Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bSzML7nv8zOvuttVEdQmtV0sJOc.roa
File: bSzML7nv8zOvuttVEdQmtV0sJOc.roa (raw, json)
Hash identifier: 1Rp5RSSP6Onlrkunu8mmy0998DEjPxT8Jp7RgOCiyv0=
Subject key identifier: 6D:2C:CC:2F:B9:EF:F3:33:AF:BA:DB:55:11:D4:26:B5:5D:2C:24:E7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D28E613EC6C7E4C59CC182562EE87B46E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bSzML7nv8zOvuttVEdQmtV0sJOc.roa
Signing time: Thu 26 Mar 2026 06:47:40 +0000
ROA not before: Thu 26 Mar 2026 06:47:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 151.243.138.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Mar 2026 07:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:e6:13:ec:6c:7e:4c:59:cc:18:25:62:ee:87:b4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 26 06:47:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d2ccc2fb9eff333afbadb5511d426b55d2c24e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:cc:56:a8:cc:fe:a6:22:cb:0a:17:e9:ca:
88:fd:07:83:76:10:eb:ab:48:10:05:77:46:eb:ac:
8b:a5:cc:5d:ff:71:08:be:70:2f:c6:e5:05:8e:58:
38:ab:db:73:6f:25:9b:e2:fb:8f:9c:94:72:19:41:
8c:34:ec:d4:eb:f4:15:b9:36:27:83:d2:b0:d0:87:
bf:05:17:a3:5f:f4:2e:28:ff:94:b5:78:5d:f7:fc:
0a:89:ec:81:74:01:fe:7f:e9:c2:5c:38:06:17:de:
2d:f8:fb:67:92:75:c1:c2:3d:5e:44:0d:86:e1:84:
de:f1:7b:5b:b6:bf:c8:61:5a:56:6b:c3:f7:77:e7:
66:a0:c5:78:2a:08:13:3c:ca:ca:87:f5:5e:5a:30:
74:c5:80:eb:ad:ce:94:96:2c:67:a8:c4:c1:86:01:
52:e7:16:3e:f8:3b:d5:31:fd:33:76:68:43:b2:c7:
99:41:57:5f:85:78:67:75:e8:49:7b:60:a8:a1:6c:
e7:9e:d4:63:ff:ee:e2:d3:f1:e5:85:3f:cc:ac:eb:
22:8d:66:19:11:d0:af:9a:10:ec:b4:70:fa:07:9d:
69:4a:60:12:7d:b4:6c:ce:eb:93:3f:ce:ac:9f:09:
ee:89:6e:aa:42:62:49:b8:29:49:d1:3f:7f:8a:ef:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2C:CC:2F:B9:EF:F3:33:AF:BA:DB:55:11:D4:26:B5:5D:2C:24:E7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bSzML7nv8zOvuttVEdQmtV0sJOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.138.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:eb:4b:a5:14:54:86:63:3e:61:79:0a:10:b5:e3:d4:17:66:
a3:71:a3:61:84:d3:9b:35:bd:ac:3b:f7:e8:96:56:26:b0:bb:
51:5a:65:79:c8:63:86:95:12:2d:0f:fc:6a:fe:43:6c:6b:87:
7b:6f:63:48:d3:04:93:0c:ae:a6:5b:19:24:0a:b7:81:cc:a2:
3b:c8:22:7f:ed:4b:db:c6:ac:86:cd:9c:4d:cc:76:5c:6c:19:
c1:b1:35:14:e5:4b:83:93:f5:cc:c0:72:44:06:b7:da:2f:48:
89:f6:f7:b2:ae:e6:e0:40:14:01:10:e0:62:54:f2:60:3e:ec:
4e:11:1e:db:f1:f0:7b:40:34:b5:5f:9b:9f:5c:92:e6:e6:4c:
11:31:42:94:ac:b0:7f:b2:c2:4c:7b:cc:02:b6:d7:1f:f0:2a:
54:fe:19:e1:8f:f3:e0:3f:05:31:fc:ee:f5:ce:a3:9a:67:fe:
26:c0:80:6e:dd:9f:01:18:35:84:e5:8c:64:e0:ad:c2:00:d0:
66:7c:27:41:2a:89:86:60:94:7f:b0:f6:9c:ca:ee:bb:65:e4:
e1:f3:ff:8e:66:3a:16:56:8d:89:a3:53:02:f8:29:fd:87:93:
b7:aa:f3:24:32:45:2c:ad:2f:3c:9c:fc:a3:69:91:bc:90:50:
86:cf:a0:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0o5hPsbH5MWcwYJWLuh7RuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMzI2MDY0NzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDJjY2MyZmI5ZWZmMzMzYWZiYWRiNTUxMWQ0MjZiNTVkMmMyNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumzMVqjM/qYiywoX6cqI/QeDdhDr
q0gQBXdG66yLpcxd/3EIvnAvxuUFjlg4q9tzbyWb4vuPnJRyGUGMNOzU6/QVuTYn
g9Kw0Ie/BRejX/QuKP+UtXhd9/wKieyBdAH+f+nCXDgGF94t+PtnknXBwj1eRA2G
4YTe8Xtbtr/IYVpWa8P3d+dmoMV4KggTPMrKh/VeWjB0xYDrrc6UlixnqMTBhgFS
5xY++DvVMf0zdmhDsseZQVdfhXhndehJe2CooWznntRj/+7i0/HlhT/MrOsijWYZ
EdCvmhDstHD6B51pSmASfbRszuuTP86snwnuiW6qQmJJuClJ0T9/iu/QdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG0szC+57/Mzr7rbVRHUJrVdLCTnMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvYlN6TUw3bnY4ek92dXR0VkVkUW10VjBzSk9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/OKMA0G
CSqGSIb3DQEBCwUAA4IBAQB+60ulFFSGYz5heQoQtePUF2ajcaNhhNObNb2sO/fo
llYmsLtRWmV5yGOGlRItD/xq/kNsa4d7b2NI0wSTDK6mWxkkCreBzKI7yCJ/7Uvb
xqyGzZxNzHZcbBnBsTUU5UuDk/XMwHJEBrfaL0iJ9veyrubgQBQBEOBiVPJgPuxO
ER7b8fB7QDS1X5ufXJLm5kwRMUKUrLB/ssJMe8wCttcf8CpU/hnhj/PgPwUx/O71
zqOaZ/4mwIBu3Z8BGDWE5Yxk4K3CANBmfCdBKomGYJR/sPacyu67ZeTh8/+OZjoW
Vo2Jo1MC+Cn9h5O3qvMkMkUsrS88nPyjaZG8kFCGz6B4
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:39:27 2026 by rpki-client