Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZlWdnZbC7F5NMKCFimvnwbVIvQE.roa
File: ZlWdnZbC7F5NMKCFimvnwbVIvQE.roa (raw, json)
Hash identifier: nqijLv3obIPIlD1Di3HkTAMdvRQnYg90k69Nt0mdMQE=
Subject key identifier: 66:55:9D:9D:96:C2:EC:5E:4D:30:A0:85:8A:6B:E7:C1:B5:48:BD:01
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0A481DD31F640D334822F15C45106A269
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZlWdnZbC7F5NMKCFimvnwbVIvQE.roa
Signing time: Tue 15 Sep 2026 09:59:29 +0000
ROA not before: Tue 15 Sep 2026 09:59:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 151.240.0.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.241.1.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.148.0/24 maxlen: 24
151.241.150.0/24 maxlen: 24
151.241.157.0/24 maxlen: 24
151.241.220.0/24 maxlen: 24
151.242.1.0/24 maxlen: 24
151.242.7.0/24 maxlen: 24
151.242.12.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.59.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.242.119.0/24 maxlen: 24
151.242.157.0/24 maxlen: 24
151.243.21.0/24 maxlen: 24
151.243.47.0/24 maxlen: 24
151.243.49.0/24 maxlen: 24
151.243.51.0/24 maxlen: 24
151.243.57.0/24 maxlen: 24
151.243.60.0/24 maxlen: 24
151.243.61.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.114.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.244.105.0/24 maxlen: 24
151.244.142.0/24 maxlen: 24
151.244.162.0/24 maxlen: 24
151.244.178.0/24 maxlen: 24
151.244.236.0/24 maxlen: 24
151.245.29.0/24 maxlen: 24
151.245.38.0/24 maxlen: 24
151.245.40.0/24 maxlen: 24
151.245.48.0/24 maxlen: 24
151.245.52.0/24 maxlen: 24
151.245.61.0/24 maxlen: 24
151.245.63.0/24 maxlen: 24
151.245.65.0/24 maxlen: 24
151.245.68.0/24 maxlen: 24
151.245.91.0/24 maxlen: 24
151.245.102.0/24 maxlen: 24
151.245.109.0/24 maxlen: 24
151.245.120.0/24 maxlen: 24
151.245.138.0/24 maxlen: 24
151.245.141.0/24 maxlen: 24
151.245.148.0/24 maxlen: 24
151.245.162.0/24 maxlen: 24
151.245.170.0/24 maxlen: 24
151.245.226.0/24 maxlen: 24
151.245.241.0/24 maxlen: 24
151.246.132.0/24 maxlen: 24
151.246.133.0/24 maxlen: 24
151.246.134.0/24 maxlen: 24
151.246.135.0/24 maxlen: 24
151.246.179.0/24 maxlen: 24
151.246.180.0/24 maxlen: 24
151.246.222.0/24 maxlen: 24
151.246.248.0/24 maxlen: 24
151.247.45.0/24 maxlen: 24
151.247.89.0/24 maxlen: 24
151.247.108.0/24 maxlen: 24
151.247.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 08:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:81:dd:31:f6:40:d3:34:82:2f:15:c4:51:06:a2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 15 09:59:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66559d9d96c2ec5e4d30a0858a6be7c1b548bd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:42:27:b3:5d:8a:6e:a2:2c:17:56:7f:a2:
42:72:4d:fb:14:be:a7:27:17:d1:89:05:42:a5:63:
66:ac:b2:c5:0a:33:2d:91:90:35:61:c2:b1:0f:c1:
64:43:6d:aa:75:cc:20:cd:79:f2:36:d9:c5:21:a0:
58:98:8e:53:29:5f:fa:4f:1c:2c:5c:9d:ce:cd:4c:
3f:1f:2d:94:e3:b3:0c:f0:1c:0f:14:d4:85:8a:d9:
f4:97:5e:ac:f2:b1:aa:1c:73:60:a5:0b:17:8d:7d:
f3:f1:e2:97:03:87:74:62:48:a3:06:b2:d7:51:21:
a1:d9:de:b7:a8:ac:84:84:a0:df:1a:2f:18:19:88:
ef:d4:fb:f7:3c:04:7f:80:d1:f7:e8:f8:fa:24:3f:
fb:06:5e:f9:9d:93:d6:b5:08:e0:28:6c:3c:98:26:
ab:29:d3:84:29:7e:ca:2c:8b:3a:e5:85:de:56:4b:
32:39:5b:ae:5d:71:4f:bb:33:eb:f9:d9:ba:95:10:
50:ab:5f:41:31:a6:37:25:fa:18:82:5a:c7:36:00:
ba:23:52:8f:8f:9e:f8:fc:87:50:31:1b:9f:06:95:
e1:8b:90:b3:97:ed:c8:76:04:55:08:07:23:ec:c0:
67:b0:17:3c:f4:f7:fd:97:47:db:7b:54:aa:50:9d:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:55:9D:9D:96:C2:EC:5E:4D:30:A0:85:8A:6B:E7:C1:B5:48:BD:01
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZlWdnZbC7F5NMKCFimvnwbVIvQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.0.0/24
151.240.5.0/24
151.240.133.0/24
151.241.1.0/24
151.241.25.0/24
151.241.148.0/24
151.241.150.0/24
151.241.157.0/24
151.241.220.0/24
151.242.1.0/24
151.242.7.0/24
151.242.12.0/24
151.242.14.0/24
151.242.59.0/24
151.242.77.0/24
151.242.119.0/24
151.242.157.0/24
151.243.21.0/24
151.243.47.0/24
151.243.49.0/24
151.243.51.0/24
151.243.57.0/24
151.243.60.0/23
151.243.88.0/24
151.243.114.0/24
151.243.120.0/24
151.244.105.0/24
151.244.142.0/24
151.244.162.0/24
151.244.178.0/24
151.244.236.0/24
151.245.29.0/24
151.245.38.0/24
151.245.40.0/24
151.245.48.0/24
151.245.52.0/24
151.245.61.0/24
151.245.63.0/24
151.245.65.0/24
151.245.68.0/24
151.245.91.0/24
151.245.102.0/24
151.245.109.0/24
151.245.120.0/24
151.245.138.0/24
151.245.141.0/24
151.245.148.0/24
151.245.162.0/24
151.245.170.0/24
151.245.226.0/24
151.245.241.0/24
151.246.132.0/22
151.246.179.0-151.246.180.255
151.246.222.0/24
151.246.248.0/24
151.247.45.0/24
151.247.89.0/24
151.247.108.0/24
151.247.137.0/24
Signature Algorithm: sha256WithRSAEncryption
85:15:23:3a:92:fa:ec:c1:4a:0f:50:ba:79:d6:ad:d0:0d:15:
ab:87:c5:fe:90:dd:32:fb:62:f0:80:fb:6b:a0:35:cc:48:70:
60:a1:71:8f:a6:e9:83:f4:6a:94:5e:c3:07:52:1f:40:8f:df:
81:13:ae:96:ca:84:3b:3b:a0:04:bd:74:d6:ae:8c:a9:58:3a:
1b:9f:5b:d1:a2:80:82:67:b4:d4:21:86:b3:17:5d:de:d5:2a:
73:1e:11:a2:dc:5a:18:33:8d:1c:b0:a8:41:30:c3:fc:15:f0:
04:d4:6f:72:c3:d6:d4:c3:a3:45:21:ff:b2:b4:c1:9b:d8:53:
a1:02:aa:5b:30:3e:27:9b:72:f5:d6:2b:13:12:6b:1d:fe:b9:
ac:93:6d:69:5d:ac:05:88:0f:cc:8f:37:2b:b1:90:c9:4e:3f:
4f:af:ba:f6:ee:e1:bd:48:54:22:be:a1:1b:d4:d6:bb:c8:b7:
05:73:14:18:6c:64:68:56:1b:94:e8:0c:89:76:e0:53:f1:58:
0f:38:01:fd:18:cf:0f:29:70:96:21:12:5a:0f:89:1d:64:02:
bc:29:c7:d4:1e:14:db:d5:5f:35:ee:6f:2a:60:40:ab:61:46:
34:10:ed:39:e9:74:c5:1a:20:ac:81:ba:fc:7f:30:12:2f:87:
35:fe:f3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:02:10 2026 by rpki-client