Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401494.roa
File: AS401494.roa (raw, json)
Hash identifier: MQHrcGpUhARyAQR80t8/WsOqCzLATB0DWf1P3vpp+3w=
Subject key identifier: F8:83:94:F7:4E:D4:5C:C4:08:CA:53:C5:A0:68:F2:D8:93:19:62:75
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 10FF026BAD863762779D11080B3359433713FD9D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401494.roa
Signing time: Sat 07 Dec 2024 04:49:54 +0000
ROA not before: Sat 07 Dec 2024 04:44:54 +0000
ROA not after: Sat 06 Dec 2025 04:49:54 +0000
asID: 401494
IP address blocks: 96.62.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ff:02:6b:ad:86:37:62:77:9d:11:08:0b:33:59:43:37:13:fd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Dec 7 04:44:54 2024 GMT
Not After : Dec 6 04:49:54 2025 GMT
Subject: CN=F88394F74ED45CC408CA53C5A068F2D893196275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:05:cf:32:0a:13:6b:9e:10:37:e3:87:08:
ed:2c:dc:3a:64:b9:75:83:0e:f6:6e:94:b4:ab:c1:
b7:5f:5d:ce:f2:c4:0f:c5:ff:0b:37:e8:f3:68:7c:
d4:0d:65:4d:45:69:c4:c7:b3:6a:b6:18:f3:4d:10:
7c:41:95:4f:6c:1f:3c:b7:10:76:9c:ff:7f:cf:42:
e1:b4:b2:ed:00:58:89:cd:2d:73:b2:2a:09:55:c7:
ef:9a:99:ab:bc:5b:2d:bc:56:8c:0e:06:23:05:67:
ae:f5:f9:88:42:da:4f:df:c4:94:78:17:c9:f9:26:
94:11:f4:2f:20:1d:e9:af:52:1a:31:bf:be:8e:3e:
69:e3:b3:6e:88:4e:d6:27:0c:d5:8c:88:e1:bc:e2:
a5:2e:f7:3c:7c:9a:2a:27:08:c8:b2:c8:b8:a4:bf:
c4:a1:b4:88:71:39:9b:c2:bf:5a:b3:28:93:8b:fb:
75:4c:aa:b6:eb:dc:da:7a:94:55:a9:6f:ed:1d:74:
7d:3d:82:ce:94:7c:0a:75:0c:55:e7:5d:38:0e:bf:
b4:4e:2c:2d:75:cb:12:d7:81:02:e7:85:72:62:6d:
48:96:4a:a8:79:f6:56:bd:bc:d0:ee:0e:b1:18:86:
cc:46:d7:d4:50:f1:bd:e9:94:e8:38:8c:32:3c:f6:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:83:94:F7:4E:D4:5C:C4:08:CA:53:C5:A0:68:F2:D8:93:19:62:75
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401494.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.240.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2e:c2:ca:05:bb:89:c0:22:0f:31:35:83:df:b3:a9:5b:86:
fb:e0:97:5c:fd:a3:a0:b7:6f:3f:25:9f:5b:7e:c3:16:1a:17:
64:68:0d:e7:6c:39:5e:20:36:39:15:ac:f1:b7:46:09:d5:49:
1c:21:d8:2c:e3:79:b3:b7:08:78:df:c3:36:13:42:dd:2b:3a:
4e:f2:cf:ef:34:6f:49:72:d3:b5:90:87:d7:c8:66:26:a8:0c:
a8:2b:18:06:46:b1:38:cf:f2:c5:fe:f0:27:c5:69:f4:63:6d:
2e:de:46:b2:82:80:e0:41:ed:a9:98:c2:d9:30:39:ff:01:d9:
c1:ad:8f:b7:4a:15:a5:56:e8:99:a8:94:c8:84:25:a7:c9:5c:
30:be:ff:13:c3:b6:cd:10:d6:2a:28:41:f4:68:c4:de:c0:51:
88:75:b9:20:c9:a7:18:4a:ef:c3:33:e3:58:b8:33:14:f8:eb:
d0:88:99:1f:97:40:f6:fb:c3:1b:6c:20:9d:23:14:fe:1f:ff:
7f:32:cd:1e:31:be:f1:96:44:d9:64:00:0e:11:bb:a1:2a:ff:
7f:d1:0b:e9:3f:58:0c:5b:4d:50:14:a3:09:7b:c9:f6:84:67:
0b:cd:34:51:5c:9a:16:ff:60:ff:66:01:42:92:2e:c9:a5:f2:
26:d6:db:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:19 2025 by rpki-client