Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/F2-zJc1FippFWUrK8KPyMxBqc-E.roa
File: F2-zJc1FippFWUrK8KPyMxBqc-E.roa (raw, json)
Hash identifier: lHqWfemcb3Qp+plgGl6oB63/sqrms+HFEzAYgTaV4q0=
Subject key identifier: 17:6F:B3:25:CD:45:8A:9A:45:59:4A:CA:F0:A3:F2:33:10:6A:73:E1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01985994092ABF1C0183EED5E1C920630390
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/F2-zJc1FippFWUrK8KPyMxBqc-E.roa
Signing time: Wed 30 Jul 2025 04:25:30 +0000
ROA not before: Wed 30 Jul 2025 04:25:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400529
IP address blocks: 151.241.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 11:15:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:94:09:2a:bf:1c:01:83:ee:d5:e1:c9:20:63:03:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 30 04:25:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=176fb325cd458a9a45594acaf0a3f233106a73e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:68:85:8d:0c:d7:71:39:e2:d3:53:4d:04:
64:41:f6:d3:8a:0d:22:f3:bc:3e:17:f3:50:5a:70:
e4:5b:8f:6c:c2:c5:bc:f6:2e:a1:25:11:86:db:3b:
45:55:e4:c9:a9:23:12:82:69:73:b2:2f:6b:03:6d:
ff:63:58:a0:da:7d:4b:63:2c:7e:da:47:42:8e:bf:
04:59:95:13:d1:c9:b9:94:db:b9:62:91:d9:d7:0f:
9f:60:6f:94:ec:3f:cb:c1:8c:3b:cf:e7:5b:f1:20:
ba:e5:0b:49:05:17:d1:e8:7e:d5:c2:ea:b2:d2:5d:
28:7f:2e:90:ee:ec:8d:7c:5f:f1:39:74:27:83:cb:
14:9f:06:2a:d8:4c:4e:a4:73:44:a0:e5:ee:d0:1b:
f1:4e:fa:69:66:af:c4:be:fc:0d:4d:64:6c:8e:5d:
7d:40:cc:bc:c8:68:75:93:ac:61:db:b4:cc:93:85:
af:b6:9e:4f:99:15:62:fb:36:bf:ca:11:b7:7e:5a:
47:27:7e:0d:37:74:2b:5c:f6:76:f4:27:e2:8a:11:
49:bb:dd:e8:9b:5f:1c:19:50:0d:6e:76:00:9d:ac:
6d:a6:14:98:10:cf:20:1a:c0:a7:07:66:2b:a0:fe:
79:d4:1a:27:1e:6e:76:d7:79:27:c8:10:36:3e:15:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6F:B3:25:CD:45:8A:9A:45:59:4A:CA:F0:A3:F2:33:10:6A:73:E1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/F2-zJc1FippFWUrK8KPyMxBqc-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.18.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fd:aa:3a:8e:bd:c5:49:5f:80:dc:a6:cf:ea:df:9a:95:e5:
35:37:aa:a7:e5:ae:f9:58:57:d3:06:e7:a6:62:c4:86:6c:fd:
75:1c:06:64:86:ef:73:7a:2f:f6:bc:69:17:50:50:fd:54:05:
55:91:76:0b:05:89:64:a5:b8:2f:d5:22:96:91:5c:52:02:5e:
40:d0:13:84:b3:34:6d:e3:e0:9d:6a:f1:f5:27:15:22:d6:ad:
fc:ac:a7:cc:aa:a3:45:28:c3:a9:7b:3c:92:fd:a7:d4:ca:cf:
16:a0:d7:03:99:b8:9c:97:99:88:e6:b6:fa:80:89:8a:5b:bd:
49:46:7b:a6:a4:49:e1:fa:70:62:d1:d4:cb:b1:63:0b:52:a4:
11:43:76:4e:85:31:73:be:1d:15:33:7e:5f:a6:a9:a4:32:f3:
fc:1c:43:28:f8:38:a4:08:12:aa:c2:98:b7:cc:10:ae:6d:65:
bb:7a:f8:39:40:47:1b:ee:79:5c:0c:2d:68:0c:97:8f:4d:cb:
d5:48:3a:9a:0f:2b:78:87:d0:72:76:ff:d6:d1:02:83:7f:76:
36:64:22:47:74:b5:51:80:42:e8:54:a2:f4:ca:d7:69:2a:d8:
2c:6c:05:39:7f:14:99:50:8c:e2:e5:ab:7d:9e:fd:5d:b8:ec:
6e:55:99:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhZlAkqvxwBg+7V4ckgYwOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNzMwMDQyNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzZmYjMyNWNkNDU4YTlhNDU1OTRhY2FmMGEzZjIzMzEwNmE3M2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0hohY0M13E54tNTTQRkQfbTig0i
87w+F/NQWnDkW49swsW89i6hJRGG2ztFVeTJqSMSgmlzsi9rA23/Y1ig2n1LYyx+
2kdCjr8EWZUT0cm5lNu5YpHZ1w+fYG+U7D/LwYw7z+db8SC65QtJBRfR6H7Vwuqy
0l0ofy6Q7uyNfF/xOXQng8sUnwYq2ExOpHNEoOXu0BvxTvppZq/EvvwNTWRsjl19
QMy8yGh1k6xh27TMk4Wvtp5PmRVi+za/yhG3flpHJ34NN3QrXPZ29CfiihFJu93o
m18cGVANbnYAnaxtphSYEM8gGsCnB2YroP551BonHm5213knyBA2PhUqPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBdvsyXNRYqaRVlKyvCj8jMQanPhMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRjItekpjMUZpcHBGV1VySzhLUHlNeEJxYy1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/ESMA0G
CSqGSIb3DQEBCwUAA4IBAQA+/ao6jr3FSV+A3KbP6t+aleU1N6qn5a75WFfTBuem
YsSGbP11HAZkhu9zei/2vGkXUFD9VAVVkXYLBYlkpbgv1SKWkVxSAl5A0BOEszRt
4+CdavH1JxUi1q38rKfMqqNFKMOpezyS/afUys8WoNcDmbicl5mI5rb6gImKW71J
RnumpEnh+nBi0dTLsWMLUqQRQ3ZOhTFzvh0VM35fpqmkMvP8HEMo+DikCBKqwpi3
zBCubWW7evg5QEcb7nlcDC1oDJePTcvVSDqaDyt4h9Bydv/W0QKDf3Y2ZCJHdLVR
gELoVKL0ytdpKtgsbAU5fxSZUIzi5at9nv1duOxuVZmt
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:16:32 2025 by rpki-client