.180.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:fa:c9:2d:dd:27:37:d8:bf:0b:18:4b:44:ff:31:04:8d:b7:
2f:00:65:9c:b6:5d:29:eb:a0:0b:09:cb:09:7f:ef:4e:5b:31:
8b:4a:70:45:c0:2f:0e:e5:bc:0d:6d:25:c5:80:f9:59:bd:65:
26:6a:11:a8:77:dd:d1:7c:98:24:70:a5:33:96:b4:c5:20:80:
76:78:3e:43:c6:6c:9d:dd:d2:53:32:5f:e5:24:e3:93:92:59:
3e:62:7d:92:4d:63:b3:f5:b8:df:ce:a9:27:d9:ed:40:87:cb:
a4:90:49:41:e6:f9:f8:02:64:b7:c0:97:71:40:71:f2:bf:47:
bb:7e:8c:69:19:7f:c2:60:db:83:4b:d0:1c:9b:16:b4:00:26:
6e:0f:f6:78:c3:0b:31:1d:3f:26:14:e0:ce:60:33:f6:1b:02:
79:4d:bc:07:e3:4d:ef:e7:31:de:bb:99:88:a1:25:36:85:1d:
3f:d5:ba:c5:fe:bb:46:c9:22:65:85:d4:0e:af:8c:c1:aa:1e:
0a:50:2c:24:22:c1:f3:16:89:85:e2:e1:f6:0d:92:3f:6f:25:
09:05:d3:27:45:65:9d:91:6e:99:8a:2b:95:e5:12:6a:3a:7b:
ac:f0:f8:8f:c3:8c:37:0b:fa:c7:82:32:b0:bf:8a:7c:0e:a9:
a1:a9:53:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:07 2025 by rpki-client