Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/crIwH1mnrSmMS0ISvRpNHqhnE4A.roa
File: crIwH1mnrSmMS0ISvRpNHqhnE4A.roa (raw, json)
Hash identifier: SiwPY6vSKpfhGJFqtTBUSbqH9AQjSqtJPBiJle5gLfc=
Subject key identifier: 72:B2:30:1F:59:A7:AD:29:8C:4B:42:12:BD:1A:4D:1E:A8:67:13:80
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FE268E2846263B5EA63D1FA36AA222DD7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/crIwH1mnrSmMS0ISvRpNHqhnE4A.roa
Signing time: Sat 08 Aug 2026 17:25:52 +0000
ROA not before: Sat 08 Aug 2026 17:25:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 151.246.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Aug 2026 16:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e2:68:e2:84:62:63:b5:ea:63:d1:fa:36:aa:22:2d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 8 17:25:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72b2301f59a7ad298c4b4212bd1a4d1ea8671380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f1:fc:29:fa:50:4e:5b:d5:2a:87:87:62:f7:
d6:e5:0f:a2:5a:29:1c:65:32:53:d2:13:7a:f6:eb:
c0:05:e9:15:d1:a4:a4:ae:ed:a4:68:50:c8:41:37:
b7:b9:cf:0b:cd:33:37:7d:32:61:02:31:e5:5a:a5:
20:23:e5:fd:d5:9b:30:38:d2:b8:66:cf:20:f8:29:
cd:17:d8:3a:9c:2d:c8:1f:76:03:5a:d1:19:24:91:
d5:6c:35:92:15:5b:70:9d:fc:97:00:bb:59:b9:9f:
eb:22:f5:b7:eb:30:7e:b6:39:9f:c9:a3:62:cf:94:
b8:2b:3c:b3:29:01:17:f6:0a:59:d7:1b:c9:c0:0f:
a1:cf:de:e6:39:e0:b6:ee:3e:d6:ab:e7:ef:38:a2:
94:f4:16:19:84:79:4a:31:62:93:47:91:81:f5:f9:
78:82:c3:bb:c6:90:4c:6d:be:82:88:32:67:27:ea:
50:fa:ae:14:63:1f:04:3f:43:8a:18:a6:d3:7a:b6:
54:12:90:cb:74:64:61:80:33:fc:64:9f:ff:a8:ca:
30:5a:30:4f:8e:d7:3f:0b:0d:bb:d8:8b:67:8d:32:
a3:e9:41:61:45:8a:25:ad:6d:05:02:b4:df:c9:da:
2b:15:c7:10:3d:02:39:0b:e9:47:78:5b:f2:cc:0b:
fc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B2:30:1F:59:A7:AD:29:8C:4B:42:12:BD:1A:4D:1E:A8:67:13:80
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/crIwH1mnrSmMS0ISvRpNHqhnE4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.131.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f4:02:2c:1c:89:dc:aa:ab:2b:d3:bd:7f:6f:92:19:39:90:
01:bc:11:14:3e:b1:dd:88:80:bd:ef:3b:d8:e5:0d:1b:74:c1:
51:7a:c6:6f:4d:bf:46:a5:3c:ab:50:74:84:47:28:30:f9:75:
50:35:4d:6f:23:08:da:cf:7e:05:f6:36:8a:0b:0c:97:be:57:
86:e8:f9:82:17:20:76:15:60:9d:02:b6:e5:62:3e:4e:37:ee:
49:cd:06:f5:de:7b:e3:3d:b6:2d:7d:47:9e:bd:6b:ba:82:94:
58:50:c8:5a:4e:7c:91:75:47:5a:0f:84:f6:ac:db:7c:34:16:
c2:f7:8c:1f:25:37:dc:98:75:e4:d9:26:2e:26:85:b0:67:ce:
2d:69:2b:b0:32:fe:af:20:9c:11:41:a3:c4:57:4c:00:ca:55:
a7:e8:bf:b3:b8:15:5f:f9:5a:16:c6:6f:d0:91:c2:2c:76:7c:
25:f2:b6:7c:9c:9b:8c:96:d7:28:ed:47:1a:b8:5f:0c:83:56:
16:6f:dd:11:e8:04:75:26:a5:f7:89:7b:2c:35:52:f4:f1:ab:
88:d4:e2:10:cd:52:45:68:bc:6e:35:2c:ed:ed:9a:4d:59:e1:
cb:57:50:aa:bf:9f:b5:3d:9b:56:fa:85:63:dc:40:7d:13:5a:
15:b4:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:55:28 2026 by rpki-client