Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rHNbo0r9QoGs5fPYtHK3-buEZlw.roa
File: rHNbo0r9QoGs5fPYtHK3-buEZlw.roa (raw, json)
Hash identifier: oP7q5SRj3PsmRea/8O0t/5IeiHbWInHDztRoAwD+dXU=
Subject key identifier: AC:73:5B:A3:4A:FD:42:81:AC:E5:F3:D8:B4:72:B7:F9:BB:84:66:5C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0AFE66D3785950999F682351BFA0FC9A4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rHNbo0r9QoGs5fPYtHK3-buEZlw.roa
Signing time: Thu 17 Sep 2026 15:05:09 +0000
ROA not before: Thu 17 Sep 2026 15:05:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135392
IP address blocks: 151.242.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Oct 2026 12:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:e6:6d:37:85:95:09:99:f6:82:35:1b:fa:0f:c9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 17 15:05:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac735ba34afd4281ace5f3d8b472b7f9bb84665c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:89:b8:f3:f2:7a:b0:d8:71:46:2f:73:54:
96:ad:c5:10:aa:2f:58:ab:79:cb:dc:0f:1d:5e:5a:
d9:88:28:d8:19:b7:86:6d:4a:96:31:25:d6:94:62:
06:8f:a7:6e:4e:8f:80:0c:e3:ad:8a:53:44:da:a9:
06:67:cd:6c:94:bf:3e:3f:ca:82:ac:fd:ad:a3:d7:
b0:17:91:46:1c:51:d5:81:05:55:bb:ea:9d:73:de:
22:43:d5:96:6a:01:f3:49:b9:e2:ab:3b:23:e0:38:
3d:2c:5f:28:94:4d:ae:e8:6d:c8:f3:90:04:8a:c5:
76:b2:e4:30:28:c3:88:81:34:af:13:81:38:06:3f:
2e:a6:71:3a:09:bf:69:02:53:7a:5f:c4:10:ce:38:
aa:db:88:0a:d5:27:9e:86:f5:da:46:e1:50:cd:00:
cc:e3:2d:e2:bd:b0:40:b2:fc:9c:72:22:77:40:47:
41:5f:14:65:e3:fa:6e:c3:0e:2c:24:1e:f7:a6:0a:
9a:bf:a7:c6:50:0a:bf:14:c4:4d:fb:40:fd:64:94:
33:7a:ce:54:18:37:04:7b:21:ab:dc:4b:b9:86:44:
eb:55:34:78:cd:17:55:b4:ef:cf:d2:66:79:07:43:
23:bd:79:73:c1:a1:7a:a4:fd:06:32:81:88:00:2e:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:73:5B:A3:4A:FD:42:81:AC:E5:F3:D8:B4:72:B7:F9:BB:84:66:5C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rHNbo0r9QoGs5fPYtHK3-buEZlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:7d:3a:cb:88:74:0a:fd:aa:a5:b0:bf:79:eb:2d:43:f6:a2:
77:68:7e:4a:1a:d2:ae:0b:25:43:00:51:46:b2:c4:7c:10:b2:
71:80:01:ae:7e:31:fa:0f:58:62:21:e7:ae:68:6a:8d:58:66:
68:cb:72:a8:d0:38:8b:df:3f:92:15:80:90:45:41:17:df:4c:
46:90:32:55:be:d5:a3:31:de:97:be:94:ed:35:00:fa:ce:0d:
79:1f:d7:f0:ad:d7:eb:bc:e7:f4:57:bf:2d:4d:d8:0a:60:b9:
a4:8f:19:3c:90:5e:02:9f:b1:fe:f8:cf:7a:31:b2:d7:41:1e:
1f:c0:b8:97:f1:c6:6c:16:29:a0:28:c8:85:c1:2d:d9:ca:0f:
c8:c2:37:61:b5:52:ec:d7:4b:a6:a3:cc:f7:04:69:ef:55:56:
d7:20:93:bb:b3:fa:6f:71:82:dd:cc:ea:d1:33:df:a5:47:0d:
90:26:ef:2d:26:a2:e2:4b:4d:f2:1b:68:88:3b:9b:59:58:4b:
ac:92:e1:11:ae:72:68:d4:9f:51:b7:4e:4d:38:5f:35:7f:13:
52:89:c4:9f:bc:d1:00:19:65:82:04:fc:30:2d:bf:bb:69:8b:
89:ef:52:99:4a:93:d8:40:c1:9b:eb:03:c4:a0:b4:be:c9:ca:
60:29:7a:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCv5m03hZUJmfaCNRv6D8mkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTE3MTUwNTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzczNWJhMzRhZmQ0MjgxYWNlNWYzZDhiNDcyYjdmOWJiODQ2NjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbaJuPPyerDYcUYvc1SWrcUQqi9Y
q3nL3A8dXlrZiCjYGbeGbUqWMSXWlGIGj6duTo+ADOOtilNE2qkGZ81slL8+P8qC
rP2to9ewF5FGHFHVgQVVu+qdc94iQ9WWagHzSbniqzsj4Dg9LF8olE2u6G3I85AE
isV2suQwKMOIgTSvE4E4Bj8upnE6Cb9pAlN6X8QQzjiq24gK1SeehvXaRuFQzQDM
4y3ivbBAsvycciJ3QEdBXxRl4/puww4sJB73pgqav6fGUAq/FMRN+0D9ZJQzes5U
GDcEeyGr3Eu5hkTrVTR4zRdVtO/P0mZ5B0MjvXlzwaF6pP0GMoGIAC4JdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKxzW6NK/UKBrOXz2LRyt/m7hGZcMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvckhOYm8wcjlRb0dzNWZQWXRISzMtYnVFWmx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/LRMA0G
CSqGSIb3DQEBCwUAA4IBAQCofTrLiHQK/aqlsL956y1D9qJ3aH5KGtKuCyVDAFFG
ssR8ELJxgAGufjH6D1hiIeeuaGqNWGZoy3Ko0DiL3z+SFYCQRUEX30xGkDJVvtWj
Md6XvpTtNQD6zg15H9fwrdfrvOf0V78tTdgKYLmkjxk8kF4Cn7H++M96MbLXQR4f
wLiX8cZsFimgKMiFwS3Zyg/IwjdhtVLs10umo8z3BGnvVVbXIJO7s/pvcYLdzOrR
M9+lRw2QJu8tJqLiS03yG2iIO5tZWEuskuERrnJo1J9Rt05NOF81fxNSicSfvNEA
GWWCBPwwLb+7aYuJ71KZSpPYQMGb6wPEoLS+ycpgKXo3
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:24:34 2026 by rpki-client