Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bDvhJ_2jh9c28cP4qTwgNeQbEIw.roa
File: bDvhJ_2jh9c28cP4qTwgNeQbEIw.roa (raw, json)
Hash identifier: V3lDdRkuH0cH06NinYxv+eY4tE9zoccZ15oeTYnZDaI=
Subject key identifier: 6C:3B:E1:27:FD:A3:87:D7:36:F1:C3:F8:A9:3C:20:35:E4:1B:10:8C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E8E313C6BE65DCFC16E9F083F890CAE99
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bDvhJ_2jh9c28cP4qTwgNeQbEIw.roa
Signing time: Wed 03 Jun 2026 15:54:11 +0000
ROA not before: Wed 03 Jun 2026 15:54:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51082
IP address blocks: 37.202.208.0/24 maxlen: 24
151.240.110.0/24 maxlen: 24
151.240.115.0/24 maxlen: 24
151.240.122.0/24 maxlen: 24
151.241.140.0/24 maxlen: 24
151.243.139.0/24 maxlen: 24
151.246.144.0/24 maxlen: 24
151.247.117.0/24 maxlen: 24
151.247.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jun 2026 07:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:31:3c:6b:e6:5d:cf:c1:6e:9f:08:3f:89:0c:ae:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 3 15:54:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c3be127fda387d736f1c3f8a93c2035e41b108c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:75:71:48:96:99:c8:1f:ed:d3:45:29:a8:d5:
89:67:5d:2a:4d:0e:f5:c9:f5:ee:54:dc:05:d2:88:
8a:af:69:cb:41:00:b8:4c:60:c2:04:81:85:07:3d:
ac:de:12:1c:85:27:c2:68:04:cb:4b:13:7f:d3:50:
20:bf:5d:56:76:77:6e:a0:ed:81:d0:58:d5:56:43:
04:c1:c5:09:54:5e:ca:f4:c5:19:4f:ce:e2:bc:b2:
1b:c7:07:1b:46:c3:69:1f:d0:e1:2e:1d:e3:7d:69:
3d:b2:b2:81:32:e5:88:a5:06:cb:92:87:9c:99:8c:
eb:d9:64:bd:15:f0:31:35:a4:19:45:ec:13:e9:0d:
c8:a1:60:8a:40:99:9b:9e:66:37:41:07:8d:bf:00:
60:46:69:bf:e0:52:00:f6:a3:e5:a7:2f:dc:52:f4:
4f:dc:d7:c2:07:5f:e4:ea:a8:07:ca:bd:64:d9:5d:
0f:83:2b:cc:c3:23:02:24:b8:cc:cb:cc:ae:1f:29:
c1:08:27:69:13:74:59:4d:ce:fa:45:98:f1:a6:8f:
f8:4c:75:a7:18:18:31:55:06:28:f1:61:93:76:84:
d3:23:77:56:ba:d9:ab:03:fc:c1:a1:98:81:0f:e3:
78:3c:4e:86:b8:82:aa:6a:4b:3f:c9:97:69:8e:1e:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3B:E1:27:FD:A3:87:D7:36:F1:C3:F8:A9:3C:20:35:E4:1B:10:8C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bDvhJ_2jh9c28cP4qTwgNeQbEIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.208.0/24
151.240.110.0/24
151.240.115.0/24
151.240.122.0/24
151.241.140.0/24
151.243.139.0/24
151.246.144.0/24
151.247.117.0/24
151.247.147.0/24
Signature Algorithm: sha256WithRSAEncryption
86:18:f1:08:bc:cb:7b:96:ee:04:19:c8:ef:92:62:93:69:e2:
0b:1d:85:ba:18:21:a4:3b:8f:ae:0f:3f:34:3e:81:a3:62:40:
60:34:ca:cf:63:b3:d2:d5:af:83:c2:76:94:4d:39:5e:65:53:
d6:dd:f1:16:40:70:b4:d2:d0:ed:7f:72:26:cf:83:c3:48:59:
d6:d5:6e:d4:8d:e4:1a:e7:08:5e:15:e9:8f:1c:8e:c8:3d:2b:
67:e3:89:d9:d5:ea:f0:21:de:ba:e5:6c:93:f9:08:26:bf:6a:
20:1b:2c:0e:a9:cd:32:48:d4:2f:3f:81:c8:e4:f2:fa:cc:5b:
3f:7c:66:16:b4:fb:d9:29:45:42:bf:08:19:04:a4:5d:65:d6:
29:5e:41:01:8c:80:90:f8:1c:af:96:be:bc:25:aa:11:f6:34:
56:eb:10:e2:c6:3e:eb:ad:8c:60:86:be:12:d1:d0:0f:b3:47:
34:f7:fa:15:fe:88:32:56:06:87:cf:44:09:9e:12:69:ad:51:
8a:77:b7:9d:55:85:89:d5:d4:f1:20:39:03:05:11:9c:60:66:
cc:f3:06:98:e2:8d:60:f7:78:e7:5a:8c:42:e1:da:a4:85:01:
ba:9e:36:6c:36:0c:35:17:84:3d:21:f9:3e:c9:ad:bc:00:14:
23:8e:b2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:05:34 2026 by rpki-client