Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n9cIN0aJ6oVdj8pFucZ7V4bDDP4.roa
File: n9cIN0aJ6oVdj8pFucZ7V4bDDP4.roa (raw, json)
Hash identifier: fhQa38bhV3cYkU/SpAzjniRb0IFl+cyv3Svz5w8LaK0=
Subject key identifier: 9F:D7:08:37:46:89:EA:85:5D:8F:CA:45:B9:C6:7B:57:86:C3:0C:FE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D1E95B2CFBFAC01223EDF5BC0D0EE775C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n9cIN0aJ6oVdj8pFucZ7V4bDDP4.roa
Signing time: Tue 24 Mar 2026 06:43:40 +0000
ROA not before: Tue 24 Mar 2026 06:43:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 151.244.59.0/24 maxlen: 24
151.244.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Mar 2026 06:45:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:95:b2:cf:bf:ac:01:22:3e:df:5b:c0:d0:ee:77:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 24 06:43:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fd708374689ea855d8fca45b9c67b5786c30cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:63:04:7a:99:cd:bb:81:c1:6a:09:41:37:
7f:a0:4b:d4:0f:b1:29:20:3a:2e:6e:af:64:1b:f5:
0d:74:44:ce:ae:0b:89:ad:38:d4:1a:6c:9c:24:6f:
5b:45:81:88:f0:d2:fd:1e:24:ca:cc:84:d3:7c:fb:
6d:11:ab:b7:bd:d0:dc:18:3f:68:0b:f5:0d:a5:f3:
30:c0:19:75:36:bb:a6:25:54:51:95:9f:9e:b0:50:
7e:bf:c3:29:68:03:36:69:6b:82:30:1e:1e:e2:32:
50:e6:24:a0:0e:a3:67:41:79:0a:01:9e:da:64:88:
7a:7e:f8:44:cf:b7:f8:e8:2c:d3:bc:7a:92:ea:24:
9c:0a:66:65:22:5e:2e:f0:62:14:e9:4e:58:69:b5:
80:45:95:2b:2f:b3:8f:ae:32:2b:5c:46:12:fc:51:
35:a7:50:69:c4:e4:87:55:0f:cb:04:b1:71:33:d0:
a3:33:5d:18:f0:e2:16:0d:d6:34:61:c2:13:f1:50:
9b:bc:8f:05:11:89:3d:1a:48:4c:58:a9:6e:8b:38:
45:f2:7e:20:d0:b3:f3:90:82:6c:a3:b0:4c:e5:6c:
cb:8a:0c:92:85:2c:0d:f1:ee:7d:ba:1a:19:06:02:
86:dd:f1:6d:88:8f:bf:39:9f:3e:24:bc:62:93:9c:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D7:08:37:46:89:EA:85:5D:8F:CA:45:B9:C6:7B:57:86:C3:0C:FE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n9cIN0aJ6oVdj8pFucZ7V4bDDP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.59.0/24
151.244.90.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b1:95:39:75:6c:0c:df:4d:0c:de:57:9a:ea:a5:98:3a:10:
04:1e:28:59:07:96:03:22:5f:7a:9e:8f:33:c0:cf:5c:0d:a5:
97:89:93:10:84:ad:b1:01:86:a9:44:0f:43:7d:37:03:d3:68:
3f:8e:8a:2a:13:54:e8:15:9f:1c:46:3a:0c:ad:c8:4a:30:60:
83:96:85:d5:ed:38:c2:be:e5:af:7d:17:98:96:a6:cb:e3:4b:
6f:5a:01:35:b7:c3:8f:c1:92:37:e9:e0:f5:c8:17:18:59:91:
62:d9:5a:76:b2:70:5b:63:02:c9:7b:2b:c7:91:b3:1c:5d:8e:
7f:0a:e0:a5:c8:21:3c:d9:6c:de:2c:8f:40:8e:67:d9:f7:af:
f2:52:8e:f6:27:68:fb:a7:e9:14:fd:fb:0e:ed:27:47:8b:f6:
58:e0:16:9e:39:60:be:89:02:6c:4a:57:76:a7:7b:6c:61:db:
a4:11:a5:19:33:54:46:a4:3e:12:bc:8f:c3:dc:cd:1a:33:9c:
85:2b:5a:c7:c9:7f:ef:d4:a1:20:5d:3b:3a:9c:3e:f6:1e:13:
44:b9:ea:f0:7d:9f:ca:52:87:c4:08:98:e2:b6:2a:6a:e6:b1:
50:7b:2c:71:3d:9d:f2:e9:1b:a9:f5:2c:35:b6:b6:5f:1d:a5:
48:0e:8f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:46:51 2026 by rpki-client