Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FDa5D5Z6DTR1nv-zydZuTKVH_i8.roa
File: FDa5D5Z6DTR1nv-zydZuTKVH_i8.roa (raw, json)
Hash identifier: syAwrVblUDqDxHz8oQoAOgqcQKXL2fD0wzjd4zZaypU=
Subject key identifier: 14:36:B9:0F:96:7A:0D:34:75:9E:FF:B3:C9:D6:6E:4C:A5:47:FE:2F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019840723EEBB07AFA963D52A9FAA5E79969
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FDa5D5Z6DTR1nv-zydZuTKVH_i8.roa
Signing time: Fri 25 Jul 2025 07:18:05 +0000
ROA not before: Fri 25 Jul 2025 07:18:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 151.243.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Aug 2025 04:56:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:72:3e:eb:b0:7a:fa:96:3d:52:a9:fa:a5:e7:99:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 25 07:18:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1436b90f967a0d34759effb3c9d66e4ca547fe2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:ce:5e:32:a2:9a:a4:7b:ec:69:2c:ea:4a:
76:2d:9f:b2:37:df:c0:e1:67:71:a3:5a:ed:80:30:
d5:a4:39:6e:6b:bb:ab:e9:6d:3f:ca:87:10:03:4f:
f8:ad:71:56:4f:9b:73:f0:5b:03:aa:e6:d0:30:a3:
cc:67:8e:3c:d4:43:75:91:c2:01:bb:f3:92:2a:c1:
8e:c4:a1:ea:92:c6:4a:7b:0b:14:35:ff:f8:b4:ff:
bb:3a:ef:ab:3a:b5:17:f1:99:6a:ef:1e:20:8f:48:
a0:56:97:d8:18:1b:b5:b2:a3:1f:12:ae:9d:f7:10:
0b:e4:6e:8c:d1:1c:1c:fc:11:68:b1:da:91:03:dd:
31:d4:23:96:b5:e7:fd:fd:82:e7:78:2d:fc:d5:b3:
57:b1:4c:57:9d:45:63:1f:36:35:ab:3f:61:77:1a:
4b:64:48:b2:73:1c:66:5a:28:e3:28:54:59:48:a9:
50:42:a3:ee:6d:d5:6e:c3:58:bd:9b:1f:c3:90:97:
87:1d:94:02:96:85:1c:ec:8e:1f:a5:f0:53:37:be:
09:a0:73:3d:fc:b0:b4:39:a3:1f:72:54:7e:37:ed:
ff:eb:3b:cb:53:6e:2d:06:6c:59:15:1e:14:3e:17:
b0:7f:68:c5:16:69:07:5b:d6:8c:7b:80:48:da:1a:
e1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:36:B9:0F:96:7A:0D:34:75:9E:FF:B3:C9:D6:6E:4C:A5:47:FE:2F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FDa5D5Z6DTR1nv-zydZuTKVH_i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.110.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f3:99:84:27:35:8c:2c:0e:e9:0a:89:6e:e5:c4:99:2c:04:
80:be:01:01:e1:b7:14:49:a0:bb:9b:8f:ed:4b:90:19:d1:ac:
45:19:95:4e:91:0a:6b:f5:cc:5f:74:e6:3d:ba:2e:f4:9d:9f:
9a:fc:c4:56:1b:e0:e3:27:bc:30:01:02:d9:89:b0:f3:00:b1:
a7:f1:13:e8:7b:cf:81:21:45:09:f5:ff:ff:80:33:bb:ed:36:
b0:8a:03:33:67:e2:cc:e8:cb:d7:3b:46:74:22:6b:1e:93:ea:
c9:7e:b1:7f:15:11:3e:94:74:93:57:4f:31:fb:f9:78:59:7d:
33:5c:f8:66:69:31:62:53:de:ee:b6:a7:5d:12:1f:5d:c6:a1:
c2:95:86:2e:53:97:2a:53:32:0e:7e:8a:43:24:b1:a6:2f:54:
52:33:4a:b5:28:23:95:0b:c9:59:1e:c5:20:3c:7b:b3:95:91:
68:0b:ab:ee:77:b2:70:86:d9:6c:2c:e9:86:6d:1d:71:d9:a6:
5a:63:f9:4e:0b:1c:be:30:26:c1:38:f0:ed:f7:1c:ee:71:98:
26:4f:d8:a3:e1:ea:08:35:65:91:d4:ad:a7:9f:6e:a2:7d:cb:
e0:3a:a6:a1:28:00:1d:1a:14:a6:d1:81:de:5e:7f:b7:1e:ab:
f4:1e:4b:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhAcj7rsHr6lj1Sqfql55lpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNzI1MDcxODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDM2YjkwZjk2N2EwZDM0NzU5ZWZmYjNjOWQ2NmU0Y2E1NDdmZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtObOXjKimqR77Gks6kp2LZ+yN9/A
4Wdxo1rtgDDVpDlua7ur6W0/yocQA0/4rXFWT5tz8FsDqubQMKPMZ4481EN1kcIB
u/OSKsGOxKHqksZKewsUNf/4tP+7Ou+rOrUX8Zlq7x4gj0igVpfYGBu1sqMfEq6d
9xAL5G6M0Rwc/BFosdqRA90x1COWtef9/YLneC381bNXsUxXnUVjHzY1qz9hdxpL
ZEiycxxmWijjKFRZSKlQQqPubdVuw1i9mx/DkJeHHZQCloUc7I4fpfBTN74JoHM9
/LC0OaMfclR+N+3/6zvLU24tBmxZFR4UPhewf2jFFmkHW9aMe4BI2hrhCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBQ2uQ+Weg00dZ7/s8nWbkylR/4vMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRkRhNUQ1WjZEVFIxbnYtenlkWnVUS1ZIX2k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/NuMA0G
CSqGSIb3DQEBCwUAA4IBAQAW85mEJzWMLA7pColu5cSZLASAvgEB4bcUSaC7m4/t
S5AZ0axFGZVOkQpr9cxfdOY9ui70nZ+a/MRWG+DjJ7wwAQLZibDzALGn8RPoe8+B
IUUJ9f//gDO77TawigMzZ+LM6MvXO0Z0Imsek+rJfrF/FRE+lHSTV08x+/l4WX0z
XPhmaTFiU97utqddEh9dxqHClYYuU5cqUzIOfopDJLGmL1RSM0q1KCOVC8lZHsUg
PHuzlZFoC6vud7JwhtlsLOmGbR1x2aZaY/lOCxy+MCbBOPDt9xzucZgmT9ij4eoI
NWWR1K2nn26ifcvgOqahKAAdGhSm0YHeXn+3Hqv0HktQ
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:49:45 2025 by rpki-client