Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YCf08DH6Tyajo2TijrzOymeoxzE.roa
File: YCf08DH6Tyajo2TijrzOymeoxzE.roa (raw, json)
Hash identifier: TRj5HhzczE6+OBV8PlNsWaCOfo9ycbd0Pwx0Pkjogms=
Subject key identifier: 60:27:F4:F0:31:FA:4F:26:A3:A3:64:E2:8E:BC:CE:CA:67:A8:C7:31
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0A904A88FA9410478E6FD4F3A1B7B4E69
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YCf08DH6Tyajo2TijrzOymeoxzE.roa
Signing time: Wed 16 Sep 2026 07:00:49 +0000
ROA not before: Wed 16 Sep 2026 07:00:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 151.240.3.0/24 maxlen: 24
151.240.244.0/24 maxlen: 24
151.242.137.0/24 maxlen: 24
151.242.227.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.133.0/24 maxlen: 24
151.245.127.0/24 maxlen: 24
151.246.216.0/23 maxlen: 24
151.247.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Oct 2026 12:39:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:04:a8:8f:a9:41:04:78:e6:fd:4f:3a:1b:7b:4e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 16 07:00:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6027f4f031fa4f26a3a364e28ebcceca67a8c731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d7:e3:03:e9:ad:fd:d1:aa:e1:bd:2a:0b:60:
65:06:f0:a9:10:0d:c8:a4:4c:8b:9f:96:22:35:e0:
67:25:77:68:44:1a:71:78:9e:1c:f8:73:ac:b5:88:
bc:bb:4d:f4:a3:3e:42:be:87:25:02:0c:50:b4:b7:
d3:2c:42:00:01:d1:c8:30:dd:df:c3:5d:5e:89:ca:
fe:dd:03:d3:54:e0:46:b0:79:eb:99:9e:78:7b:ed:
03:f2:14:d5:60:6f:7c:76:bc:1a:64:27:02:9a:94:
49:19:37:31:a3:7d:98:33:a4:33:41:c9:da:d2:fa:
cf:47:95:57:8d:88:77:8f:95:9e:6f:1d:76:af:bf:
4e:98:90:bf:fa:b7:1f:12:1f:a7:d4:7d:12:84:01:
c1:95:3e:88:a2:dc:a2:cc:99:0a:af:44:56:9d:f8:
f6:cc:c8:dc:a3:d0:b4:61:74:cb:5b:c8:83:9b:b9:
e2:86:d9:91:08:8e:f7:96:09:d3:0b:d2:3a:6c:37:
14:64:9c:f0:df:1a:3d:fa:91:aa:b7:35:8b:43:1a:
97:cb:57:77:9e:09:3b:54:ba:50:12:01:fc:99:8f:
8d:ea:c9:63:48:5c:b3:15:53:1f:09:47:d4:c1:79:
7a:f1:83:74:4c:ad:6e:80:70:cc:61:d2:be:12:b6:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:27:F4:F0:31:FA:4F:26:A3:A3:64:E2:8E:BC:CE:CA:67:A8:C7:31
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YCf08DH6Tyajo2TijrzOymeoxzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.3.0/24
151.240.244.0/24
151.242.137.0/24
151.242.227.0/24
151.243.113.0/24
151.243.133.0/24
151.245.127.0/24
151.246.216.0/23
151.247.155.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ba:c0:e5:e1:73:c3:82:41:a2:ee:8d:18:20:2e:2f:f8:86:
7f:0a:33:60:c1:50:85:cc:0b:43:39:62:73:e2:3e:7c:7f:56:
4d:2e:d6:78:27:b1:c7:00:fc:06:55:79:c9:4a:c0:2d:af:f5:
51:45:c4:2e:1f:4e:d8:a3:53:27:98:28:62:4c:5f:fc:6a:88:
ab:4d:4c:19:32:d2:0c:68:4a:ed:d9:5c:55:1d:9b:a3:2e:b3:
23:e6:cd:dc:d1:ff:4d:66:42:22:56:fa:06:90:27:c7:39:69:
cd:f5:ae:57:a2:45:14:c2:ad:ae:34:bf:39:de:cd:b6:fb:28:
c3:48:ad:3b:e5:9e:9d:57:3b:c6:9c:d3:1c:59:c5:2a:1c:61:
78:48:1e:e6:74:87:77:4e:2c:16:ef:ae:90:5a:07:28:d7:4d:
af:7b:c9:02:8e:d8:8e:46:ab:da:ea:61:a0:0e:90:e8:6d:30:
ab:1b:19:9f:d5:e1:63:62:c9:a0:37:e4:32:31:84:12:75:87:
9c:20:17:4a:cf:b6:1f:93:49:34:4c:f8:4e:42:d9:af:4d:f1:
af:f9:9d:8e:0b:2c:9b:4b:63:49:f0:85:bd:77:63:fc:be:b6:
f0:80:73:a7:71:3c:67:1d:b0:6e:a5:03:a6:bb:be:65:47:e3:
c8:9a:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:47:51 2026 by rpki-client