Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YVmZ2C41FGwGd954lzrOop3G03c.roa
File: YVmZ2C41FGwGd954lzrOop3G03c.roa (raw, json)
Hash identifier: HS8hwy/XzWkee2JDihfMELfYppq6zLa1T/qW7jeVcq0=
Subject key identifier: 61:59:99:D8:2E:35:14:6C:06:77:DE:78:97:3A:CE:A2:9D:C6:D3:77
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A099E83C78D1BFD3C3A2EFD599A2C13144
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YVmZ2C41FGwGd954lzrOop3G03c.roa
Signing time: Sun 13 Sep 2026 08:35:28 +0000
ROA not before: Sun 13 Sep 2026 08:35:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197256
IP address blocks: 151.247.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 17:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:e8:3c:78:d1:bf:d3:c3:a2:ef:d5:99:a2:c1:31:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 13 08:35:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=615999d82e35146c0677de78973acea29dc6d377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:11:0c:05:b2:7f:75:22:24:e8:cc:c6:f8:
de:63:d6:12:9a:20:28:19:60:a1:f2:17:0c:0f:67:
63:58:ed:80:65:51:d8:86:0a:23:79:2d:b2:50:59:
fd:35:71:e8:93:b4:4f:e6:d1:4a:ab:2a:ed:85:3a:
ba:db:2e:85:ff:dc:5f:c9:28:0f:00:0f:16:24:53:
50:9d:fd:28:3e:14:c8:3e:45:13:e8:2e:48:41:86:
b6:29:87:d1:ba:ec:6c:91:31:f6:30:f2:64:64:24:
3c:5a:5e:a1:e5:92:bd:c0:a3:85:1a:ef:20:b6:b2:
75:cf:e5:20:99:b8:f5:93:81:4b:16:1f:b5:db:1e:
fb:38:07:29:dc:8d:81:ef:85:10:3f:d0:68:4c:11:
a2:73:3f:db:f8:ad:2c:1d:7b:31:73:3a:8e:6a:02:
fd:0f:e7:b5:8d:3a:88:1a:27:1c:52:a8:2c:52:9b:
cd:0b:35:e2:07:ac:10:47:21:eb:bd:3e:b1:fe:64:
47:db:f9:de:2c:0f:c7:9e:fe:8a:ec:20:55:35:67:
9e:85:84:e7:da:b8:d1:fa:33:6c:d3:da:87:df:f0:
92:9f:cf:1c:76:4c:0e:58:52:13:32:f0:b7:ee:b3:
46:b6:14:8f:59:89:7a:ee:81:ec:49:e2:be:31:84:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:99:D8:2E:35:14:6C:06:77:DE:78:97:3A:CE:A2:9D:C6:D3:77
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YVmZ2C41FGwGd954lzrOop3G03c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.170.0/24
Signature Algorithm: sha256WithRSAEncryption
68:89:17:3c:d9:70:b4:77:6c:56:93:74:54:7a:eb:c1:14:e5:
aa:40:99:c2:bc:7d:79:8c:e4:d2:f8:33:8b:f1:bd:e1:14:1f:
01:b3:50:51:58:55:6c:92:33:97:08:13:cd:48:d1:c2:5c:53:
a3:ee:13:5d:93:f8:de:a8:cf:c4:bb:e8:78:e8:da:58:f3:10:
d1:e7:87:b4:f9:cf:24:57:c1:d3:84:f6:22:7a:de:ab:76:90:
78:2a:a3:ca:6f:a7:de:3f:e0:67:2c:f8:55:c7:e6:7f:62:9a:
95:97:d7:34:77:67:61:1f:a0:08:99:57:37:58:25:00:26:4c:
3b:1b:57:0e:52:92:bf:ad:86:47:e3:e2:aa:d9:e1:66:24:af:
c7:6e:44:32:2a:46:81:51:5d:97:70:c6:40:83:7f:f6:b3:ec:
ca:08:63:a0:aa:9a:98:0a:1f:12:b7:c5:c7:2f:a0:f0:6c:d3:
5f:b7:97:07:70:8f:60:6a:64:07:de:30:15:73:1b:23:b6:c1:
c0:8b:5a:4f:50:3e:62:69:6f:09:8c:1f:c8:f8:77:9a:40:f4:
d4:2c:b9:bd:50:26:58:30:d0:02:fb:85:cd:88:22:bc:d2:f1:
41:73:3f:aa:f7:57:8d:65:c0:3e:f8:07:fb:a5:c7:0e:8e:b2:
6a:24:81:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:26:24 2026 by rpki-client