Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FuFoB8LfEtMAHhEX4a2ZY-u7kiE.roa
File: FuFoB8LfEtMAHhEX4a2ZY-u7kiE.roa (raw, json)
Hash identifier: R/YxqCEQJTKrpuxrvH/fbYX6omlK/xz1xndGdAUPNvw=
Subject key identifier: 16:E1:68:07:C2:DF:12:D3:00:1E:11:17:E1:AD:99:63:EB:BB:92:21
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019600BC696448983127A4F5390F3BF06C12
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FuFoB8LfEtMAHhEX4a2ZY-u7kiE.roa
Signing time: Fri 04 Apr 2025 12:17:49 +0000
ROA not before: Fri 04 Apr 2025 12:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396357
IP address blocks: 151.242.208.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 04 Apr 2025 12:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:bc:69:64:48:98:31:27:a4:f5:39:0f:3b:f0:6c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 4 12:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16e16807c2df12d3001e1117e1ad9963ebbb9221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:14:1c:30:81:48:b0:5a:b5:f4:44:e0:c5:
83:12:e9:50:a3:11:5c:1d:68:48:2a:96:d7:25:45:
6e:71:e3:40:ce:54:79:39:1e:f1:f7:b5:ad:b9:e8:
af:2e:eb:3d:13:49:39:ff:bc:c2:05:7a:3b:ac:95:
93:94:d6:00:45:c9:4c:b4:ab:59:0b:6e:fd:ca:c7:
74:59:7b:19:9e:40:55:59:8a:42:49:c3:a3:90:b3:
1d:bc:69:22:42:f4:4f:44:72:78:5d:fd:35:53:6d:
6a:39:0f:f4:d7:9e:37:f4:1a:de:be:d6:ee:c5:9e:
6f:40:a5:b6:e6:4e:cd:e8:42:d4:75:d5:20:27:c8:
01:4e:36:69:8f:cf:4e:10:e2:b6:ed:06:bf:8f:ab:
fe:9a:99:50:b8:28:59:98:66:d9:86:c4:79:a5:47:
59:58:1b:d9:91:87:6b:2b:15:cc:25:51:d1:b3:6d:
d1:af:66:23:96:44:ab:52:a1:b9:4e:b3:1c:9f:7d:
42:d5:98:dd:ab:e3:d0:59:59:51:fd:18:0f:ad:9f:
9f:fe:f3:b6:f2:75:6a:ae:37:a6:a0:6b:40:c0:c9:
19:e6:16:33:76:51:b4:f9:60:cf:62:ea:8c:e0:69:
50:68:57:49:24:30:81:7f:17:e3:4e:ee:9e:da:32:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E1:68:07:C2:DF:12:D3:00:1E:11:17:E1:AD:99:63:EB:BB:92:21
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FuFoB8LfEtMAHhEX4a2ZY-u7kiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.208.0/23
Signature Algorithm: sha256WithRSAEncryption
17:b6:df:15:c8:f0:44:af:c2:75:8e:01:4b:d8:f1:bb:37:c0:
0b:29:5f:fb:6a:b0:e8:b7:c2:24:91:25:61:0a:79:82:c8:6a:
aa:03:51:80:b8:5e:9b:79:20:be:98:68:53:57:0a:8a:94:7e:
b5:82:04:f1:50:a7:a8:7b:67:06:e8:b7:56:fb:eb:f7:6f:1c:
ee:64:90:5b:0d:bc:76:38:fa:2a:8d:29:07:46:43:df:05:f7:
cc:de:46:e2:2a:53:eb:af:33:7d:0a:7c:7e:4b:18:cd:5f:63:
a6:59:1a:65:ba:8e:62:77:8d:a8:db:45:19:f8:57:de:a1:4b:
4d:8e:ea:95:e7:d4:52:4d:bd:4d:01:41:e0:b7:5c:08:b6:ed:
d9:19:84:93:7c:a8:1e:e1:72:2f:63:f0:36:f8:60:ce:54:68:
f0:2d:e4:4d:03:02:83:ef:b1:28:ba:13:2d:91:29:fa:29:55:
af:be:90:7e:48:93:87:ec:8f:15:2c:32:56:19:83:d5:57:42:
dc:d8:14:ce:18:00:24:4e:65:26:cc:22:5c:60:f6:b7:9b:8b:
ba:b0:f5:ca:e6:14:f8:5a:88:1e:7f:9d:a7:f6:fc:52:07:7d:
c4:f2:93:c1:65:79:5e:5a:78:47:f0:f2:af:83:f3:35:5f:d2:
5d:14:63:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:19:44 2025 by rpki-client