Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198090.roa
File: AS198090.roa (raw, json)
Hash identifier: 56blMuau1+pRpCLhG2SErnMoMlot5205l0Sc2dEAb2I=
Subject key identifier: 8E:33:FB:39:BB:41:86:1B:33:24:92:1E:E2:85:B8:AA:78:BE:52:13
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 31DDECC7FB5D0FE84B2B9A5084A7B8995618EEA6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198090.roa
Signing time: Thu 16 Jan 2025 14:39:37 +0000
ROA not before: Thu 16 Jan 2025 14:34:37 +0000
ROA not after: Thu 15 Jan 2026 14:39:37 +0000
asID: 198090
IP address blocks: 82.29.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 17 Jan 2025 06:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:dd:ec:c7:fb:5d:0f:e8:4b:2b:9a:50:84:a7:b8:99:56:18:ee:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 16 14:34:37 2025 GMT
Not After : Jan 15 14:39:37 2026 GMT
Subject: CN=8E33FB39BB41861B3324921EE285B8AA78BE5213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:26:e5:ef:6b:bd:78:2c:e8:06:2c:e5:c0:
aa:40:61:36:f6:35:f0:c8:63:f9:57:2b:2e:1c:09:
dd:8f:85:93:d6:d0:17:35:ef:17:9d:80:f4:a6:cf:
21:a8:22:1c:f0:9a:d6:e8:9a:f8:2d:61:d9:1c:6b:
86:d0:ac:a6:3b:dd:16:2b:53:ee:9b:2c:76:ee:f9:
2a:53:0f:a0:87:b3:ed:08:47:62:8e:26:5b:39:01:
fd:d8:31:65:91:ce:d1:58:40:3e:3a:da:17:ac:cf:
49:52:7a:32:26:91:a6:eb:78:d1:90:c5:5f:53:40:
3f:a6:7f:e4:33:4d:fc:ce:89:e0:81:1c:1e:ae:a5:
60:65:02:69:e0:96:bd:71:5b:7c:f0:66:ef:33:1c:
ba:49:3b:7d:65:19:75:59:4e:8e:f1:e4:52:8d:ef:
c8:71:87:0f:aa:c6:2c:2c:05:27:92:e1:f6:3e:ff:
45:de:8f:63:42:88:f6:21:f6:20:2c:9f:69:b4:ff:
7e:13:d9:fb:87:17:dd:02:4c:02:5f:38:10:40:87:
22:74:26:3b:cb:08:7b:91:af:88:f6:2c:2a:f8:82:
d3:74:b2:85:24:a3:6f:72:ca:d4:42:c8:36:a0:c1:
96:d4:5b:75:75:5a:0a:ce:f7:54:63:37:c3:44:c6:
9e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:33:FB:39:BB:41:86:1B:33:24:92:1E:E2:85:B8:AA:78:BE:52:13
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198090.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.144.0/22
Signature Algorithm: sha256WithRSAEncryption
92:68:98:d3:d4:be:e8:fb:9a:0c:a8:27:0f:b8:71:c9:e6:aa:
bd:64:b5:85:45:81:c3:67:fd:33:ab:de:24:89:7f:07:5f:31:
db:98:13:ff:19:72:7b:35:7c:22:07:1f:9c:be:39:00:71:b9:
d0:48:1e:c6:7c:31:c0:09:9f:75:2a:f1:2d:73:8d:e8:be:74:
b5:3f:47:52:6b:71:35:ad:38:85:69:4a:97:b1:91:e6:79:06:
7b:f4:f7:17:98:59:cf:ed:f0:f0:34:09:04:18:35:e9:40:05:
ba:62:e4:87:14:03:84:37:64:21:1d:fe:91:93:a7:d6:b6:24:
16:43:da:1a:a1:5f:45:d6:3e:85:65:2b:1b:1e:f2:9f:12:47:
33:27:47:a7:7b:96:5a:cd:3f:35:eb:8b:d3:26:75:fb:f8:a2:
ab:23:de:84:a4:cb:d0:58:a0:e3:c0:bc:be:59:7c:eb:fb:55:
7a:00:74:41:0c:16:41:76:6a:e4:9c:fb:af:03:3a:98:d6:5d:
b0:29:d0:6c:8b:4a:cd:bb:9d:5b:1c:3c:87:2d:06:92:7b:f2:
8a:92:28:d0:5b:7d:0d:f1:67:f6:10:64:b7:3c:74:cc:e8:fd:
c5:87:da:9b:37:d5:83:bf:51:b8:9b:48:e8:22:54:de:3c:9a:
10:75:a3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:44:53 2025 by rpki-client