Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FrizBg9o_Bs6mHm1jJK8eM8vnok.roa
File: FrizBg9o_Bs6mHm1jJK8eM8vnok.roa (raw, json)
Hash identifier: f+jWSP104z9StuVv92JLOuM0WO67D6xkiOE0UXau8eA=
Subject key identifier: 16:B8:B3:06:0F:68:FC:1B:3A:98:79:B5:8C:92:BC:78:CF:2F:9E:89
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019868FEDB7500711D726AEA19C9F69E2711
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FrizBg9o_Bs6mHm1jJK8eM8vnok.roa
Signing time: Sat 02 Aug 2025 04:16:29 +0000
ROA not before: Sat 02 Aug 2025 04:16:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62904
IP address blocks: 5.231.124.0/24 maxlen: 24
89.144.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Aug 2025 07:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:68:fe:db:75:00:71:1d:72:6a:ea:19:c9:f6:9e:27:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 2 04:16:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16b8b3060f68fc1b3a9879b58c92bc78cf2f9e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:77:e1:e9:ff:63:52:b4:df:7e:d6:8e:ad:
0b:1f:1d:4e:f8:6f:f0:02:c7:c7:88:2c:5c:77:f5:
77:b3:e8:72:74:5e:da:71:7e:7d:24:50:f1:39:df:
79:41:73:5c:ca:b5:f2:57:51:53:db:06:ec:9b:4c:
4e:d6:8f:e6:6f:33:a1:20:d8:02:b1:c2:35:54:11:
03:8a:00:a1:92:2a:30:df:e4:00:c3:d0:d9:fe:e0:
93:31:45:9d:b5:04:36:5c:c2:c3:92:25:16:8b:db:
48:5a:be:84:a5:82:f8:86:2f:f0:0a:89:ac:a1:79:
d3:85:19:f5:a8:72:5f:32:37:28:8c:c7:63:45:46:
0a:c1:24:1b:4f:53:89:7d:2e:8f:2b:d4:72:5f:5c:
28:5a:4d:29:96:d1:ac:af:2b:30:26:c6:0f:a2:4f:
c1:a5:0c:0d:1b:7a:92:7f:33:f0:27:04:ea:75:bd:
59:14:de:05:ed:5e:28:23:46:56:b5:5c:29:91:5f:
1a:b3:d2:62:b6:db:bb:01:c4:ea:38:62:29:8d:5a:
ee:f5:dd:21:16:7f:c8:5d:5b:4e:1d:5b:bf:d3:da:
55:f5:f0:1e:30:08:4a:b2:d8:9e:cb:1c:f3:bc:73:
65:42:29:e0:7d:fe:80:fc:50:53:73:e2:b2:ea:d7:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B8:B3:06:0F:68:FC:1B:3A:98:79:B5:8C:92:BC:78:CF:2F:9E:89
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FrizBg9o_Bs6mHm1jJK8eM8vnok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.124.0/24
89.144.14.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:bb:77:0c:f6:79:ae:e1:c2:4f:5c:42:76:14:90:54:2e:5b:
27:06:dc:5e:4a:52:f9:78:ad:0c:b2:51:ce:ab:9f:15:07:1f:
f3:a4:9b:69:20:d1:99:a0:82:d1:24:34:17:36:e5:61:00:a5:
4f:64:ee:30:5f:39:ad:af:58:a4:43:ef:0e:4f:c1:72:4b:b2:
d7:36:02:70:97:b6:9a:8f:7f:34:db:96:c3:23:23:e6:19:b3:
49:5b:8b:b6:83:04:f7:22:ee:ba:f2:be:79:dd:68:77:e8:4f:
c0:ef:ec:1d:e8:fc:01:75:13:dc:22:6e:ff:4d:7e:bb:89:73:
9f:f6:0a:a8:cf:25:92:60:fc:60:7c:02:76:95:fc:0a:f0:05:
b4:78:72:ae:2f:5c:cd:fd:30:2a:4e:32:80:83:ca:b7:a9:f0:
82:c0:a0:42:71:40:f0:38:4a:b2:39:d0:55:8c:ba:18:26:3d:
ee:df:09:8e:f3:fa:79:a6:45:d8:82:df:40:2b:a1:fc:11:5f:
31:56:e0:b3:d4:4e:77:7b:19:b8:92:b9:f9:7f:d3:50:29:88:
46:4c:35:6d:03:45:0b:cb:7d:cc:1d:ca:0d:2a:6c:37:c2:26:
34:22:96:c2:1c:76:94:28:a6:e6:9d:13:ae:47:22:45:6a:02:
c2:f7:b8:38
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZho/tt1AHEdcmrqGcn2nicRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwODAyMDQxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmI4YjMwNjBmNjhmYzFiM2E5ODc5YjU4YzkyYmM3OGNmMmY5ZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNh34en/Y1K0337Wjq0LHx1O+G/w
AsfHiCxcd/V3s+hydF7acX59JFDxOd95QXNcyrXyV1FT2wbsm0xO1o/mbzOhINgC
scI1VBEDigChkiow3+QAw9DZ/uCTMUWdtQQ2XMLDkiUWi9tIWr6EpYL4hi/wComs
oXnThRn1qHJfMjcojMdjRUYKwSQbT1OJfS6PK9RyX1woWk0pltGsryswJsYPok/B
pQwNG3qSfzPwJwTqdb1ZFN4F7V4oI0ZWtVwpkV8as9Jittu7AcTqOGIpjVru9d0h
Fn/IXVtOHVu/09pV9fAeMAhKstieyxzzvHNlQingff6A/FBTc+Ky6tdS2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBa4swYPaPwbOph5tYySvHjPL56JMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvRnJpekJnOW9fQnM2bUhtMWpKSzhlTTh2bm9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABed8AwQA
WZAOMA0GCSqGSIb3DQEBCwUAA4IBAQDFu3cM9nmu4cJPXEJ2FJBULlsnBtxeSlL5
eK0MslHOq58VBx/zpJtpINGZoILRJDQXNuVhAKVPZO4wXzmtr1ikQ+8OT8FyS7LX
NgJwl7aaj38025bDIyPmGbNJW4u2gwT3Iu668r553Wh36E/A7+wd6PwBdRPcIm7/
TX67iXOf9gqozyWSYPxgfAJ2lfwK8AW0eHKuL1zN/TAqTjKAg8q3qfCCwKBCcUDw
OEqyOdBVjLoYJj3u3wmO8/p5pkXYgt9AK6H8EV8xVuCz1E53exm4krn5f9NQKYhG
TDVtA0ULy33MHcoNKmw3wiY0IpbCHHaUKKbmnROuRyJFagLC97g4
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:09:36 2025 by rpki-client