Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63150.roa
File: AS63150.roa (raw, json)
Hash identifier: BC6tzcLt9jKCOMJq3dwUOsZPdCSiD2fHOkrAb9s+eZo=
Subject key identifier: FC:33:6B:F2:EB:4A:A5:73:4B:08:F9:63:46:C4:A7:5B:4B:65:71:45
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6E44B5BC02F2A01214A2ABB8C79299D62C0CDF9E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63150.roa
Signing time: Wed 01 Jan 2025 10:42:34 +0000
ROA not before: Wed 01 Jan 2025 10:37:34 +0000
ROA not after: Wed 31 Dec 2025 10:42:34 +0000
asID: 63150
IP address blocks: 141.11.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Mar 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:44:b5:bc:02:f2:a0:12:14:a2:ab:b8:c7:92:99:d6:2c:0c:df:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 1 10:37:34 2025 GMT
Not After : Dec 31 10:42:34 2025 GMT
Subject: CN=FC336BF2EB4AA5734B08F96346C4A75B4B657145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:93:c1:61:58:2b:f1:11:50:55:6d:a3:c3:
78:db:2b:44:84:ab:af:ac:9f:38:69:a2:0e:2d:e0:
3a:52:66:f9:c0:59:72:2b:12:f5:6f:78:34:6e:a4:
80:b7:5a:5c:c9:6d:7b:9a:bb:ab:87:27:26:e5:ab:
6e:54:1a:17:61:4a:9e:d6:ff:6e:21:0c:1c:24:1c:
07:ad:e0:ae:65:90:40:0f:ad:3c:9b:b1:9a:c8:ed:
c2:53:88:dc:a0:b1:26:93:dc:5d:33:20:18:f9:b8:
85:ca:df:50:60:ae:7a:80:cc:3a:89:76:a5:f8:8f:
27:ed:ae:31:90:52:e9:10:13:f0:06:89:76:62:de:
93:d6:f6:07:0f:e1:15:3a:e6:6a:12:93:b0:57:c6:
d8:a6:9d:29:b9:1d:58:4f:49:68:b0:03:79:9c:b5:
16:ac:fb:04:a5:26:50:44:6b:9f:6a:71:3c:9b:95:
7e:32:a6:cb:2a:df:ee:01:04:8a:54:09:ce:1c:bc:
25:bf:1d:ac:4d:13:e6:6a:ee:79:0d:3b:2c:f9:65:
f5:fc:a6:22:a5:d3:65:71:05:73:ed:78:4b:6e:91:
36:b7:1f:05:8d:6d:40:75:37:68:3d:00:c0:d2:f1:
63:47:03:52:be:96:09:ec:5d:97:32:0e:82:64:81:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:33:6B:F2:EB:4A:A5:73:4B:08:F9:63:46:C4:A7:5B:4B:65:71:45
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.245.0/24
Signature Algorithm: sha256WithRSAEncryption
15:49:02:4a:b7:5b:41:ad:98:ce:b6:0f:33:a7:de:58:d6:a3:
ee:47:18:f6:25:14:69:ce:e7:fc:c7:b7:c6:dc:fb:96:f4:94:
54:48:b0:86:cf:5d:f7:c9:97:3a:49:09:3e:26:53:8a:19:b2:
c3:3c:88:d0:07:1a:8a:62:d4:d4:d4:78:9c:2f:ae:99:a4:99:
f1:23:46:e9:7f:8b:51:e0:4e:a7:ca:ad:85:21:17:31:c8:3c:
b4:dd:44:ac:3c:f6:95:42:fe:cf:d7:53:f3:ba:ee:d3:63:0c:
d5:28:03:92:26:ef:c8:84:78:f3:4e:24:bc:b7:34:19:33:ff:
6b:6a:2b:c4:2b:0f:4c:56:83:e8:0a:cd:4d:55:25:9a:39:6a:
39:a9:ff:f5:b5:c0:3e:9b:9c:e5:bc:6d:94:05:f2:f2:d5:02:
5b:b5:b4:da:e9:66:3c:73:38:5d:b9:8a:14:79:d9:e2:0e:75:
07:67:7c:7d:19:a2:88:2d:fe:ca:71:de:53:9b:3a:7c:3d:4e:
f0:88:e8:cb:ac:b7:51:ec:68:21:d2:e2:be:af:ff:bd:b5:a5:
29:9b:c5:a8:37:e1:b2:00:e8:7c:3b:31:64:d1:99:3f:e3:f5:
69:d4:2c:b0:e8:f6:04:ae:39:1a:53:54:a4:b8:8d:41:87:86:
2a:ba:58:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:18 2025 by rpki-client