Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zageB2bNFLuaVlmZ63eRXqVix_g.roa
File: zageB2bNFLuaVlmZ63eRXqVix_g.roa (raw, json)
Hash identifier: g6drKJoDGZpeqTMTc6a34oq87y7tslZ9Upa74QyKs3o=
Subject key identifier: CD:A8:1E:07:66:CD:14:BB:9A:56:59:99:EB:77:91:5E:A5:62:C7:F8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A10AEABB84CDD4B7248C2951ABAC332893
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zageB2bNFLuaVlmZ63eRXqVix_g.roa
Signing time: Mon 05 Oct 2026 07:15:17 +0000
ROA not before: Mon 05 Oct 2026 07:15:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 151.240.1.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.242.76.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
151.242.209.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
151.243.236.0/24 maxlen: 24
151.245.54.0/24 maxlen: 24
151.245.111.0/24 maxlen: 24
151.245.127.0/24 maxlen: 24
151.245.238.0/24 maxlen: 24
151.246.177.0/24 maxlen: 24
151.246.190.0/24 maxlen: 24
151.246.214.0/24 maxlen: 24
151.247.37.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Oct 2026 13:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:ea:bb:84:cd:d4:b7:24:8c:29:51:ab:ac:33:28:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 5 07:15:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cda81e0766cd14bb9a565999eb77915ea562c7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:06:4c:9f:d1:7b:24:c6:64:46:27:0c:c6:
3f:72:d0:ee:74:44:84:47:a5:10:a1:3c:92:4a:d1:
4e:76:a7:76:0d:4d:a5:d7:0c:1c:d5:71:3b:1d:23:
fb:2a:9b:24:31:fa:a6:d7:91:f8:bb:d1:7c:2e:16:
55:5a:54:ce:8b:e2:3b:2e:ba:c2:b4:9b:2f:cd:ef:
d0:db:89:8c:6d:d1:db:b3:a9:71:39:ff:49:ff:9a:
68:c5:cd:96:8f:f9:3f:85:79:fa:20:ea:06:51:1c:
dc:4b:c8:ca:ed:17:e6:ec:6d:8d:0c:a4:c4:46:d1:
6a:1f:6f:0c:3c:38:4b:5e:ec:8f:d2:1b:4f:8b:be:
f9:01:9e:06:c7:4d:b2:14:e7:5e:4e:2b:c8:ff:bb:
2f:17:06:20:6c:c0:f4:b9:59:80:32:6d:4f:bd:15:
e7:36:33:bb:ae:9c:46:ae:f8:20:88:3a:1a:5d:d2:
23:1e:d8:75:a7:50:01:d2:3b:bd:99:ef:5c:9c:08:
df:6d:2d:7c:2e:b2:d2:9f:3e:10:b0:49:8c:02:17:
98:01:bb:f9:c4:c0:fe:57:b1:85:65:11:d1:3e:9d:
00:88:fc:7f:ed:6d:0f:f1:f5:4f:53:8e:41:01:43:
8a:df:0b:45:99:58:f0:04:70:4f:71:10:f1:79:0e:
5d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A8:1E:07:66:CD:14:BB:9A:56:59:99:EB:77:91:5E:A5:62:C7:F8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zageB2bNFLuaVlmZ63eRXqVix_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.1.0/24
151.241.68.0/24
151.242.76.0/24
151.242.103.0/24
151.242.139.0/24
151.242.209.0/24
151.243.160.0/22
151.243.236.0/24
151.245.54.0/24
151.245.111.0/24
151.245.127.0/24
151.245.238.0/24
151.246.177.0/24
151.246.190.0/24
151.246.214.0/24
151.247.37.0/24
151.247.76.0/24
151.247.192.0/24
Signature Algorithm: sha256WithRSAEncryption
99:58:2a:68:d9:c6:57:54:70:10:ab:78:29:9e:85:40:cd:ca:
4d:cd:86:eb:7a:eb:b8:1a:d7:6c:42:d6:a3:45:a0:af:24:95:
d3:ac:0a:5b:bd:39:ba:14:b7:ee:df:0b:95:f4:b7:23:01:37:
5a:21:85:4e:dd:5b:d4:8f:7b:8a:a2:f3:f8:35:c3:e0:27:a0:
0e:55:c6:e0:92:d6:a9:68:ba:b1:38:0c:20:53:19:ff:39:93:
58:e5:38:ee:f9:f6:9d:9f:eb:fb:92:49:95:af:1b:8c:9e:d0:
0e:62:c4:25:a7:26:a7:01:f2:33:ed:a3:e2:5f:62:0d:5f:70:
1a:a9:28:71:4b:6d:40:37:c6:19:7e:0a:d1:85:6a:72:a0:4c:
2e:c2:61:30:b9:df:56:c3:a9:2f:5c:65:cf:db:87:57:b0:91:
2f:be:07:29:34:7b:77:9d:3c:4e:0f:45:66:1e:aa:1f:e5:5a:
f6:85:81:ae:e4:89:b7:ef:48:e6:34:b1:ba:d9:2d:44:6e:6e:
88:76:26:18:0d:91:68:b5:b1:38:43:b0:14:1d:a1:8c:20:b5:
cc:60:71:4b:27:09:e9:5c:f4:f5:a4:ed:03:72:8e:e0:3b:7a:
fe:7e:7f:ef:e8:98:cf:fe:d7:66:3e:b9:9b:13:93:91:a3:62:
6c:29:7f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:13 2026 by rpki-client