Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/giTVBBrB-hNEaJ-2kJRZWwJpZpI.roa
File: giTVBBrB-hNEaJ-2kJRZWwJpZpI.roa (raw, json)
Hash identifier: DxDXUFl36lHSoKmA2Yfst4ZqVzG1vt064OegdYfwThs=
Subject key identifier: 82:24:D5:04:1A:C1:FA:13:44:68:9F:B6:90:94:59:5B:02:69:66:92
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A0A9C0EC14CB6B70D99D77FB5DFA0FC395
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/giTVBBrB-hNEaJ-2kJRZWwJpZpI.roa
Signing time: Wed 16 Sep 2026 10:26:27 +0000
ROA not before: Wed 16 Sep 2026 10:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 43.240.150.0/24 maxlen: 24
43.240.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 11:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:c0:ec:14:cb:6b:70:d9:9d:77:fb:5d:fa:0f:c3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 16 10:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8224d5041ac1fa1344689fb69094595b02696692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:08:4b:b5:04:b2:a2:3a:2d:a1:f6:3d:e3:
68:90:bd:aa:5e:43:44:d6:3f:91:f5:ce:54:1f:1f:
49:60:e8:19:fb:ed:19:a0:83:38:e3:67:c2:2b:0b:
05:66:a0:d3:6d:81:ce:52:27:c3:fd:60:ef:03:37:
89:92:40:46:a8:c6:b5:80:ee:b0:3c:bf:e0:a5:79:
08:83:de:4e:80:63:f9:e5:48:88:c9:57:9d:47:be:
3a:49:95:91:f6:25:07:95:bc:f5:17:45:2a:4e:b9:
36:fe:e2:6c:ac:39:fa:f0:1c:6f:d8:b1:f1:2a:17:
17:42:ac:89:a7:07:ff:ed:37:d0:7f:35:32:12:7d:
85:70:dc:85:da:90:0c:07:08:16:5a:f4:b1:7e:b2:
69:f6:b1:6b:4b:65:bb:f4:ff:bf:31:50:4d:e3:22:
d4:a6:4d:3b:58:18:5b:de:bb:1f:8b:ee:ca:f7:c9:
51:ef:b8:a7:00:d6:db:76:96:13:7f:61:83:60:37:
e9:a3:bf:7a:f2:bb:3e:26:90:8e:77:95:fb:25:29:
5e:32:97:41:81:4c:1a:2b:22:52:ff:b4:05:46:54:
67:9e:70:aa:9d:cc:e0:bd:89:f1:da:ea:01:c3:a5:
0b:69:c2:93:83:d5:53:a6:87:dd:f4:fb:d2:ee:05:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:24:D5:04:1A:C1:FA:13:44:68:9F:B6:90:94:59:5B:02:69:66:92
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/giTVBBrB-hNEaJ-2kJRZWwJpZpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.150.0/23
Signature Algorithm: sha256WithRSAEncryption
12:f6:a7:32:be:f7:b6:72:34:84:aa:fa:08:1b:f9:2b:ab:46:
c4:b2:00:25:b4:5f:fe:c8:36:20:02:56:ad:ab:2f:b0:04:ad:
fa:99:f0:c8:87:b3:42:d7:a5:b5:fc:52:e6:20:70:f3:cb:e8:
4b:69:5a:36:b6:c2:dd:76:ad:05:3c:ff:6a:04:5d:f0:2d:38:
1f:26:b5:d9:2c:cd:c9:60:de:23:b1:68:6d:01:55:89:64:0a:
44:05:6d:75:6b:2a:e2:b0:a8:9a:55:72:d9:6d:27:52:52:cd:
2e:45:87:40:55:f2:c2:9e:94:23:06:9c:41:89:fa:ba:6e:4e:
4e:11:af:81:30:02:af:4c:fa:96:9a:0f:dc:db:e5:b6:16:a4:
60:b4:12:72:1e:11:dd:46:43:2d:a4:43:fc:db:37:70:82:50:
09:f8:12:cc:56:44:29:ab:1a:d4:e9:82:5c:ee:3c:e1:56:bf:
77:ab:6b:1a:89:4d:6f:23:43:d2:6e:d3:39:6f:7c:91:71:f5:
d9:c2:52:eb:07:1a:56:19:df:42:e2:59:b8:4a:4c:18:1c:46:
fd:5a:2c:95:51:c7:16:88:03:c7:69:60:27:41:a7:e4:f2:11:
5a:d0:34:10:3c:61:6e:49:92:60:e6:33:4b:51:91:50:83:55:
c3:e4:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:27:41 2026 by rpki-client