Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS44620.roa
File: AS44620.roa (raw, json)
Hash identifier: fhFwqhjJRIjO4IZkXcdmcHwDAWiL28ncdysxn8OMs+E=
Subject key identifier: A1:25:58:EB:8D:60:2C:54:B7:E8:85:64:30:2B:B0:D5:96:CF:26:7C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7BE6C7740F61B272C32E27E6FC7F389422B45EB3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS44620.roa
Signing time: Fri 07 Feb 2025 17:39:37 +0000
ROA not before: Fri 07 Feb 2025 17:34:37 +0000
ROA not after: Fri 06 Feb 2026 17:39:37 +0000
asID: 44620
IP address blocks: 150.241.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Mar 2025 00:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e6:c7:74:0f:61:b2:72:c3:2e:27:e6:fc:7f:38:94:22:b4:5e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 7 17:34:37 2025 GMT
Not After : Feb 6 17:39:37 2026 GMT
Subject: CN=A12558EB8D602C54B7E88564302BB0D596CF267C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:42:c8:7f:54:e2:0a:60:68:e8:a4:a4:a9:
7a:be:58:16:e6:01:13:c4:a2:0d:06:af:73:12:48:
c6:8c:9b:f9:e6:37:ad:a0:88:b1:39:0b:98:56:93:
35:a3:c0:f6:19:30:ef:f4:88:65:4e:aa:8c:fd:8b:
cf:40:c5:7f:3b:5b:90:35:8c:38:d9:28:aa:95:0d:
b2:d7:28:ed:a4:fa:94:00:85:64:65:a4:9e:8f:cd:
9d:46:82:03:f6:35:18:6b:de:67:2f:bd:78:45:94:
78:df:12:3f:67:01:54:79:5a:09:2e:78:7a:0c:1d:
0f:88:05:4e:e9:42:37:fd:bf:19:c5:75:ee:f1:85:
fe:00:57:d6:a5:e8:d7:ec:b0:c1:24:4f:84:f0:bb:
27:10:bd:01:d0:4b:ed:e3:7b:46:c7:3c:dd:40:13:
c2:74:f8:40:11:b5:4b:27:1e:66:e3:b7:0d:23:be:
d4:ec:10:a8:fa:aa:ca:26:ab:b3:99:cf:fc:ab:63:
95:d5:fd:0d:14:a5:0d:aa:90:b5:4b:e9:10:dc:42:
43:7b:93:37:6d:ba:9c:73:ce:6d:3b:5d:5d:72:fa:
a1:f1:d2:40:11:44:ad:bf:9a:0d:71:d7:aa:97:83:
91:d3:3b:22:be:a4:20:c1:fa:1b:e2:b4:5c:af:5b:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:25:58:EB:8D:60:2C:54:B7:E8:85:64:30:2B:B0:D5:96:CF:26:7C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS44620.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.248.0/24
Signature Algorithm: sha256WithRSAEncryption
65:41:32:c7:bf:0c:d8:1a:ee:46:08:c4:0f:04:25:79:f4:8f:
79:1e:01:77:57:5b:c8:ce:ec:dd:bc:c4:7b:6c:8f:79:56:08:
45:11:28:4d:a0:91:10:88:f9:f1:35:ef:ce:1a:9e:ff:48:01:
10:5b:6f:2b:c8:f9:46:4a:61:b5:73:26:ab:94:ac:f4:76:37:
d6:65:f5:a7:0a:09:4b:ae:68:23:74:c4:37:b0:77:df:11:d2:
d2:c1:88:4d:71:40:db:6b:82:52:e5:74:2e:54:4e:fb:37:ec:
6e:03:e3:fb:ab:7a:ac:de:67:11:38:df:78:84:5a:ef:3f:38:
78:2e:6a:a2:80:e4:e9:33:a0:31:c2:b9:77:ce:00:0c:13:9b:
2c:ba:cb:f3:f7:07:a6:e1:0d:db:fe:5b:59:14:d8:90:b5:02:
c1:39:76:3a:fd:12:19:06:4a:0d:fa:97:21:55:f1:69:23:04:
50:91:0e:7a:1f:3a:36:61:5b:78:3f:6a:3c:af:89:48:49:f4:
fd:d3:cc:cb:8f:12:d5:02:38:92:60:cf:96:b9:9a:43:5c:b3:
19:64:ef:f3:c1:50:f8:54:3b:90:72:82:bb:47:3c:30:e1:27:
94:00:6d:61:2e:10:85:c7:0e:0a:38:57:a9:15:08:53:45:5c:
8f:b4:c8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:29:05 2025 by rpki-client