Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Oe4jo-CvXj52ZmApUKy9n6z8sqU.roa
File: Oe4jo-CvXj52ZmApUKy9n6z8sqU.roa (raw, json)
Hash identifier: YnP3cHjNVS49vjNZDFq8R0BcF27LDPLVbp8x5Nv9MRo=
Subject key identifier: 39:EE:23:A3:E0:AF:5E:3E:76:66:60:29:50:AC:BD:9F:AC:FC:B2:A5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0B90B6C5933C320276A2E45CE6B6B92E3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Oe4jo-CvXj52ZmApUKy9n6z8sqU.roa
Signing time: Sat 19 Sep 2026 09:42:08 +0000
ROA not before: Sat 19 Sep 2026 09:42:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 151.240.146.0/24 maxlen: 24
151.241.166.0/24 maxlen: 24
151.242.160.0/23 maxlen: 24
151.242.162.0/24 maxlen: 24
151.242.163.0/24 maxlen: 24
151.242.236.0/24 maxlen: 24
151.247.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Oct 2026 04:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:0b:6c:59:33:c3:20:27:6a:2e:45:ce:6b:6b:92:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 19 09:42:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39ee23a3e0af5e3e7666602950acbd9facfcb2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:a2:be:3c:f8:b5:14:5b:e4:eb:38:21:8c:
8a:d0:c9:72:4c:ba:79:31:28:3e:2e:d6:3e:01:c2:
3d:53:cf:2f:22:0e:bb:c0:f7:fc:64:6c:f5:de:ac:
21:17:ab:1e:cd:19:7d:83:06:16:46:13:78:95:6c:
24:7b:b1:0b:04:bf:ed:5f:98:e5:57:d3:7a:9d:79:
e1:da:aa:94:34:7f:6c:1f:91:f2:e9:c0:04:e7:6c:
3a:95:d5:df:30:cd:70:1b:99:c0:f7:ff:ef:53:4f:
4a:52:87:79:4c:ac:22:d1:df:62:c2:73:30:2a:82:
b1:ae:09:fc:18:28:c6:e3:5f:e3:6b:ad:0e:6f:79:
7b:09:e0:e6:9f:f3:35:a7:aa:13:9f:2c:69:47:f5:
e0:98:6a:10:f5:2a:94:b6:5f:93:bf:2f:72:60:6a:
de:fb:63:36:81:73:bb:f5:13:c8:f2:0f:6c:61:01:
2b:74:32:03:fd:30:97:3d:04:56:73:f3:5f:ae:69:
40:fe:14:26:a3:d4:81:18:f8:c6:c7:d0:31:3b:d2:
a0:b0:16:b1:2b:31:78:db:d7:c8:ef:9c:f5:7e:fe:
dc:b3:f4:55:de:15:ed:d2:05:6b:95:97:25:41:c2:
1e:56:58:fd:14:97:db:27:2d:40:99:38:3f:09:77:
3f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EE:23:A3:E0:AF:5E:3E:76:66:60:29:50:AC:BD:9F:AC:FC:B2:A5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Oe4jo-CvXj52ZmApUKy9n6z8sqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.146.0/24
151.241.166.0/24
151.242.160.0/22
151.242.236.0/24
151.247.168.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:63:69:9a:0f:63:c5:a1:7e:02:a7:dc:f9:46:45:ab:02:7b:
fd:d5:69:30:8d:38:f8:da:47:29:61:0c:c8:18:74:a5:2e:d8:
bb:7d:c8:5b:85:ef:51:63:c3:61:7a:74:e1:05:dd:86:5f:f9:
1e:cb:f4:36:7c:c8:4a:78:69:78:88:62:ef:4e:d6:53:84:2c:
c6:61:11:6f:11:ea:f2:e6:77:0e:e5:06:c1:70:ad:51:d7:85:
32:c7:63:8d:23:ef:af:75:17:1a:e1:fc:b5:a3:39:f6:25:e5:
cb:de:84:16:7c:29:26:36:89:f4:f6:05:40:58:6b:dc:b4:59:
b4:f6:18:7a:f4:22:58:b3:15:e8:3b:62:17:3f:14:44:51:c4:
f3:66:4f:c4:e4:b5:ff:67:82:3c:18:4e:9f:e6:26:d3:2e:51:
32:f1:04:87:1e:98:d0:45:ff:d0:52:bd:e9:aa:a6:4a:87:da:
36:78:b2:b7:af:25:a8:55:25:d6:5c:d3:ff:c8:c4:20:c3:88:
3e:20:e2:8e:31:b9:49:5f:47:14:82:17:24:99:97:4d:4b:e3:
1b:32:4f:a2:bc:f2:1f:99:0e:37:64:fb:10:3d:0d:6e:c8:7b:
46:df:89:fe:ac:ce:24:dc:89:a2:ee:69:9e:c8:4e:ef:f3:b4:
23:8a:8e:f1
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaC5C2xZM8MgJ2ouRc5ra5LjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTE5MDk0MjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWVlMjNhM2UwYWY1ZTNlNzY2NjYwMjk1MGFjYmQ5ZmFjZmNiMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWyivjz4tRRb5Os4IYyK0MlyTLp5
MSg+LtY+AcI9U88vIg67wPf8ZGz13qwhF6sezRl9gwYWRhN4lWwke7ELBL/tX5jl
V9N6nXnh2qqUNH9sH5Hy6cAE52w6ldXfMM1wG5nA9//vU09KUod5TKwi0d9iwnMw
KoKxrgn8GCjG41/ja60Ob3l7CeDmn/M1p6oTnyxpR/XgmGoQ9SqUtl+Tvy9yYGre
+2M2gXO79RPI8g9sYQErdDID/TCXPQRWc/NfrmlA/hQmo9SBGPjGx9AxO9KgsBax
KzF429fI75z1fv7cs/RV3hXt0gVrlZclQcIeVlj9FJfbJy1AmTg/CXc/lwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDnuI6Pgr14+dmZgKVCsvZ+s/LKlMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvT2U0am8tQ3ZYajUyWm1BcFVLeTluNno4c3FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/CSAwQA
l/GmAwQCl/KgAwQAl/LsAwQAl/eoMA0GCSqGSIb3DQEBCwUAA4IBAQCyY2maD2PF
oX4Cp9z5RkWrAnv91WkwjTj42kcpYQzIGHSlLti7fchbhe9RY8NhenThBd2GX/ke
y/Q2fMhKeGl4iGLvTtZThCzGYRFvEery5ncO5QbBcK1R14Uyx2ONI++vdRca4fy1
ozn2JeXL3oQWfCkmNon09gVAWGvctFm09hh69CJYsxXoO2IXPxREUcTzZk/E5LX/
Z4I8GE6f5ibTLlEy8QSHHpjQRf/QUr3pqqZKh9o2eLK3ryWoVSXWXNP/yMQgw4g+
IOKOMblJX0cUghckmZdNS+MbMk+ivPIfmQ43ZPsQPQ1uyHtG34n+rM4k3Imi7mme
yE7v87Qjio7x
-----END CERTIFICATE-----
Generated at Tue Oct 6 21:35:45 2026 by rpki-client