Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hpPLY7hEOhj3-lP8qfXHZKOvv6I.roa
File: hpPLY7hEOhj3-lP8qfXHZKOvv6I.roa (raw, json)
Hash identifier: fgQUMnKaoifqq0Yk9PdbhcdilJUI07duUjtO8lT0CP0=
Subject key identifier: 86:93:CB:63:B8:44:3A:18:F7:FA:53:FC:A9:F5:C7:64:A3:AF:BF:A2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E892786290B48D6D2E8FF50D1148EC1DD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hpPLY7hEOhj3-lP8qfXHZKOvv6I.roa
Signing time: Tue 02 Jun 2026 16:25:29 +0000
ROA not before: Tue 02 Jun 2026 16:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215703
IP address blocks: 151.241.100.0/24 maxlen: 24
151.243.93.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
151.244.72.0/24 maxlen: 24
151.244.233.0/24 maxlen: 24
151.244.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jun 2026 07:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:27:86:29:0b:48:d6:d2:e8:ff:50:d1:14:8e:c1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 2 16:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8693cb63b8443a18f7fa53fca9f5c764a3afbfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:ec:23:07:de:45:5c:cb:59:ea:13:87:51:
6e:58:e3:ff:85:e0:df:64:6d:78:d9:23:2e:39:09:
7c:b9:ef:57:b8:f7:5a:c8:a3:3e:22:29:62:0e:d1:
e1:9a:f2:57:59:4a:76:59:f5:6b:18:76:43:8f:9f:
36:56:2b:ab:8d:04:d4:4b:57:52:da:ce:65:5e:1b:
ce:c5:c9:c7:66:e3:4e:80:ac:b1:b4:cb:ae:3c:0a:
40:5e:2a:47:38:ba:3f:b2:d6:5c:39:db:f3:cb:db:
1c:7a:d1:24:dc:d6:1f:c3:ba:08:26:8a:ca:0e:31:
8a:01:12:74:37:61:c8:4d:dd:6c:28:3b:d3:09:22:
ef:93:ba:2f:17:37:fe:3e:22:c4:09:cf:b3:8f:a5:
ea:d9:ef:64:6c:09:9f:41:6d:5c:db:4d:3c:f2:af:
a3:f9:f6:00:21:26:e5:13:c1:11:9d:9f:32:7d:12:
e3:23:54:70:62:dd:a3:a6:56:62:4d:66:b8:67:b1:
7a:0f:d6:5d:eb:28:43:dd:5f:4d:76:74:73:07:de:
26:c7:9e:e0:48:1e:5f:cd:30:9d:4a:8f:f8:81:47:
1b:23:ad:15:88:ca:64:4a:05:00:df:7d:82:33:e2:
d8:96:3f:bf:18:eb:20:93:fd:2e:6c:35:d9:3b:d1:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:93:CB:63:B8:44:3A:18:F7:FA:53:FC:A9:F5:C7:64:A3:AF:BF:A2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hpPLY7hEOhj3-lP8qfXHZKOvv6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.100.0/24
151.243.93.0/24
151.243.113.0/24
151.244.72.0/24
151.244.233.0/24
151.244.237.0/24
Signature Algorithm: sha256WithRSAEncryption
13:eb:a6:fb:e4:69:44:2c:6c:a3:f0:34:3e:26:f6:12:67:c7:
1b:ca:ce:7d:93:1b:81:6e:03:03:88:1d:90:48:8a:10:8a:e6:
bb:18:4f:dd:d3:fe:c2:33:be:81:d9:06:e4:80:d0:51:27:61:
ea:b8:25:d9:6d:0c:ec:45:10:6e:e4:34:26:d8:d7:35:9d:c6:
65:13:41:4b:a5:5a:d1:5d:a1:02:aa:c3:bc:ce:9b:ac:9a:7d:
77:ce:2e:02:50:e8:e5:7d:07:2f:d5:3a:2a:77:0f:1d:d2:56:
1e:50:c5:f4:ae:3d:55:fa:c5:0b:d9:a7:97:b2:6a:80:e4:f3:
97:77:b2:b7:51:ad:df:79:92:94:01:b5:5b:d4:af:7d:52:fd:
bf:58:9e:2b:fc:f8:87:f4:aa:0e:aa:53:35:a2:3d:07:5b:89:
65:78:12:3c:98:ec:8c:08:d8:94:3a:e7:63:48:ef:72:b9:67:
f5:1b:1c:57:af:42:45:ab:c2:d5:83:31:18:89:a5:4c:af:65:
04:9c:b9:b3:72:15:0a:35:87:29:d4:50:38:34:17:c1:01:2b:
d4:4d:7a:b9:32:fc:eb:c4:65:83:63:bb:f8:62:06:7e:e7:21:
d7:45:68:c3:b3:60:50:b6:41:2f:c6:b9:f7:e9:ac:85:07:32:
b3:32:b0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:40:31 2026 by rpki-client