Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/92ox7s0Wti5ISAqyYwS84AvKWsQ.roa
File: 92ox7s0Wti5ISAqyYwS84AvKWsQ.roa (raw, json)
Hash identifier: gx9wQKxvo/2ARmoiDaqFEeAsCaryfUOo+PCh55Qq5uk=
Subject key identifier: F7:6A:31:EE:CD:16:B6:2E:48:48:0A:B2:63:04:BC:E0:0B:CA:5A:C4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0E9750C5E1C42BD471862B2E29854880C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/92ox7s0Wti5ISAqyYwS84AvKWsQ.roa
Signing time: Mon 28 Sep 2026 19:19:17 +0000
ROA not before: Mon 28 Sep 2026 19:19:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 2.27.242.0/24 maxlen: 24
31.76.176.0/23 maxlen: 24
31.76.180.0/23 maxlen: 24
31.76.184.0/23 maxlen: 24
31.76.188.0/23 maxlen: 24
31.76.196.0/23 maxlen: 24
31.76.198.0/23 maxlen: 24
31.76.204.0/23 maxlen: 24
31.76.206.0/23 maxlen: 24
31.76.212.0/23 maxlen: 24
31.76.214.0/23 maxlen: 24
31.76.220.0/23 maxlen: 24
31.76.222.0/23 maxlen: 24
31.76.234.0/23 maxlen: 24
31.76.247.0/24 maxlen: 24
31.77.103.0/24 maxlen: 24
193.23.196.0/24 maxlen: 24
193.23.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Oct 2026 18:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:75:0c:5e:1c:42:bd:47:18:62:b2:e2:98:54:88:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 28 19:19:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f76a31eecd16b62e48480ab26304bce00bca5ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:b8:e5:07:b4:5e:40:e7:0c:7d:10:18:35:
73:df:40:fb:a9:b2:3b:74:be:f8:81:63:0f:cf:8a:
76:d0:7e:40:8b:85:c0:a3:f7:30:77:65:cd:ae:71:
96:c6:d7:b9:b1:0f:89:95:e1:e4:fc:4a:b8:e6:23:
de:a7:84:ee:a3:ae:26:cb:d5:58:da:cd:ad:58:ef:
15:27:2b:4a:e6:3c:67:a0:a3:d5:f3:6f:cc:15:2e:
ca:44:ae:d2:14:5e:b5:e2:41:c7:f6:6e:d2:b9:54:
c4:2a:bd:43:6c:02:82:05:00:dd:42:b4:1a:2e:38:
cc:5f:14:d4:97:c5:a0:ac:7c:24:ef:22:87:13:c3:
04:1a:68:d5:39:f9:18:5b:2e:1e:48:b4:3c:06:5b:
69:39:05:6b:a6:3f:f2:00:71:59:b8:d5:c0:60:4f:
0d:80:a6:8f:15:eb:33:85:9f:62:8f:50:aa:79:ab:
86:87:76:ae:17:cd:ef:f0:13:cc:c3:85:18:be:ec:
66:f8:90:39:76:d3:a5:40:9d:7f:79:b2:b8:ba:1c:
33:11:54:a6:87:a8:b4:a7:75:00:4f:b5:8e:4b:f5:
2a:d9:c2:a3:1a:b0:59:48:c3:bc:7e:38:62:fa:25:
31:c2:12:d6:32:a0:66:eb:5c:80:e9:8b:ad:ad:56:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6A:31:EE:CD:16:B6:2E:48:48:0A:B2:63:04:BC:E0:0B:CA:5A:C4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/92ox7s0Wti5ISAqyYwS84AvKWsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.242.0/24
31.76.176.0/23
31.76.180.0/23
31.76.184.0/23
31.76.188.0/23
31.76.196.0/22
31.76.204.0/22
31.76.212.0/22
31.76.220.0/22
31.76.234.0/23
31.76.247.0/24
31.77.103.0/24
193.23.196.0/24
193.23.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:20:cb:f3:f6:1b:8e:31:2d:35:ac:e6:ec:b7:40:76:67:e3:
97:59:1d:f9:5d:2c:c8:25:4c:87:83:7d:70:56:c8:35:5e:80:
d4:8c:1d:b3:1d:04:27:86:22:be:6c:62:7c:2c:74:29:35:bd:
9a:de:86:62:e0:5f:6f:4a:20:10:a1:e5:ec:cc:32:0d:e9:cd:
74:a4:8d:f2:56:32:f5:1a:76:36:16:ac:6f:a5:dd:b0:2a:84:
9f:6f:48:68:54:c9:95:66:7e:e5:66:e3:dd:5d:53:73:62:8e:
3d:ff:27:ff:cf:72:bb:a2:b6:3e:bc:0a:75:d9:73:a2:ea:a9:
3c:52:b5:96:38:c3:d3:76:0d:8d:58:f1:f5:0f:cb:5b:05:de:
5c:b3:46:d3:59:12:b6:c1:c6:ad:fa:e5:c0:fc:3e:f5:e1:b6:
4d:16:86:81:c7:6e:81:ec:62:35:b8:16:e4:a9:28:35:08:63:
38:45:ec:c6:d1:81:b7:65:ba:5f:97:bc:da:4f:30:49:3d:e7:
33:e3:f0:7c:79:9b:c2:c1:d8:1a:6c:20:f5:8d:3f:03:27:75:
44:90:32:dc:f3:dd:8c:95:f8:6e:70:45:c6:ed:99:9e:cd:ec:
38:45:19:42:f0:28:47:aa:ab:b4:fa:e8:8c:38:4d:b5:7b:eb:
3d:ec:d9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:57 2026 by rpki-client