Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS44592.roa
File: AS44592.roa (raw, json)
Hash identifier: Gz6g0oKrWIVYuViJuNGA1JjSujHqKYRAfkOa6VVVlZw=
Subject key identifier: 5B:D1:36:30:D0:CC:F2:98:A3:32:A7:A7:F1:75:D1:F6:A9:B9:0D:C6
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 053B629364FB1FA1690897C2A672F2D18DAC0ACD
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS44592.roa
Signing time: Thu 22 May 2025 21:44:02 +0000
ROA not before: Thu 22 May 2025 21:39:02 +0000
ROA not after: Thu 21 May 2026 21:44:02 +0000
asID: 44592
IP address blocks: 141.11.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 11:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:3b:62:93:64:fb:1f:a1:69:08:97:c2:a6:72:f2:d1:8d:ac:0a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 22 21:39:02 2025 GMT
Not After : May 21 21:44:02 2026 GMT
Subject: CN=5BD13630D0CCF298A332A7A7F175D1F6A9B90DC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:2f:46:6c:ab:bc:d8:5f:1b:8b:88:83:e1:
32:f4:19:46:31:0c:d9:aa:65:ad:5f:48:ec:14:17:
19:6a:81:3b:ef:e0:04:87:78:66:ab:3b:f1:76:6d:
a4:8b:16:97:36:85:f8:7d:3c:ed:15:a5:76:be:5a:
b2:b4:dd:6f:ca:85:77:b1:af:b8:0a:04:35:64:16:
d5:32:fe:67:4b:63:15:55:5b:90:ce:32:ed:f6:d5:
64:d4:1c:f1:2b:ae:e0:80:95:0d:e3:0b:38:92:7a:
75:11:9a:1b:36:cc:e0:ce:be:34:26:50:e7:42:49:
a3:3f:42:6d:e3:a0:03:38:72:e7:cc:5f:71:9a:c2:
0c:04:70:00:fb:3b:54:5a:7f:3b:69:b7:4e:a6:e8:
e4:e3:5c:92:94:7a:03:b2:2e:80:9f:6b:fe:23:77:
61:db:75:ed:93:6f:97:bd:bb:51:5d:fb:d1:39:8f:
ce:38:dd:0c:f7:84:29:36:d4:7b:4d:7f:52:eb:28:
1b:4b:4c:5d:94:35:43:ed:2e:a8:b4:18:12:cd:cb:
06:ae:94:8f:44:80:0a:90:74:8a:d5:69:ff:ca:ba:
14:58:c9:5a:10:f9:c2:fd:93:48:bc:4a:c3:5c:ba:
f6:7b:98:ee:f4:d4:f3:2d:3a:ad:9b:9e:68:d3:77:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D1:36:30:D0:CC:F2:98:A3:32:A7:A7:F1:75:D1:F6:A9:B9:0D:C6
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS44592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.26.0/24
Signature Algorithm: sha256WithRSAEncryption
80:bb:35:c7:e0:11:17:33:de:b4:35:f1:c6:f2:c6:ce:e8:8e:
68:38:1c:4e:e0:b8:34:56:11:0f:cd:b9:8c:15:35:75:e3:ef:
b8:f6:d8:3f:4c:a3:86:69:8b:a3:07:85:81:21:ba:1d:bd:10:
37:dc:3a:a3:c9:1c:8d:f9:bb:51:51:1f:ee:1e:a9:ef:80:6b:
0c:4b:65:8e:9e:16:db:f0:4d:3b:27:35:84:56:b1:de:f6:74:
1d:06:14:c8:a2:f7:bb:be:41:5d:de:7f:fc:c2:59:f7:34:67:
73:f3:f9:ad:c0:4d:89:33:a6:4e:d5:66:be:dd:66:5e:56:4b:
d0:c3:95:17:8a:31:57:1b:56:cd:c1:a2:1c:a8:1f:5d:f9:bb:
35:bd:68:5f:0e:17:48:a2:ac:5f:f1:52:9d:fe:61:6a:61:aa:
9d:0c:1f:d1:3e:c2:01:62:42:98:af:4e:ac:0e:bd:11:e5:35:
6e:f4:ed:2d:e5:38:0c:20:d6:6c:48:6b:82:a8:8c:b6:4b:1b:
b7:8b:a9:30:fa:20:e9:a0:72:a7:ef:5f:84:9b:1c:03:00:06:
9f:83:be:4b:d4:2f:62:a7:a0:11:ef:e4:8d:b0:57:df:8f:2e:
54:d1:4e:a4:29:54:e7:32:b8:01:50:5e:41:f1:b0:18:d1:7e:
27:e9:40:da
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUBTtik2T7H6FpCJfCpnLy0Y2sCs0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTA1MjIyMTM5MDJaFw0yNjA1MjEyMTQ0MDJaMDMxMTAvBgNV
BAMTKDVCRDEzNjMwRDBDQ0YyOThBMzMyQTdBN0YxNzVEMUY2QTlCOTBEQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoui9GbKu82F8bi4iD4TL0GUYx
DNmqZa1fSOwUFxlqgTvv4ASHeGarO/F2baSLFpc2hfh9PO0VpXa+WrK03W/KhXex
r7gKBDVkFtUy/mdLYxVVW5DOMu321WTUHPErruCAlQ3jCziSenURmhs2zODOvjQm
UOdCSaM/Qm3joAM4cufMX3GawgwEcAD7O1Rafztpt06m6OTjXJKUegOyLoCfa/4j
d2Hbde2Tb5e9u1Fd+9E5j8443Qz3hCk21HtNf1LrKBtLTF2UNUPtLqi0GBLNywau
lI9EgAqQdIrVaf/KuhRYyVoQ+cL9k0i8SsNcuvZ7mO701PMtOq2bnmjTd09BAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUW9E2MNDM8pijMqen8XXR9qm5DcYwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNDQ1OTIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNCxow
DQYJKoZIhvcNAQELBQADggEBAIC7NcfgERcz3rQ18cbyxs7ojmg4HE7guDRWEQ/N
uYwVNXXj77j22D9Mo4Zpi6MHhYEhuh29EDfcOqPJHI35u1FRH+4eqe+AawxLZY6e
FtvwTTsnNYRWsd72dB0GFMii97u+QV3ef/zCWfc0Z3Pz+a3ATYkzpk7VZr7dZl5W
S9DDlReKMVcbVs3BohyoH135uzW9aF8OF0iirF/xUp3+YWphqp0MH9E+wgFiQpiv
TqwOvRHlNW707S3lOAwg1mxIa4KojLZLG7eLqTD6IOmgcqfvX4SbHAMABp+DvkvU
L2KnoBHv5I2wV9+PLlTRTqQpVOcyuAFQXkHxsBjRfifpQNo=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:23:11 2025 by rpki-client