Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/Fkh7Fj7SyLmA6Efy0Z8ip0OLi0Q.roa
File: Fkh7Fj7SyLmA6Efy0Z8ip0OLi0Q.roa (raw, json)
Hash identifier: QqQz6edT/wnuQ4mAuEn7p0DE4X4tGTIJj6is3FOWB98=
Subject key identifier: 16:48:7B:16:3E:D2:C8:B9:80:E8:47:F2:D1:9F:22:A7:43:8B:8B:44
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 0194258F4E30578845235B7990361253FC4F
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/Fkh7Fj7SyLmA6Efy0Z8ip0OLi0Q.roa
Signing time: Thu 02 Jan 2025 05:48:56 +0000
ROA not before: Thu 02 Jan 2025 05:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62093
IP address blocks: 151.248.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 08:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4e:30:57:88:45:23:5b:79:90:36:12:53:fc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jan 2 05:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16487b163ed2c8b980e847f2d19f22a7438b8b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:77:87:6c:e1:f7:46:d5:a7:fa:e9:61:4d:c4:
50:cd:ea:a1:28:1a:52:14:f5:9f:24:20:79:9a:cd:
bd:d4:1a:07:7e:37:0a:de:25:fe:26:a3:00:0e:cc:
fd:d0:df:44:9a:9d:d8:8e:02:b8:ca:a4:86:f2:01:
8d:76:1e:8f:2e:c5:45:7e:2f:5f:4e:86:67:6e:97:
ad:0b:12:6c:87:02:60:bf:ea:80:46:16:e9:2c:a9:
ea:b8:6a:05:7e:39:6d:76:e8:22:cb:b5:78:cf:f9:
cb:cc:56:ec:9a:64:81:4c:cb:92:d4:1e:89:9a:43:
f3:95:28:0c:b3:db:0c:19:46:24:a3:59:af:13:c4:
c3:d9:3e:ff:14:00:99:e1:e8:1a:b7:b7:3c:17:45:
6d:9c:21:9b:2c:c1:4d:37:2c:be:07:e6:ce:90:24:
e5:ad:05:d7:af:48:58:01:00:39:9e:16:10:13:69:
c8:85:b9:bc:9e:38:bd:94:eb:c1:9c:50:7f:0f:8a:
d4:1b:3d:a2:7b:8c:c1:3e:9a:b4:b4:78:a4:27:10:
9a:0c:99:29:44:d2:2d:2c:b8:fb:6c:dd:1e:63:03:
48:0d:46:bd:87:71:53:d1:d4:6d:40:25:60:d3:e5:
4d:f2:35:50:7b:34:f0:9c:df:6b:ac:0d:68:a6:97:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:48:7B:16:3E:D2:C8:B9:80:E8:47:F2:D1:9F:22:A7:43:8B:8B:44
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/Fkh7Fj7SyLmA6Efy0Z8ip0OLi0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.15.0/24
Signature Algorithm: sha256WithRSAEncryption
67:30:a8:eb:78:2a:7a:99:38:fa:97:2f:ed:fa:0f:83:d1:e5:
4b:39:12:ae:99:c9:bd:b8:ac:64:ec:17:e2:21:b5:c4:04:75:
d6:90:1f:42:70:c8:75:06:bd:4f:c5:64:9d:dc:4e:6d:e9:4d:
f6:25:3d:85:4d:2b:2e:ae:0e:40:1c:bd:89:1b:14:40:dd:0b:
b2:41:ac:ac:65:3b:81:b5:b6:fd:bd:ed:57:41:83:4a:50:fb:
07:c7:21:7e:23:d6:2f:df:72:1c:30:10:27:fb:ed:3d:42:a5:
50:cd:9b:fd:05:c9:24:3e:a5:44:26:49:8a:9e:d3:21:96:d5:
98:90:1c:50:5f:47:d5:fa:e2:62:aa:f6:ad:99:8a:60:cf:4c:
64:f4:04:fd:47:05:63:10:97:20:9e:5f:62:49:cc:55:82:55:
df:3f:0f:07:59:7c:9a:c8:e4:89:91:0d:9b:31:e1:0a:85:99:
4c:ab:76:bc:88:c9:47:69:55:9d:90:4e:59:f2:47:d2:57:e6:
cc:ff:16:3f:80:e6:a5:78:dc:e9:cd:49:cc:92:71:0e:64:1e:
cf:89:91:22:33:0d:a9:94:2f:94:6f:3f:1f:60:21:97:dd:c0:
06:ac:aa:3e:64:e8:03:20:51:88:67:30:d7:66:91:5b:2d:3c:
9a:a6:a2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:57:39 2025 by rpki-client