Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9tlAcUSPe9pOQQ96nNURTh1Deas.roa
File: 9tlAcUSPe9pOQQ96nNURTh1Deas.roa (raw, json)
Hash identifier: O9J7QLOsnyK2pvtM/r1vMNdTtnnXRFuIDLXiw9F7DSI=
Subject key identifier: F6:D9:40:71:44:8F:7B:DA:4E:41:0F:7A:9C:D5:11:4E:1D:43:79:AB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F4C9B1F459BFF19B81F489D19C8B19F7A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9tlAcUSPe9pOQQ96nNURTh1Deas.roa
Signing time: Fri 10 Jul 2026 15:17:42 +0000
ROA not before: Fri 10 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 151.240.146.0/24 maxlen: 24
151.240.244.0/22 maxlen: 24
151.247.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jul 2026 14:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:9b:1f:45:9b:ff:19:b8:1f:48:9d:19:c8:b1:9f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 10 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6d94071448f7bda4e410f7a9cd5114e1d4379ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:30:4a:a1:1e:5f:57:66:7d:6f:ca:67:89:71:
1a:ef:3d:3a:33:97:fe:7c:1d:83:22:21:48:6e:d5:
14:74:42:17:b3:c7:cc:23:1b:48:8f:43:45:89:22:
0f:1c:b5:b9:0d:0e:19:21:d6:e1:30:18:d3:e6:63:
d4:9c:7d:df:0b:1b:dc:a5:ac:a9:d5:65:89:ac:20:
25:67:58:bb:26:dd:22:8e:4b:4f:ae:66:2a:9a:40:
ae:fe:33:5b:fd:0c:96:1b:29:34:cd:30:9b:44:2e:
95:5e:c8:07:e2:dc:cf:44:63:88:bc:03:70:4b:4a:
0d:a5:1c:31:49:4a:6f:43:18:d2:3f:73:1b:50:c4:
39:36:45:bb:c5:c9:fb:c2:db:fd:e9:99:45:31:02:
3d:2b:fe:56:42:0f:2d:45:c8:11:b1:13:99:ee:1b:
e7:6c:07:db:d5:b8:a8:f3:4e:7f:2d:52:92:2d:8f:
dc:3d:62:2b:08:bb:51:61:43:fd:e6:7a:d8:ca:32:
f3:19:7c:50:ef:84:47:d5:ed:a6:39:e0:66:35:19:
cd:73:38:99:17:07:fb:48:f7:bb:61:c3:86:0f:bb:
fa:69:c7:cb:ac:24:9c:bc:a3:95:e6:1c:7f:9e:d6:
12:93:83:88:50:ab:13:bd:61:68:8b:f1:7b:b7:5f:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D9:40:71:44:8F:7B:DA:4E:41:0F:7A:9C:D5:11:4E:1D:43:79:AB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9tlAcUSPe9pOQQ96nNURTh1Deas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.146.0/24
151.240.244.0/22
151.247.168.0/22
Signature Algorithm: sha256WithRSAEncryption
10:2d:a6:d7:54:ad:01:4b:ac:05:87:28:a9:68:2b:91:a7:d0:
9b:6c:e2:9c:18:9c:fe:5f:d9:b5:16:c2:79:ff:7c:e6:87:3d:
13:6d:a3:c7:14:b9:37:aa:6b:be:24:c0:a0:fd:d9:c2:f6:25:
be:f2:18:3a:a0:5b:8e:d3:dd:43:7d:0a:af:bb:ea:bc:5a:67:
86:4f:21:5b:d4:94:01:3b:56:5b:52:33:47:b5:cc:e7:2c:e5:
c4:45:f9:df:35:0d:d6:21:49:46:27:c6:17:ce:e5:4c:7d:06:
a9:59:57:7a:6c:54:1b:70:30:c1:f9:43:06:c7:33:35:fc:30:
b2:af:5e:f4:7b:77:52:d0:cd:ef:d2:88:15:6f:b0:9b:e0:45:
51:4a:43:8f:59:81:cb:95:19:e1:40:be:6b:e9:39:67:d1:77:
b2:5d:e4:52:b6:23:9f:11:65:13:96:32:79:93:76:b0:0a:0c:
d9:fd:5d:fb:c5:6f:0b:f9:70:95:9c:f7:e4:97:89:bc:4c:57:
94:c0:71:ba:7d:60:15:fe:4d:11:79:e2:e0:12:17:4a:bb:fe:
b7:04:a3:32:0e:a6:8e:84:94:13:27:73:51:a6:ee:fe:01:27:
3b:22:ae:bf:86:fa:21:75:0b:19:d7:07:cf:b4:c5:aa:ac:fd:
19:73:b2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:49 2026 by rpki-client