Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kaeewn7TiUzSjVmFmS9u97eWJZo.roa
File: kaeewn7TiUzSjVmFmS9u97eWJZo.roa (raw, json)
Hash identifier: WewZf7lfkOs6ObgHXft8TaBOSmAkRrk/HI1S4Fo/xK0=
Subject key identifier: 91:A7:9E:C2:7E:D3:89:4C:D2:8D:59:85:99:2F:6E:F7:B7:96:25:9A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1C4AF7CDADE371CC7DC6CC200297DC219
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kaeewn7TiUzSjVmFmS9u97eWJZo.roa
Signing time: Tue 10 Nov 2026 08:59:57 +0000
ROA not before: Tue 10 Nov 2026 08:59:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 37.202.212.0/24 maxlen: 24
151.240.126.0/23 maxlen: 24
151.243.16.0/24 maxlen: 24
151.243.60.0/24 maxlen: 24
151.243.61.0/24 maxlen: 24
151.243.114.0/24 maxlen: 24
151.244.170.0/24 maxlen: 24
151.244.173.0/24 maxlen: 24
151.244.181.0/24 maxlen: 24
151.244.185.0/24 maxlen: 24
151.246.156.0/24 maxlen: 24
151.247.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Nov 2026 07:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:af:7c:da:de:37:1c:c7:dc:6c:c2:00:29:7d:c2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 10 08:59:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91a79ec27ed3894cd28d5985992f6ef7b796259a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:37:83:aa:15:18:a0:6c:0a:27:5d:d3:8d:
b6:0b:46:11:f6:17:9d:0f:9e:62:8b:f0:30:0e:35:
69:21:e6:95:72:81:74:e0:f5:9b:fc:be:56:09:61:
fd:8c:c9:c4:71:3e:11:91:44:1a:9a:a3:5a:18:ea:
2a:29:6d:01:81:c7:1f:b7:e4:16:96:e0:3d:b0:48:
a3:48:75:25:0c:7a:c4:d9:29:4a:1a:60:43:e0:f3:
37:5e:ea:74:ab:98:4d:81:64:51:5d:47:3a:b1:35:
00:d5:8b:16:c9:3d:a7:07:c4:df:a7:bb:94:ef:2f:
c5:44:31:1e:e0:6c:7d:4c:ab:57:b5:95:20:08:63:
9a:f0:a0:aa:7f:70:53:64:40:16:9d:56:44:08:a5:
3d:e9:8a:0a:a5:be:e8:ec:ce:36:bf:9a:39:5a:df:
34:04:8e:3d:be:4c:e0:e7:0b:69:52:b8:2c:e4:ac:
a4:64:18:3c:4d:f4:ec:06:d0:6c:18:73:18:6f:e1:
cb:45:1c:73:b2:3f:01:74:a4:e5:7c:3e:69:5e:20:
7f:67:ba:dc:87:ae:e5:9d:f7:89:fb:57:44:c8:67:
02:6d:0d:91:9d:39:a6:fb:fe:2a:4d:3f:87:ce:20:
d4:5b:61:6b:83:86:4c:37:60:da:00:45:94:8e:f1:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A7:9E:C2:7E:D3:89:4C:D2:8D:59:85:99:2F:6E:F7:B7:96:25:9A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kaeewn7TiUzSjVmFmS9u97eWJZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.212.0/24
151.240.126.0/23
151.243.16.0/24
151.243.60.0/23
151.243.114.0/24
151.244.170.0/24
151.244.173.0/24
151.244.181.0/24
151.244.185.0/24
151.246.156.0/24
151.247.47.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e7:db:63:38:8c:bd:e7:f8:96:93:4d:25:08:d7:29:3b:4e:
6d:ac:b8:b5:7b:21:ba:a7:d2:bb:e0:88:52:74:0b:b9:e4:b0:
47:12:e7:ab:87:7b:8b:69:23:c4:24:b6:f3:79:d8:c4:b7:74:
29:f0:0d:b6:9b:1f:ea:91:02:90:a6:55:83:bd:b7:35:c2:93:
92:be:30:da:e6:11:29:af:51:24:8b:e5:3a:43:3c:62:30:2f:
f0:03:2a:aa:4e:f1:5e:4c:74:d6:13:55:1f:da:96:91:de:93:
46:1a:31:5f:65:d0:43:29:6a:1c:65:b9:e2:45:53:df:bd:60:
f1:65:2a:73:b7:ad:23:37:18:ca:63:c4:34:e4:ec:e2:53:38:
f5:11:21:77:ae:2e:cd:aa:14:c5:e8:2f:d6:d6:8a:ef:e1:c1:
b9:ee:ed:49:71:99:c7:df:ae:10:1a:99:f9:2c:4b:e3:69:ae:
9a:ac:5b:b0:44:4b:45:73:5c:b1:ca:a8:34:c0:a8:31:ea:bb:
d1:99:3c:0f:9f:e0:87:e4:53:02:ee:44:15:d6:19:11:67:fb:
0e:b2:73:98:f3:74:16:eb:26:ee:db:bc:df:a8:d9:a6:80:21:
c2:ae:d2:40:9d:eb:37:96:1d:db:28:0d:ad:e7:06:e2:ba:31:
d1:b4:ea:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:00 2026 by rpki-client