Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jJvqG85nE82Q2SGq9YkywvZ_coo.roa
File: jJvqG85nE82Q2SGq9YkywvZ_coo.roa (raw, json)
Hash identifier: Av/B0R3tXdqXYPjTCzU9R7u03xLR+DfBj08okUej/Pg=
Subject key identifier: 8C:9B:EA:1B:CE:67:13:CD:90:D9:21:AA:F5:89:32:C2:F6:7F:72:8A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0A935C9A9E7537A40B5F235081C488350
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jJvqG85nE82Q2SGq9YkywvZ_coo.roa
Signing time: Wed 16 Sep 2026 07:54:29 +0000
ROA not before: Wed 16 Sep 2026 07:54:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 151.240.126.0/23 maxlen: 24
151.241.177.0/24 maxlen: 24
151.242.148.0/24 maxlen: 24
151.243.17.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.166.0/24 maxlen: 24
151.244.162.0/24 maxlen: 24
151.244.198.0/24 maxlen: 24
151.245.46.0/24 maxlen: 24
151.245.88.0/24 maxlen: 24
151.245.124.0/24 maxlen: 24
151.247.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Sep 2026 11:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:35:c9:a9:e7:53:7a:40:b5:f2:35:08:1c:48:83:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 16 07:54:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c9bea1bce6713cd90d921aaf58932c2f67f728a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:c5:8c:20:c4:df:10:06:57:32:9b:05:71:
2f:ca:59:f1:70:71:12:86:b3:c0:de:ae:e7:f6:34:
a4:81:7e:4c:4e:d3:15:16:42:0d:97:42:4c:96:95:
4a:ec:b8:a1:57:b7:da:ae:a1:10:39:61:99:08:c4:
ea:e1:7d:36:47:4b:28:4a:ca:cd:39:48:59:b3:35:
ef:1a:23:2d:0b:a0:d4:a7:4d:b2:2d:b4:9f:97:98:
33:b9:a2:17:fd:34:fb:c1:ff:f5:0f:b8:a4:e9:d2:
f8:ce:f7:c8:9f:05:62:9d:16:d5:44:54:3a:7e:2d:
7d:b3:5e:91:3a:90:7a:83:19:d9:75:e0:69:84:6e:
ba:7d:dc:14:73:0d:6f:1a:9e:01:35:38:22:b3:40:
c9:50:55:4c:89:e0:8b:e6:1d:de:e0:5c:68:78:bf:
47:3c:e8:dc:94:d0:dc:98:86:bd:de:2b:c2:62:af:
f7:d2:57:5b:e7:f9:f9:8e:80:46:11:03:a1:44:62:
8f:1f:f9:94:ba:60:57:bd:cd:d3:d3:7b:21:8e:05:
bc:bb:45:a9:65:51:97:85:fb:31:c9:38:96:56:1b:
62:d8:9e:c6:99:ea:45:a2:e8:70:42:3a:55:a8:81:
6f:db:c3:7f:db:27:f3:77:62:82:95:f6:a6:24:7b:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9B:EA:1B:CE:67:13:CD:90:D9:21:AA:F5:89:32:C2:F6:7F:72:8A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jJvqG85nE82Q2SGq9YkywvZ_coo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.126.0/23
151.241.177.0/24
151.242.148.0/24
151.243.17.0/24
151.243.115.0/24
151.243.166.0/24
151.244.162.0/24
151.244.198.0/24
151.245.46.0/24
151.245.88.0/24
151.245.124.0/24
151.247.89.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:79:83:26:8f:74:f1:fe:30:8f:b5:15:c5:a9:ef:ac:8e:cc:
91:e7:d5:25:f4:26:70:7b:22:89:9a:8d:e5:b2:5a:ff:cd:82:
f0:17:e1:cb:e8:84:b2:b0:df:03:27:3e:d4:b1:95:3d:25:18:
1f:74:4e:d2:9d:92:9d:9d:ae:30:89:b1:db:a9:29:ea:3f:78:
30:26:bf:28:89:52:e0:cc:8a:c4:57:e6:97:71:bc:9b:f6:bb:
35:b8:9c:68:bd:a4:56:35:34:b7:44:e8:1f:de:90:0b:ca:87:
20:2e:60:c1:22:3a:77:dd:67:54:74:36:d4:4f:08:78:52:08:
4f:c4:a1:40:a7:15:da:b2:3f:39:9d:73:3f:de:67:da:08:11:
15:dc:ea:11:b6:b3:0e:db:ae:93:5e:10:c7:bb:4f:04:32:ac:
dd:a0:40:a1:ee:76:a4:dc:9b:fa:b5:2f:ea:a0:50:9c:a8:5e:
73:da:60:c7:47:fe:30:a8:bc:5d:43:2c:23:94:7d:78:f1:97:
a0:32:0a:d8:8b:fb:c3:e4:19:60:07:ff:47:3c:3d:bd:82:c2:
a9:0a:8a:a3:04:59:22:a9:39:7d:7b:e1:fa:4f:8b:e8:1e:20:
ac:26:27:fb:8b:e9:5f:b2:fd:48:40:c3:69:af:2c:d1:49:b6:
fe:b1:f9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:35:20 2026 by rpki-client