Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fzo3nbPptaMCEX7RLuSSVohVyc4.roa
File: fzo3nbPptaMCEX7RLuSSVohVyc4.roa (raw, json)
Hash identifier: wwL2OohOyIRI8F5LB5rFcCkZ/77Rj2VZnUhkoV5aE7g=
Subject key identifier: 7F:3A:37:9D:B3:E9:B5:A3:02:11:7E:D1:2E:E4:92:56:88:55:C9:CE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197FDF9670B776CBF31777CE9A96021C186
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fzo3nbPptaMCEX7RLuSSVohVyc4.roa
Signing time: Sat 12 Jul 2025 09:31:09 +0000
ROA not before: Sat 12 Jul 2025 09:31:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 151.242.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Jul 2025 08:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fd:f9:67:0b:77:6c:bf:31:77:7c:e9:a9:60:21:c1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 12 09:31:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f3a379db3e9b5a302117ed12ee492568855c9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:47:98:e1:e8:71:9c:0c:b2:97:41:52:f7:
4e:27:4c:ad:f1:47:80:90:4f:52:29:4c:4c:00:53:
35:d9:8f:f2:fa:b8:1d:d4:4c:1b:e6:2f:bf:c7:8c:
6a:82:e9:17:18:51:7f:bc:c8:58:0a:32:a8:bd:83:
ca:c8:ae:cb:86:de:4c:14:d6:e2:61:71:e0:aa:60:
a7:df:74:13:9e:ca:27:a4:cb:36:29:ee:04:d3:b6:
c9:da:09:c1:95:9a:0a:b5:2f:e4:49:ab:30:47:0f:
ff:d9:8a:77:33:72:5d:7f:6f:8f:3f:1e:72:db:5d:
19:de:e0:bb:21:26:9d:02:a9:b7:f4:2d:6f:61:3c:
36:44:05:85:cd:c1:c2:2d:f4:dd:9d:07:9f:01:28:
c7:9b:37:98:ac:73:7e:95:a2:f4:11:54:f3:21:59:
4f:c1:4e:fc:e3:47:2d:10:d0:4b:f8:81:e0:01:6a:
24:93:eb:aa:00:14:6a:e4:3b:d2:19:27:57:ae:67:
44:5c:a2:f8:f4:1d:37:33:c9:db:25:4c:f1:1b:67:
0d:12:88:d1:67:0b:c5:9c:2a:0d:0e:82:08:31:db:
41:a4:3e:c1:35:9e:80:74:20:bd:d8:e9:5f:f1:44:
ed:bc:ae:62:30:72:db:5c:f6:af:95:00:6a:2e:07:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3A:37:9D:B3:E9:B5:A3:02:11:7E:D1:2E:E4:92:56:88:55:C9:CE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fzo3nbPptaMCEX7RLuSSVohVyc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:82:25:2c:3a:da:03:82:21:23:23:6c:30:4f:4f:4b:cd:79:
27:f6:b6:2c:fe:5e:eb:8d:e5:2d:7f:a6:6d:84:ef:fb:f8:58:
3c:46:9c:48:73:70:18:7b:26:91:3d:04:3c:52:c8:f4:f0:93:
0b:0f:4f:37:70:9e:cc:63:ed:3f:c2:30:dc:1e:36:64:52:5e:
79:44:f2:55:9f:73:5f:24:43:1e:c8:00:ba:d1:fa:f2:a5:7a:
a5:99:bc:07:95:66:3f:fb:6f:df:83:18:b7:18:68:ca:ae:b0:
16:a0:2b:de:71:05:d9:cd:96:77:9b:ec:8b:fb:5e:73:8f:06:
ac:ea:c5:0b:78:1d:56:ea:0a:60:aa:7b:22:d8:9f:c6:e1:c5:
92:e7:67:71:af:cf:23:34:c8:b5:7d:08:14:46:bb:a9:2e:c0:
64:90:5a:34:01:0f:b1:f8:9a:0d:60:14:42:b6:cb:bc:41:68:
61:36:67:60:81:1d:1c:36:93:c0:b5:e7:9f:cd:2c:e3:ca:27:
59:74:9a:1d:90:da:24:ef:29:6e:1c:6e:48:db:f3:33:77:0e:
db:6d:99:23:d1:19:aa:97:a0:39:2e:62:ed:c4:a8:92:d9:41:
ed:f9:ee:c0:ad:3e:23:ea:b3:f2:66:06:77:22:b0:3e:32:6d:
8b:a8:be:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:43:05 2025 by rpki-client