Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ILXYD8T-NCVmOlWUbNa7hbOPvoM.roa
File: ILXYD8T-NCVmOlWUbNa7hbOPvoM.roa (raw, json)
Hash identifier: qJd3FhQwGRGi297+EfvagdG+CO0zFmtPKCFdakskDB0=
Subject key identifier: 20:B5:D8:0F:C4:FE:34:25:66:3A:55:94:6C:D6:BB:85:B3:8F:BE:83
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0485215C0D108CA4808F7C59A4BB2B037
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ILXYD8T-NCVmOlWUbNa7hbOPvoM.roa
Signing time: Fri 28 Aug 2026 12:22:14 +0000
ROA not before: Fri 28 Aug 2026 12:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402343
IP address blocks: 151.244.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Aug 2026 15:59:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:52:15:c0:d1:08:ca:48:08:f7:c5:9a:4b:b2:b0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 28 12:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20b5d80fc4fe3425663a55946cd6bb85b38fbe83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:81:4d:16:fa:f3:37:b2:5c:d8:4d:a8:2a:
9a:26:fd:4d:25:57:74:65:8a:98:bb:81:b3:62:70:
1c:8b:35:35:b3:97:7b:a7:37:4d:62:ce:f8:13:f9:
77:f0:2e:38:b2:43:7f:d3:10:95:43:a0:1b:c0:75:
57:34:0f:5c:e5:ac:50:5e:dd:77:db:28:0e:67:02:
e3:d6:97:6d:42:f8:27:8e:82:a5:f6:d2:54:51:63:
25:0b:14:0f:4f:97:20:ca:d0:b9:9f:60:83:22:35:
54:6d:3f:1f:53:22:d1:5a:b4:5a:ae:42:83:94:92:
d9:be:10:3e:0c:95:f5:fa:40:c9:3d:9e:d8:5d:06:
79:38:e5:6b:99:32:ed:a8:b9:45:78:bb:8d:c1:3c:
42:bd:8b:b9:5f:32:d5:db:b2:ea:52:9d:b4:cf:7c:
e3:c5:46:94:21:2d:8a:11:5d:8b:df:81:92:97:28:
73:8b:9a:46:48:5d:f2:51:fb:9c:c2:b4:3c:af:34:
5b:3b:b5:2b:80:99:90:ae:95:1c:9c:31:37:be:b4:
87:01:a6:f4:0e:a7:1d:2d:9b:05:34:ad:d0:75:58:
48:32:a8:c9:84:e3:a8:62:7b:7a:d4:c0:db:cf:59:
ee:35:cf:5f:bc:71:94:0f:e2:06:ce:02:26:ff:4b:
ab:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B5:D8:0F:C4:FE:34:25:66:3A:55:94:6C:D6:BB:85:B3:8F:BE:83
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ILXYD8T-NCVmOlWUbNa7hbOPvoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d6:6b:87:47:20:b6:b2:30:15:60:d8:77:d8:04:79:c5:22:
9c:a6:ef:f5:e7:04:c9:55:af:3a:4a:ef:72:e3:5b:af:80:af:
92:03:7c:a4:40:3f:08:fc:82:76:c4:17:f9:56:96:5f:8e:9d:
36:9d:02:28:02:f5:53:db:7c:f6:65:da:56:4a:d0:eb:b8:9b:
0f:dc:38:0e:01:c9:3f:63:30:56:2d:a6:87:ca:83:ab:83:fb:
73:70:e1:e4:2f:c8:79:66:8d:19:9c:c2:b5:de:5a:03:50:25:
44:10:c8:05:58:c3:ec:08:a4:03:50:fc:e5:1a:5c:b9:d4:24:
7e:c9:10:bf:41:ba:65:b5:22:6f:2b:5c:8d:3b:ca:72:eb:5e:
af:2f:29:40:83:1e:8d:7d:a1:8a:0b:e5:00:c3:52:4b:cd:cd:
08:9d:c6:f0:a7:9d:28:b7:83:e5:37:03:2b:a9:7d:4f:91:cb:
ff:30:fc:90:10:6a:0a:d0:05:04:85:7a:68:f7:13:cf:b4:e4:
0c:4b:cf:89:8e:62:3c:d4:f8:b8:65:ef:d1:07:e0:7b:2f:f3:
ca:c1:af:06:6d:12:0f:1e:d5:1c:e2:51:63:88:48:47:bd:b8:
85:83:03:90:24:49:a4:bb:8e:2c:27:26:7b:69:a7:75:ba:84:
22:e1:a9:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBIUhXA0QjKSAj3xZpLsrA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwODI4MTIyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGI1ZDgwZmM0ZmUzNDI1NjYzYTU1OTQ2Y2Q2YmI4NWIzOGZiZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV6BTRb68zeyXNhNqCqaJv1NJVd0
ZYqYu4GzYnAcizU1s5d7pzdNYs74E/l38C44skN/0xCVQ6AbwHVXNA9c5axQXt13
2ygOZwLj1pdtQvgnjoKl9tJUUWMlCxQPT5cgytC5n2CDIjVUbT8fUyLRWrRarkKD
lJLZvhA+DJX1+kDJPZ7YXQZ5OOVrmTLtqLlFeLuNwTxCvYu5XzLV27LqUp20z3zj
xUaUIS2KEV2L34GSlyhzi5pGSF3yUfucwrQ8rzRbO7UrgJmQrpUcnDE3vrSHAab0
DqcdLZsFNK3QdVhIMqjJhOOoYnt61MDbz1nuNc9fvHGUD+IGzgIm/0ur9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCC12A/E/jQlZjpVlGzWu4Wzj76DMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvSUxYWUQ4VC1OQ1ZtT2xXVWJOYTdoYk9Qdm9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/StMA0G
CSqGSIb3DQEBCwUAA4IBAQBq1muHRyC2sjAVYNh32AR5xSKcpu/15wTJVa86Su9y
41uvgK+SA3ykQD8I/IJ2xBf5VpZfjp02nQIoAvVT23z2ZdpWStDruJsP3DgOAck/
YzBWLaaHyoOrg/tzcOHkL8h5Zo0ZnMK13loDUCVEEMgFWMPsCKQDUPzlGly51CR+
yRC/QbpltSJvK1yNO8py616vLylAgx6NfaGKC+UAw1JLzc0Incbwp50ot4PlNwMr
qX1Pkcv/MPyQEGoK0AUEhXpo9xPPtOQMS8+JjmI81Pi4Ze/RB+B7L/PKwa8GbRIP
HtUc4lFjiEhHvbiFgwOQJEmku44sJyZ7aad1uoQi4amy
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:32 2026 by rpki-client