Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/FzbI7_5b2BRUMpnNVch73oTbn2g.roa
File: FzbI7_5b2BRUMpnNVch73oTbn2g.roa (raw, json)
Hash identifier: RA5TY9iHdxnEvTRECbUcqxwb9eHYtJoWy7GMgCssuyk=
Subject key identifier: 17:36:C8:EF:FE:5B:D8:14:54:32:99:CD:55:C8:7B:DE:84:DB:9F:68
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0198756C4EA472B741606C4DF405E9233A92
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/FzbI7_5b2BRUMpnNVch73oTbn2g.roa
Signing time: Mon 04 Aug 2025 14:11:28 +0000
ROA not before: Mon 04 Aug 2025 14:11:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206411
IP address blocks: 212.116.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Aug 2025 18:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:6c:4e:a4:72:b7:41:60:6c:4d:f4:05:e9:23:3a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 4 14:11:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1736c8effe5bd814543299cd55c87bde84db9f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:3f:19:e5:41:3a:74:ea:3c:7e:11:84:a5:
9b:56:f9:20:7f:17:c4:21:bf:af:b0:fc:97:82:e2:
9e:ae:6e:1d:00:87:0a:dd:ee:13:74:f2:e7:7b:16:
7a:fd:43:e5:61:f4:79:39:1e:67:9d:c8:e7:68:32:
e3:f8:d0:88:0a:9c:47:ad:92:5a:6a:6a:7b:64:da:
be:28:83:37:69:8b:c7:92:6a:c3:76:39:87:58:fd:
46:71:f5:0f:1e:79:1f:88:47:47:1a:3c:8b:15:24:
78:19:1a:47:2d:1a:1c:d7:19:97:ed:53:09:99:49:
41:47:2b:d1:5f:13:a2:18:88:d9:2f:1a:e8:4c:47:
30:cd:0a:51:33:19:db:f4:c6:38:be:0b:d9:6b:ca:
ab:a0:f6:a5:19:a7:65:c0:28:c1:14:79:48:41:28:
81:d8:7f:25:08:b8:31:f5:36:4d:4e:6b:4d:4b:5c:
81:50:0d:3e:a4:fe:08:6b:2e:57:d3:87:71:27:d8:
dd:de:3c:de:44:48:09:9a:c2:76:db:47:33:47:a7:
b5:dc:b3:53:ee:2e:ee:8d:f7:68:24:41:75:7f:b2:
38:c0:4d:9d:d6:8c:42:30:30:f3:13:46:ed:c5:2e:
ed:6b:60:40:19:d7:69:6e:9b:30:f5:7a:61:d7:36:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:36:C8:EF:FE:5B:D8:14:54:32:99:CD:55:C8:7B:DE:84:DB:9F:68
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/FzbI7_5b2BRUMpnNVch73oTbn2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f5:3f:d7:16:a4:cf:b3:71:27:2e:6f:12:f7:bd:80:53:65:
77:08:90:90:b2:a2:ee:66:59:18:7a:6f:70:6d:20:1c:8d:9f:
54:84:b7:a2:e1:2a:cb:78:d3:5a:c8:3e:19:fc:e0:40:a7:f2:
40:5d:66:7e:01:4c:32:96:80:0e:50:0a:4f:b0:62:91:44:cc:
0e:62:8d:3e:3b:30:45:e8:60:c2:c7:f5:f1:ba:9a:6e:35:20:
7f:39:9a:6f:1f:ed:df:f0:3e:cc:78:6e:6f:a4:f4:5e:4a:dd:
22:9b:a0:7e:48:78:b7:ef:a2:00:29:4b:77:9d:b8:ac:66:ec:
97:5b:31:7f:ac:ca:de:1f:a9:52:e2:86:f5:75:9f:4a:f6:24:
ad:4f:32:93:3e:46:85:d7:73:5e:4b:f9:8a:15:66:67:07:10:
5d:e7:4a:5a:18:f8:0c:48:47:73:80:9d:e7:80:9f:9e:2d:d9:
03:62:49:f1:4c:dd:ef:27:47:e9:38:38:4f:19:97:bb:70:ae:
ef:1c:02:c4:14:98:47:81:a6:54:87:e5:56:09:ae:15:ad:00:
ec:3d:f0:bd:6b:cc:20:1d:0a:54:01:ad:d4:d6:b2:32:16:21:
67:b2:3f:84:0d:8f:41:13:ed:9a:32:95:b7:2b:8d:a8:06:72:
90:91:7e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:52 2025 by rpki-client