Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LjI2BNDhDvGDRUjFsAgaqcV8oIs.roa
File: LjI2BNDhDvGDRUjFsAgaqcV8oIs.roa (raw, json)
Hash identifier: FnaN2vFolr5N3f9w/K/Ci9TcJU+mwvFUx2TZErw/RYg=
Subject key identifier: 2E:32:36:04:D0:E1:0E:F1:83:45:48:C5:B0:08:1A:A9:C5:7C:A0:8B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CDB95C94B5A9DB2B63F6A54056FED2EC8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LjI2BNDhDvGDRUjFsAgaqcV8oIs.roa
Signing time: Wed 11 Mar 2026 06:29:12 +0000
ROA not before: Wed 11 Mar 2026 06:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 151.243.162.0/24 maxlen: 24
151.245.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Mar 2026 12:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:95:c9:4b:5a:9d:b2:b6:3f:6a:54:05:6f:ed:2e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 11 06:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e323604d0e10ef1834548c5b0081aa9c57ca08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:8d:23:1e:46:94:46:86:d8:c7:70:41:be:
0e:ea:72:bb:5a:c2:63:15:4a:87:15:8f:7d:49:4a:
64:40:89:c8:36:0e:6b:eb:f4:12:0c:b4:c2:36:32:
bd:6e:e1:d5:97:19:56:11:b3:3b:43:1e:f3:26:78:
14:eb:d5:c1:27:de:9b:cf:89:b3:d2:f6:25:5c:6d:
c6:b3:a3:38:bc:48:26:85:66:e7:c1:a6:6e:91:50:
43:30:c2:08:32:63:09:96:a3:2f:4b:89:df:68:2d:
22:54:4d:2a:be:d5:f3:62:e1:66:ba:c5:a7:11:66:
7d:56:9e:d3:46:d1:d4:ba:2b:3d:0d:50:d8:68:50:
bf:18:7f:ab:d8:01:fe:5b:6d:14:fb:64:36:61:da:
c8:7a:ec:03:89:6a:3b:5f:1a:19:12:75:9e:15:c1:
de:54:8e:c2:fd:32:a4:49:38:8d:3c:e8:e6:99:e0:
2a:85:4b:44:63:bd:84:27:61:70:bc:28:71:aa:76:
51:f5:44:05:78:a2:60:5c:5d:d3:7d:ae:19:ec:3f:
70:05:77:6e:85:01:a1:55:09:e3:66:44:79:83:93:
24:52:57:b7:ac:86:cf:ce:19:9f:40:82:e5:09:25:
98:6a:58:27:ee:12:a5:31:13:0b:2e:a3:4b:e7:e6:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:32:36:04:D0:E1:0E:F1:83:45:48:C5:B0:08:1A:A9:C5:7C:A0:8B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LjI2BNDhDvGDRUjFsAgaqcV8oIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.162.0/24
151.245.32.0/24
Signature Algorithm: sha256WithRSAEncryption
15:6a:b6:93:70:4c:53:0a:ee:36:be:95:49:12:52:3b:11:85:
f9:85:97:cc:45:8d:6b:0a:b0:d8:ff:c4:f7:b2:c4:3b:38:b1:
d0:d0:d8:11:c8:b7:5e:4a:2e:be:d0:79:a2:60:2a:40:d7:e9:
cc:db:e6:06:c5:79:c9:0c:64:53:7a:50:e6:9a:ae:72:90:ef:
42:ec:f7:14:54:d6:c9:11:16:09:31:41:cd:8d:3b:7e:ac:4f:
30:09:41:ec:9f:97:35:80:c1:fa:f8:cf:a5:21:0d:bc:05:e5:
a6:2a:de:21:eb:09:6b:5f:00:8b:39:40:4f:d4:eb:1d:71:30:
80:96:45:7f:98:28:48:76:62:cb:83:fd:e5:e6:2b:74:1e:c6:
aa:55:30:48:51:29:cd:f5:32:d0:af:25:69:a7:5b:63:dd:4b:
79:ff:1a:a1:a6:c0:8b:f6:ad:26:f3:93:ea:3f:1f:70:f6:40:
d2:f5:ad:ae:7c:af:2c:7d:49:3e:e9:78:dc:bf:57:93:2b:d4:
9f:37:b6:22:c9:00:36:f1:bb:68:7f:a3:4a:9f:2b:b0:b0:89:
e2:52:49:58:75:1a:f2:6c:78:8e:9d:39:98:ef:c8:92:c5:19:
20:6a:cf:e9:19:cf:5e:22:e4:ec:93:1c:cd:33:7b:5b:e3:80:
37:45:fa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:09:54 2026 by rpki-client