Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OiEWe4TCxC7mtvkXOWN7QRqKbRw.roa
File: OiEWe4TCxC7mtvkXOWN7QRqKbRw.roa (raw, json)
Hash identifier: QvdxjCHRjLo4h1S4FQJws1qjoF75PRn3zuv4v7LWCx4=
Subject key identifier: 3A:21:16:7B:84:C2:C4:2E:E6:B6:F9:17:39:63:7B:41:1A:8A:6D:1C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A023ACE6C984E8B27128C91C910083C000
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OiEWe4TCxC7mtvkXOWN7QRqKbRw.roa
Signing time: Fri 21 Aug 2026 09:35:28 +0000
ROA not before: Fri 21 Aug 2026 09:35:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219068
IP address blocks: 151.243.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 08:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:ac:e6:c9:84:e8:b2:71:28:c9:1c:91:00:83:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 21 09:35:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a21167b84c2c42ee6b6f91739637b411a8a6d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:7e:c5:42:4e:6e:2a:2e:be:e8:d0:e6:55:
5d:24:be:7c:86:cb:43:1c:c8:0c:b3:3e:9e:1a:cb:
9e:27:f1:b3:6a:77:23:4b:7a:e7:77:a2:1e:59:bd:
38:26:80:41:e8:93:50:93:75:b1:98:f4:1a:03:dd:
30:c3:96:85:ae:84:cc:1f:f1:6c:c9:ee:16:3c:93:
28:e1:52:6e:30:1d:57:74:4a:1e:f8:75:9b:54:a2:
08:a1:bc:0c:af:cb:85:32:9e:f2:d2:e7:07:bc:b8:
8c:11:d8:0c:e0:93:4f:46:25:1d:bf:d3:2d:e6:5b:
41:14:90:52:6c:fb:91:96:eb:4a:7d:9e:01:40:d6:
47:a3:f7:29:fd:08:e6:db:84:c3:0e:ab:5d:83:b2:
15:8e:85:c3:50:63:e9:b4:39:0a:4f:7e:f3:a6:1d:
db:10:9f:00:d1:b9:63:92:aa:d8:48:1c:52:52:41:
7b:12:1f:c8:2a:3d:a4:a5:f8:1a:5b:bc:87:60:31:
bb:8a:82:55:d7:8d:36:66:aa:14:f5:6a:e3:04:25:
4b:f6:36:a0:3d:be:67:1d:01:22:b8:82:9c:bc:64:
42:46:1e:b6:9f:ae:a5:10:88:d1:d9:38:02:ef:1f:
17:05:ad:7e:f2:35:40:76:72:dc:81:9a:61:1b:ff:
6e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:16:7B:84:C2:C4:2E:E6:B6:F9:17:39:63:7B:41:1A:8A:6D:1C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OiEWe4TCxC7mtvkXOWN7QRqKbRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.230.0/24
Signature Algorithm: sha256WithRSAEncryption
67:7a:c3:bf:c8:c2:31:8b:80:75:d5:86:17:26:57:55:14:17:
72:e2:b5:06:19:e8:d3:0e:93:d9:4f:0f:b0:a6:f0:ae:da:63:
28:4e:71:2b:4c:4c:87:6e:d4:cb:1b:37:b1:b7:62:af:24:6d:
81:6b:73:61:df:56:fb:7e:c7:a2:11:ed:e1:39:14:b1:ee:b1:
a7:92:8b:0c:4b:4c:be:f7:86:e8:5f:53:14:3b:b3:78:f8:70:
e1:28:b6:ff:d2:7c:6a:98:8b:90:81:38:90:ae:82:79:37:d9:
cc:04:1b:82:be:e4:c9:55:ec:e6:ed:58:b1:63:60:32:d5:f6:
ac:11:f0:96:10:89:33:19:84:bb:a5:60:5d:da:5b:d3:e0:a2:
95:26:44:1d:c9:5c:4c:86:63:0c:d5:eb:5f:42:c5:53:bb:d9:
f7:cd:3d:c8:c8:25:0e:03:d2:06:d7:25:a1:9c:39:23:d0:fc:
4f:32:3b:14:e9:df:11:4b:98:b0:10:1b:3b:f0:02:7e:44:2d:
cb:d4:ee:0c:fe:c1:20:a6:5f:5e:73:f0:4a:40:e5:b1:b1:5c:
3b:c6:86:30:ff:41:99:ac:5b:fb:f7:29:68:7d:bf:b3:86:10:
ab:89:66:7d:9a:33:06:12:46:0c:70:63:38:14:b2:f0:dd:c6:
d9:28:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:09:40 2026 by rpki-client