Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RFga1npX07SbhCbQ-wr0xiRhBL8.roa
File: RFga1npX07SbhCbQ-wr0xiRhBL8.roa (raw, json)
Hash identifier: 6oW53thJTsffVEnn6fqMpuuz5O9Fe4fBQOoEZH3t7oY=
Subject key identifier: 44:58:1A:D6:7A:57:D3:B4:9B:84:26:D0:FB:0A:F4:C6:24:61:04:BF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01977E2E128080DB4EAA48B46BEC24693FB0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RFga1npX07SbhCbQ-wr0xiRhBL8.roa
Signing time: Tue 17 Jun 2025 13:57:17 +0000
ROA not before: Tue 17 Jun 2025 13:57:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56913
IP address blocks: 151.244.112.0/24 maxlen: 24
151.244.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jun 2025 07:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:2e:12:80:80:db:4e:aa:48:b4:6b:ec:24:69:3f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 17 13:57:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44581ad67a57d3b49b8426d0fb0af4c6246104bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:d9:9d:cf:5c:73:e5:4f:d7:c7:d3:8f:7e:
bc:19:30:51:c6:76:ca:51:e8:6b:a0:4d:09:ba:40:
08:ba:7a:4b:5b:05:fd:9b:28:f7:d2:6a:f9:50:c7:
d7:bc:c5:7a:06:bf:18:ac:65:80:01:5b:b5:8e:1d:
e1:cb:2e:ab:72:9d:27:59:7a:24:c0:98:20:64:24:
2d:75:26:53:31:d9:c4:40:ff:ca:1e:3e:82:ab:9b:
4f:85:19:b9:97:40:69:8b:d6:de:83:6a:17:f2:d6:
94:ba:44:26:40:9b:4a:a0:a6:c9:1f:8b:c9:87:68:
ad:5e:de:fe:da:e0:aa:0a:4a:69:4f:df:8f:c9:93:
7e:26:3c:96:1b:84:1a:ef:45:7e:a8:b8:05:fb:e9:
d2:79:fa:e5:8d:de:14:ee:7b:b8:8e:d8:b2:eb:59:
a6:bb:18:96:25:63:b5:59:fc:1a:9e:a5:e1:fa:d8:
f8:c7:34:48:33:31:f0:82:70:4c:3a:84:de:56:03:
f7:bf:aa:a3:98:91:50:c4:32:a6:ae:41:8b:5b:8c:
37:78:fe:cb:d4:37:46:8a:dd:8f:25:de:11:a6:c1:
3f:93:27:a9:c6:8a:c2:ea:2f:10:43:51:98:46:88:
19:df:97:55:79:20:29:c5:19:ec:59:4c:c3:8a:34:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:58:1A:D6:7A:57:D3:B4:9B:84:26:D0:FB:0A:F4:C6:24:61:04:BF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RFga1npX07SbhCbQ-wr0xiRhBL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.112.0/24
151.244.116.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:38:50:26:e8:91:cd:c0:69:1c:65:65:a9:05:f9:6c:0b:95:
1d:4b:97:76:09:e6:52:f9:a2:09:a7:a6:f1:a9:cc:f9:fd:8a:
89:0f:0c:af:80:7a:64:86:e9:78:e9:3b:92:ef:01:cc:ac:06:
c1:2e:a2:ac:28:6e:18:9f:4e:05:6c:2b:ab:58:af:2e:b1:d5:
72:40:4e:fb:9d:b1:c0:ef:e9:60:be:c8:b2:76:31:94:de:b2:
c3:7d:0f:1c:6f:4d:4c:88:2b:48:6a:58:b0:b7:42:94:07:72:
22:c7:03:8b:c0:c7:c0:84:5f:e2:d4:8e:f0:13:a5:b6:e1:dc:
2d:e4:54:98:a1:72:32:37:0a:bf:74:b9:3a:c1:09:18:b9:9c:
67:2b:c1:38:94:cd:82:66:76:d2:33:04:24:dd:88:7e:cd:93:
b1:c7:fb:a4:13:c0:d8:48:05:26:5a:d9:e5:b2:a5:31:ee:bc:
5e:e7:61:02:ac:c3:ef:a7:ec:94:90:21:ac:74:6a:25:6d:1b:
34:bf:fa:c2:0c:63:6f:8b:e9:26:a0:7c:39:80:91:75:2e:6d:
b6:6a:e8:72:69:2c:dc:12:f3:4c:a5:d6:07:75:4a:ec:b2:33:
be:42:d5:ad:7c:d5:9e:3a:14:92:11:e4:df:00:77:39:04:99:
cf:dc:12:8b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZd+LhKAgNtOqki0a+wkaT+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjE3MTM1NzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDU4MWFkNjdhNTdkM2I0OWI4NDI2ZDBmYjBhZjRjNjI0NjEwNGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYPZnc9cc+VP18fTj368GTBRxnbK
UehroE0JukAIunpLWwX9myj30mr5UMfXvMV6Br8YrGWAAVu1jh3hyy6rcp0nWXok
wJggZCQtdSZTMdnEQP/KHj6Cq5tPhRm5l0Bpi9beg2oX8taUukQmQJtKoKbJH4vJ
h2itXt7+2uCqCkppT9+PyZN+JjyWG4Qa70V+qLgF++nSefrljd4U7nu4jtiy61mm
uxiWJWO1WfwanqXh+tj4xzRIMzHwgnBMOoTeVgP3v6qjmJFQxDKmrkGLW4w3eP7L
1DdGit2PJd4RpsE/kyepxorC6i8QQ1GYRogZ35dVeSApxRnsWUzDijTL5QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFERYGtZ6V9O0m4Qm0PsK9MYkYQS/MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUkZnYTFucFgwN1NiaENiUS13cjB4aVJoQkw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/RwAwQA
l/R0MA0GCSqGSIb3DQEBCwUAA4IBAQCNOFAm6JHNwGkcZWWpBflsC5UdS5d2CeZS
+aIJp6bxqcz5/YqJDwyvgHpkhul46TuS7wHMrAbBLqKsKG4Yn04FbCurWK8usdVy
QE77nbHA7+lgvsiydjGU3rLDfQ8cb01MiCtIaliwt0KUB3IixwOLwMfAhF/i1I7w
E6W24dwt5FSYoXIyNwq/dLk6wQkYuZxnK8E4lM2CZnbSMwQk3Yh+zZOxx/ukE8DY
SAUmWtnlsqUx7rxe52ECrMPvp+yUkCGsdGolbRs0v/rCDGNvi+kmoHw5gJF1Lm22
auhyaSzcEvNMpdYHdUrssjO+QtWtfNWeOhSSEeTfAHc5BJnP3BKL
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:06:45 2025 by rpki-client