Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z0w0quXagTPQa8wE8BhKX3aConI.roa
File: z0w0quXagTPQa8wE8BhKX3aConI.roa (raw, json)
Hash identifier: +pHgSouSOuu8dXMUGcfc/j+0BmhCwR5eIOMayDfpBdo=
Subject key identifier: CF:4C:34:AA:E5:DA:81:33:D0:6B:CC:04:F0:18:4A:5F:76:82:A2:72
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FE056CEC45363D5C5D2D3D857F1795EF7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z0w0quXagTPQa8wE8BhKX3aConI.roa
Signing time: Sat 08 Aug 2026 07:46:53 +0000
ROA not before: Sat 08 Aug 2026 07:46:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
151.240.146.0/23 maxlen: 24
151.240.148.0/23 maxlen: 24
151.240.227.0/24 maxlen: 24
151.241.207.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.152.0/24 maxlen: 24
151.243.154.0/24 maxlen: 24
151.243.195.0/24 maxlen: 24
151.243.197.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.231.0/24 maxlen: 24
151.244.54.0/24 maxlen: 24
151.244.167.0/24 maxlen: 24
151.244.180.0/24 maxlen: 24
151.244.222.0/24 maxlen: 24
151.244.224.0/24 maxlen: 24
151.244.235.0/24 maxlen: 24
151.246.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Aug 2026 07:38:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:56:ce:c4:53:63:d5:c5:d2:d3:d8:57:f1:79:5e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 8 07:46:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf4c34aae5da8133d06bcc04f0184a5f7682a272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:d5:18:f5:a6:d7:b8:c9:d7:db:7f:93:6b:
3d:dd:1e:ac:ac:7b:fc:b7:46:30:c9:c4:5c:da:07:
17:17:3e:e3:f3:1a:70:d7:a1:24:bf:e2:a4:d9:04:
5d:9d:b1:d4:cd:23:57:31:0a:1b:44:7d:48:7d:28:
a0:ae:03:e2:f0:07:ca:db:06:46:94:1d:00:03:87:
e0:a6:f3:0d:f1:a9:56:a7:44:60:ed:89:af:10:5f:
96:89:74:6c:16:a7:d1:05:dc:79:4b:0e:97:e7:e6:
3f:9e:3b:36:da:6d:38:0b:ec:81:26:1f:75:33:f8:
8f:68:1d:29:e5:f6:b9:94:5a:a1:61:35:0e:22:2f:
25:08:d3:b5:45:31:30:8c:96:26:56:6c:74:f0:d9:
b0:80:52:8a:fe:38:c9:f1:71:db:f1:7e:4c:d2:ff:
ff:73:0e:dc:0f:27:46:e8:a5:ea:10:c3:6e:0d:b3:
6a:1f:2b:5b:01:ab:67:01:82:1e:bb:7b:12:62:78:
fd:00:c5:51:7a:68:58:57:50:6d:c3:ab:c0:be:92:
71:1a:ce:25:80:8e:c0:d9:52:2d:06:18:34:54:db:
2a:80:ea:21:d2:f7:0f:c6:16:66:90:14:25:c9:9c:
76:f6:79:4b:11:41:60:10:38:61:b9:b7:95:e5:3d:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4C:34:AA:E5:DA:81:33:D0:6B:CC:04:F0:18:4A:5F:76:82:A2:72
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z0w0quXagTPQa8wE8BhKX3aConI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
151.240.146.0-151.240.149.255
151.240.227.0/24
151.241.207.0/24
151.243.7.0/24
151.243.152.0/24
151.243.154.0/24
151.243.195.0/24
151.243.197.0/24
151.243.228.0/24
151.243.231.0/24
151.244.54.0/24
151.244.167.0/24
151.244.180.0/24
151.244.222.0/24
151.244.224.0/24
151.244.235.0/24
151.246.161.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:7c:6d:3b:21:65:8c:b9:49:75:51:e8:11:ae:e6:83:9d:2f:
86:9e:83:9a:62:e9:6d:fc:a3:26:85:74:2c:48:67:c9:3f:d8:
3c:48:33:f1:65:a0:ee:28:f3:ec:71:ec:b7:bb:a9:dd:60:06:
59:9f:1f:63:f5:10:ac:2c:a5:bc:57:43:e4:89:cd:e1:b9:22:
ec:37:13:e5:a1:f1:f2:3f:9d:cf:b6:0d:66:d6:8d:3b:08:12:
a3:41:9c:5a:b7:48:39:65:07:79:e3:23:14:1e:e3:6a:bc:d0:
26:c7:d4:d6:73:8d:85:c5:83:05:a3:74:66:12:8a:ba:67:a1:
60:0a:00:f1:df:77:27:4d:92:3c:5a:9a:e5:e6:4f:19:67:9e:
c5:cb:a6:da:dc:93:1b:3a:b9:c4:ac:a3:03:f3:9a:23:ae:26:
31:83:4a:6c:05:f0:b4:f8:be:32:0a:24:59:26:4a:a1:1d:50:
e3:c9:9b:ce:79:fb:27:a4:a2:12:9e:eb:46:a0:93:e0:b1:87:
08:1c:b2:74:ed:af:94:91:de:19:a5:4a:45:2c:63:0a:27:e6:
9e:26:04:c1:c6:f5:13:48:b6:f2:8b:b6:d3:3c:8f:ff:a7:d2:
3f:3a:c4:ef:73:a0:54:7c:7d:04:12:f3:83:fc:45:7b:19:76:
ee:39:bc:10
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAZ/gVs7EU2PVxdLT2FfxeV73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwODA4MDc0NjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjRjMzRhYWU1ZGE4MTMzZDA2YmNjMDRmMDE4NGE1Zjc2ODJhMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaXVGPWm17jJ19t/k2s93R6srHv8
t0YwycRc2gcXFz7j8xpw16Ekv+Kk2QRdnbHUzSNXMQobRH1IfSigrgPi8AfK2wZG
lB0AA4fgpvMN8alWp0Rg7YmvEF+WiXRsFqfRBdx5Sw6X5+Y/njs22m04C+yBJh91
M/iPaB0p5fa5lFqhYTUOIi8lCNO1RTEwjJYmVmx08NmwgFKK/jjJ8XHb8X5M0v//
cw7cDydG6KXqEMNuDbNqHytbAatnAYIeu3sSYnj9AMVRemhYV1Btw6vAvpJxGs4l
gI7A2VItBhg0VNsqgOoh0vcPxhZmkBQlyZx29nlLEUFgEDhhubeV5T3tIwIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFM9MNKrl2oEz0GvMBPAYSl92gqJyMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvejB3MHF1WGFnVFBRYTh3RThCaEtYM2FDb25JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEACXKwjAM
AwQBl/CSAwQBl/CUAwQAl/DjAwQAl/HPAwQAl/MHAwQAl/OYAwQAl/OaAwQAl/PD
AwQAl/PFAwQAl/PkAwQAl/PnAwQAl/Q2AwQAl/SnAwQAl/S0AwQAl/TeAwQAl/Tg
AwQAl/TrAwQAl/ahMA0GCSqGSIb3DQEBCwUAA4IBAQCefG07IWWMuUl1UegRruaD
nS+GnoOaYult/KMmhXQsSGfJP9g8SDPxZaDuKPPscey3u6ndYAZZnx9j9RCsLKW8
V0Pkic3huSLsNxPlofHyP53Ptg1m1o07CBKjQZxat0g5ZQd54yMUHuNqvNAmx9TW
c42FxYMFo3RmEoq6Z6FgCgDx33cnTZI8Wprl5k8ZZ57Fy6ba3JMbOrnErKMD85oj
riYxg0psBfC0+L4yCiRZJkqhHVDjyZvOefsnpKISnutGoJPgsYcIHLJ07a+Ukd4Z
pUpFLGMKJ+aeJgTBxvUTSLbyi7bTPI//p9I/OsTvc6BUfH0EEvOD/EV7GXbuObwQ
-----END CERTIFICATE-----
Generated at Mon Aug 24 02:37:52 2026 by rpki-client