Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/Mfby_Z9NxOiv7yL8fNSyJv-6tm8.roa
File: Mfby_Z9NxOiv7yL8fNSyJv-6tm8.roa (raw, json)
Hash identifier: +EIKKBpzSdeXRCaUaWTr56yyso8AurM6MnBzLj6xqPE=
Subject key identifier: 31:F6:F2:FD:9F:4D:C4:E8:AF:EF:22:FC:7C:D4:B2:26:FF:BA:B6:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 019824D045F08EC60D550F6FBD4ACBDEDB3D
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/Mfby_Z9NxOiv7yL8fNSyJv-6tm8.roa
Signing time: Sat 19 Jul 2025 22:31:25 +0000
ROA not before: Sat 19 Jul 2025 22:31:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 188.208.196.0/24 maxlen: 24
2a06:f940::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 20 Jul 2025 05:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:24:d0:45:f0:8e:c6:0d:55:0f:6f:bd:4a:cb:de:db:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Jul 19 22:31:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31f6f2fd9f4dc4e8afef22fc7cd4b226ffbab66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:a3:2d:2a:b1:a7:e4:e4:5e:71:34:f6:bd:
bd:ed:1c:9f:1a:64:20:c0:33:95:3a:aa:84:3e:0f:
e0:58:f4:de:14:5e:95:2a:12:b2:9c:c2:4b:38:cc:
f8:eb:e2:c5:5c:90:ad:f7:fa:26:a7:30:c7:52:72:
c6:0d:82:bc:a3:af:07:9a:d7:71:c9:a1:b6:cc:fd:
61:10:33:1c:e4:e1:87:d2:80:82:e4:2a:c2:73:e7:
fb:d0:01:d3:3c:09:fe:c2:25:58:e6:dc:7f:1e:49:
9a:de:44:5d:d2:16:18:01:42:17:fc:13:e3:34:97:
2e:3e:4b:1d:38:80:a0:0d:18:22:6a:1c:83:51:88:
dc:38:ad:87:0a:f6:23:c9:13:fe:c8:48:6a:f0:b3:
4b:b0:0f:ab:85:fc:2a:2d:36:ba:b7:7b:90:8e:c3:
6b:b5:65:a9:34:47:9f:06:3f:2e:ce:31:29:0c:f9:
59:44:4f:4a:0c:7e:d1:d5:39:83:66:ab:99:95:e0:
63:52:48:7e:86:48:95:4e:a0:39:7f:5c:cd:97:46:
86:30:1d:02:8e:e7:75:0e:27:b2:22:c5:99:8a:53:
78:3c:a9:41:b6:9a:ac:06:20:ce:f0:9e:0d:c8:b4:
7e:ce:48:9a:20:9f:0b:ef:70:60:c8:93:2c:26:05:
0e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F6:F2:FD:9F:4D:C4:E8:AF:EF:22:FC:7C:D4:B2:26:FF:BA:B6:6F
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/Mfby_Z9NxOiv7yL8fNSyJv-6tm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.196.0/24
IPv6:
2a06:f940::/48
Signature Algorithm: sha256WithRSAEncryption
13:d7:71:fd:98:57:64:f5:32:e4:86:f3:48:ea:dd:56:0d:99:
fb:65:bd:7d:b7:ca:cd:f3:34:f5:0e:59:a7:04:41:de:76:1d:
97:e6:5b:73:f1:e1:4a:be:78:2d:84:f8:4e:29:6a:14:02:39:
9f:ed:5d:8a:fe:13:88:12:65:8a:24:00:d8:2f:74:a0:18:4b:
54:9c:bb:c6:8c:24:04:e9:dc:03:4b:07:cb:3c:08:1f:f4:b1:
8e:4d:58:23:69:0c:80:5f:3b:c5:d4:73:56:ae:74:0b:d3:ea:
8d:75:b1:3b:58:02:71:45:b6:52:6e:b7:10:54:c9:09:38:65:
0a:4f:c4:1b:4d:b2:69:69:58:4a:54:6a:9b:dc:0f:4f:7f:6c:
5d:44:23:5d:ef:2e:b9:28:1e:d0:bb:93:11:8e:16:4d:bd:73:
f8:1d:38:55:73:51:d6:7e:82:76:e1:92:d5:6c:e4:dc:7a:e9:
8b:1e:54:51:09:b9:b4:fe:81:a9:ed:68:14:b8:88:30:b3:a1:
27:fd:de:ad:6a:ad:cc:c7:9b:81:e1:da:a0:b4:11:92:5b:65:
6b:19:22:22:a8:f8:d4:09:01:89:82:61:26:b8:69:1a:b4:2c:
95:2e:01:9e:6d:d7:7c:a4:e6:ec:5e:27:6b:cc:37:67:e0:2f:
71:7d:d6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:35:59 2025 by rpki-client