Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UccIRfDNDtQKcYeVMQfBxTKm4_s.roa
File: UccIRfDNDtQKcYeVMQfBxTKm4_s.roa (raw, json)
Hash identifier: 81fDCE1M06yT7ZZhltqlj4LK9cdZJGb/y+/E+NrN4Lo=
Subject key identifier: 51:C7:08:45:F0:CD:0E:D4:0A:71:87:95:31:07:C1:C5:32:A6:E3:FB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D1A389CAC6DD58C9340BF65CE4C75D8F1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UccIRfDNDtQKcYeVMQfBxTKm4_s.roa
Signing time: Mon 23 Mar 2026 10:23:30 +0000
ROA not before: Mon 23 Mar 2026 10:23:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150293
IP address blocks: 151.243.165.0/24 maxlen: 24
151.243.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Mar 2026 06:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:38:9c:ac:6d:d5:8c:93:40:bf:65:ce:4c:75:d8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 23 10:23:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51c70845f0cd0ed40a7187953107c1c532a6e3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:2e:47:1c:a2:fe:b8:92:54:05:5d:74:e6:
15:f3:61:86:da:fc:fc:e1:6f:ed:ec:d7:ce:99:e4:
2c:b4:a4:ea:fb:2f:f5:88:d8:b4:22:a9:cb:22:b4:
c5:e1:e8:93:a1:00:b2:26:ac:c4:6f:4b:1b:91:e9:
ad:41:40:5f:bd:2f:2e:5a:ec:8c:dd:94:56:4f:10:
2c:14:40:f6:41:d8:63:b9:d0:40:e6:30:d5:64:8b:
fa:fc:fa:9f:30:70:b8:da:96:a2:cc:ea:43:24:4a:
2e:f9:8a:cd:4e:05:77:b7:87:54:8a:b6:fb:2d:a9:
32:5e:e2:dc:a4:93:4d:7f:d1:10:1f:27:e6:17:b1:
6f:cc:14:72:6a:f3:4b:73:63:54:1c:99:b4:df:dd:
30:e5:1f:2a:66:b9:2a:c3:e2:b2:29:7c:17:53:8e:
6e:1c:e0:57:ae:fa:e7:cc:52:f0:cc:a8:8b:20:a4:
47:10:a5:4a:a2:78:a7:9e:5c:aa:3d:33:14:31:80:
1a:b0:b8:aa:74:f0:e7:f6:ba:c1:97:c0:ec:ba:81:
7c:1d:fa:bc:6b:17:aa:f7:ce:3d:b0:a9:4b:ce:0a:
27:be:09:9a:76:24:e9:2d:59:27:56:36:25:c0:4a:
53:fb:88:98:39:90:6d:32:ab:6b:22:9a:1a:9c:57:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C7:08:45:F0:CD:0E:D4:0A:71:87:95:31:07:C1:C5:32:A6:E3:FB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UccIRfDNDtQKcYeVMQfBxTKm4_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.165.0-151.243.166.255
Signature Algorithm: sha256WithRSAEncryption
66:2c:8a:c7:85:f3:85:bb:37:0d:ae:4e:0d:1c:b3:70:2f:f8:
b0:b1:94:8a:e8:da:f2:4f:ee:22:6d:61:58:a1:20:8b:b8:76:
ed:14:ff:06:d2:75:19:b3:cf:76:0b:a4:66:e5:23:90:96:ec:
3b:21:49:91:6c:fb:5e:6f:2f:fc:84:0b:dd:8a:14:f2:db:a8:
93:56:30:b0:ec:7e:02:fe:65:75:96:e4:23:24:5b:3f:b0:22:
ad:a7:b0:e7:77:bc:75:32:99:43:33:53:bf:5e:ee:f6:a0:54:
88:b4:7c:69:cf:db:de:14:3f:ef:be:30:17:2f:ed:e0:58:32:
12:75:f8:41:1d:89:5c:93:e7:0b:2c:28:d8:3f:9b:f8:26:15:
84:83:63:3e:49:1e:17:cb:2e:b4:c3:ab:01:0f:eb:0c:85:f3:
1e:e2:ed:70:36:d6:b1:de:b4:dc:d9:46:cb:89:4d:6a:5e:4a:
ec:fd:41:75:10:16:b6:f4:c0:51:67:78:3d:de:7d:46:32:18:
7f:89:98:5f:ee:66:34:11:a8:aa:c6:ab:58:69:eb:b6:84:4c:
b3:d1:1d:c1:39:ee:e7:e4:fc:f4:65:8e:2d:bf:c8:a7:be:79:
e6:fb:1c:ed:a8:44:f8:f4:bb:49:5b:78:c5:bb:bc:7e:c6:34:
7d:34:4a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:31:51 2026 by rpki-client