Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Pz1B5sNu1IFlIW74GvO9AO6hjjU.roa
File: Pz1B5sNu1IFlIW74GvO9AO6hjjU.roa (raw, json)
Hash identifier: 59GEQ2vPtoUxD2cKInW3xOBEB5nFsPFt6rYYdElD+CU=
Subject key identifier: 3F:3D:41:E6:C3:6E:D4:81:65:21:6E:F8:1A:F3:BD:00:EE:A1:8E:35
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C8FF980682CD045E51880DFD4DF23070
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Pz1B5sNu1IFlIW74GvO9AO6hjjU.roa
Signing time: Tue 22 Sep 2026 12:03:08 +0000
ROA not before: Tue 22 Sep 2026 12:03:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 151.241.136.0/22 maxlen: 24
151.241.136.0/24 maxlen: 24
151.241.139.0/24 maxlen: 24
151.241.164.0/24 maxlen: 24
151.241.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Sep 2026 12:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:ff:98:06:82:cd:04:5e:51:88:0d:fd:4d:f2:30:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 22 12:03:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f3d41e6c36ed48165216ef81af3bd00eea18e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:5b:b7:66:44:1e:03:c0:49:6a:c0:85:17:
ba:0b:44:42:78:0c:ed:cb:95:fc:4c:96:c7:47:ea:
67:a9:6a:43:66:4a:43:07:1d:e6:db:e5:45:3f:7c:
f7:1b:53:5e:ac:0a:ae:b9:2e:77:f0:aa:2c:dd:17:
32:b1:f8:12:25:0d:a9:8a:36:ed:5b:98:72:9f:9a:
b2:f4:55:c1:2d:9c:aa:95:51:0f:65:a5:16:98:82:
d7:9d:26:1f:8c:d1:42:8a:e5:b1:47:34:c5:13:e0:
99:13:08:d3:5b:88:8b:b2:a0:9b:f8:6e:cf:1a:e0:
66:0f:64:d4:2d:50:2e:7a:85:e7:3e:77:07:21:26:
eb:07:ed:3f:73:63:a9:d6:a0:cb:39:05:35:d4:21:
38:d7:a6:a1:a8:5c:14:5d:87:9f:57:ba:6b:23:10:
8b:d4:7f:6f:e5:06:6e:e7:cf:b4:68:79:63:6c:72:
97:89:ed:a3:8c:41:2c:ea:c8:6e:c4:6c:ea:17:bc:
98:4b:9c:4d:2f:7f:06:b4:63:dd:91:a7:20:b9:49:
e7:f1:5b:d0:43:f2:d9:7a:18:5e:25:90:ff:98:1f:
ef:df:2d:9b:1a:06:0d:de:47:17:ce:4d:76:cf:3f:
18:98:6a:a8:71:81:41:b3:de:97:58:5b:d0:86:26:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3D:41:E6:C3:6E:D4:81:65:21:6E:F8:1A:F3:BD:00:EE:A1:8E:35
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Pz1B5sNu1IFlIW74GvO9AO6hjjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.136.0/22
151.241.164.0/24
151.241.167.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d7:16:b8:b3:96:73:3e:c2:4e:d0:9d:57:fe:79:08:f8:13:
52:a0:3f:4c:05:37:a8:24:86:3e:6c:98:28:17:50:ac:49:4e:
8f:b7:42:94:0e:4c:d7:3f:1f:19:12:8a:80:72:41:e7:40:5a:
d5:70:9b:55:54:cc:fe:d9:49:78:b9:80:9e:ee:6b:87:82:46:
d5:c5:c5:a6:c9:8a:97:1c:68:c7:7d:1e:fb:56:3d:46:b1:c4:
d0:e5:ed:5c:b0:98:38:f7:33:7e:54:b3:b3:31:03:fe:37:51:
c2:f6:f2:0a:ac:de:a3:72:1a:a0:da:bc:04:be:39:8f:0b:df:
21:2e:ed:78:88:01:6c:9c:35:36:f6:15:d5:b9:10:d2:47:f3:
9d:60:6e:a5:64:93:e5:c7:15:de:b3:18:d6:13:2f:90:a9:74:
b9:0a:3f:03:9c:ce:29:e6:25:76:33:c9:64:1e:ba:4b:0e:0d:
f1:23:63:0e:ad:e2:28:6d:67:fe:c4:42:cb:6e:25:e8:4b:99:
1e:8f:35:96:d3:bc:26:4b:b2:47:bb:ae:40:b5:2b:05:08:75:
ce:ab:e6:ca:d8:4d:1e:93:05:e9:71:f0:5c:54:ef:40:d9:40:
bb:2c:d0:82:93:85:52:79:64:21:27:9e:b0:3d:20:83:86:cb:
ac:c4:3d:f5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDI/5gGgs0EXlGIDf1N8jBwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTIyMTIwMzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjNkNDFlNmMzNmVkNDgxNjUyMTZlZjgxYWYzYmQwMGVlYTE4ZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNBbt2ZEHgPASWrAhRe6C0RCeAzt
y5X8TJbHR+pnqWpDZkpDBx3m2+VFP3z3G1NerAquuS538Kos3RcysfgSJQ2pijbt
W5hyn5qy9FXBLZyqlVEPZaUWmILXnSYfjNFCiuWxRzTFE+CZEwjTW4iLsqCb+G7P
GuBmD2TULVAueoXnPncHISbrB+0/c2Op1qDLOQU11CE416ahqFwUXYefV7prIxCL
1H9v5QZu58+0aHljbHKXie2jjEEs6shuxGzqF7yYS5xNL38GtGPdkacguUnn8VvQ
Q/LZehheJZD/mB/v3y2bGgYN3kcXzk12zz8YmGqocYFBs96XWFvQhiYitwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFD89QebDbtSBZSFu+BrzvQDuoY41MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUHoxQjVzTnUxSUZsSVc3NEd2TzlBTzZoampVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCl/GIAwQA
l/GkAwQAl/GnMA0GCSqGSIb3DQEBCwUAA4IBAQBn1xa4s5ZzPsJO0J1X/nkI+BNS
oD9MBTeoJIY+bJgoF1CsSU6Pt0KUDkzXPx8ZEoqAckHnQFrVcJtVVMz+2Ul4uYCe
7muHgkbVxcWmyYqXHGjHfR77Vj1GscTQ5e1csJg49zN+VLOzMQP+N1HC9vIKrN6j
chqg2rwEvjmPC98hLu14iAFsnDU29hXVuRDSR/OdYG6lZJPlxxXesxjWEy+QqXS5
Cj8DnM4p5iV2M8lkHrpLDg3xI2MOreIobWf+xELLbiXoS5kejzWW07wmS7JHu65A
tSsFCHXOq+bK2E0ekwXpcfBcVO9A2UC7LNCCk4VSeWQhJ56wPSCDhsusxD31
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:58:10 2026 by rpki-client