This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nWeQoUriPOitpf-VDdp_K1Uwvz8.roa
File:                     nWeQoUriPOitpf-VDdp_K1Uwvz8.roa (raw, json)
Hash identifier:          wwN4NGLMWGh+qnuZzFiVVxvfatrQgyW31YaOj3LDPn0=
Subject key identifier:   9D:67:90:A1:4A:E2:3C:E8:AD:A5:FF:95:0D:DA:7F:2B:55:30:BF:3F
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       0197561C80A6E2C5DF0BE935780CDF3E732D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nWeQoUriPOitpf-VDdp_K1Uwvz8.roa
Signing time:             Mon 09 Jun 2025 19:13:17 +0000
ROA not before:           Mon 09 Jun 2025 19:13:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215590
IP address blocks:        150.241.115.0/24 maxlen: 24
                          150.241.116.0/24 maxlen: 24
                          150.241.123.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 09 Jun 2025 20:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:56:1c:80:a6:e2:c5:df:0b:e9:35:78:0c:df:3e:73:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Jun  9 19:13:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9d6790a14ae23ce8ada5ff950dda7f2b5530bf3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:31:f3:6b:cb:8e:b3:64:72:67:a5:5c:e5:6b:
                    50:42:e7:df:37:27:33:8a:56:fd:ba:85:60:bb:9f:
                    0f:63:63:29:2a:75:08:8c:3a:23:ef:c3:b5:95:7b:
                    3d:f3:30:91:42:01:ac:04:10:b5:f9:51:eb:25:6a:
                    fa:2e:f7:c0:7c:06:37:20:25:06:23:1d:f9:45:e2:
                    63:17:e8:ad:10:ac:96:c1:52:6f:5d:be:0f:13:b0:
                    94:48:9a:4c:9c:ad:21:d8:de:a9:37:98:a1:67:dd:
                    4f:0a:88:d6:7a:4b:96:7f:61:33:00:9c:3f:23:a5:
                    5b:eb:13:a1:bb:a5:f1:cb:1e:c0:a8:c2:2f:31:b4:
                    10:ce:d8:09:03:d9:a0:b3:a0:10:bb:b4:8e:60:b0:
                    8b:4f:2d:78:c6:e5:fc:13:ee:cc:a9:31:0e:ce:51:
                    fe:1a:a4:8b:52:8b:a7:c2:af:0c:6d:3c:05:1c:e7:
                    7f:98:71:49:15:45:3e:33:cb:7d:45:82:f7:3a:c2:
                    9a:9e:b1:2c:ec:71:74:ea:a2:12:bb:c6:51:b1:b8:
                    39:aa:38:9c:88:d0:bb:8e:e9:50:2d:29:5f:a6:1d:
                    87:94:00:49:7b:ac:28:11:a2:8f:f5:1a:45:5f:2c:
                    8f:94:49:28:e6:ba:69:09:3a:bc:6f:2e:22:33:00:
                    50:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:67:90:A1:4A:E2:3C:E8:AD:A5:FF:95:0D:DA:7F:2B:55:30:BF:3F
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nWeQoUriPOitpf-VDdp_K1Uwvz8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.241.115.0-150.241.116.255
                  150.241.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:e0:e8:52:f6:ad:57:ba:8d:d6:30:93:e6:b0:1e:46:07:d9:
         72:12:e0:56:a8:ec:2a:cf:ee:f8:d9:99:5d:2b:bd:2d:86:48:
         ec:99:5c:13:d8:8d:f9:03:9a:ca:95:d2:0a:15:4d:a7:2d:4e:
         b7:27:d5:47:85:c4:60:95:8a:d6:d3:f6:fd:be:de:aa:78:b6:
         8d:f4:55:0f:d0:4a:18:9e:5a:a3:a5:44:1f:36:af:02:c4:d8:
         55:d3:24:4d:1e:59:7a:ea:e0:8a:61:c5:5a:8f:30:00:83:7f:
         d5:a7:1d:42:1d:a8:3e:55:29:fc:5c:15:e0:1e:68:70:4c:ea:
         f3:c5:b3:57:2c:7b:18:44:ba:8e:84:93:eb:3d:08:e2:19:58:
         56:86:5f:a3:94:1e:dc:b0:94:7b:47:b7:1f:14:a4:e7:38:0d:
         b1:13:c1:b1:c4:d2:46:e6:f6:41:a4:7e:49:46:45:c7:fb:77:
         e5:13:0f:15:4b:8e:06:77:b6:4f:e2:7f:5d:7f:99:2e:06:54:
         cd:01:e9:8a:d1:97:25:87:a3:b7:25:88:b7:18:7f:ee:e7:ba:
         f2:4d:5f:cc:45:26:8a:98:2b:30:ec:e4:7a:b0:21:0d:ba:fc:
         bb:d5:a8:90:ba:c9:d7:a7:c9:3e:3b:26:72:7f:1d:ab:ff:af:
         b5:b5:6b:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 27 06:17:46 2025 by rpki-client