Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/HPdScAHXl4qA0CGBP-BW9ZHIia0.roa
File: HPdScAHXl4qA0CGBP-BW9ZHIia0.roa (raw, json)
Hash identifier: WyRM/lWkjCQiJ4qNEVnwWUDvTG6piJc0pMseFVPp9E8=
Subject key identifier: 1C:F7:52:70:01:D7:97:8A:80:D0:21:81:3F:E0:56:F5:91:C8:89:AD
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 019FF4C09B234A1735BB766C14570C44AF13
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/HPdScAHXl4qA0CGBP-BW9ZHIia0.roa
Signing time: Wed 12 Aug 2026 06:54:51 +0000
ROA not before: Wed 12 Aug 2026 06:54:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 141.0.187.0/24 maxlen: 24
193.19.76.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 18 Aug 2026 15:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:c0:9b:23:4a:17:35:bb:76:6c:14:57:0c:44:af:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Aug 12 06:54:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cf7527001d7978a80d021813fe056f591c889ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:82:e8:dd:94:50:a0:b5:55:9e:05:7d:24:
8d:e7:80:39:c4:27:3d:d2:3d:31:c5:a2:66:00:3b:
7e:d8:34:db:10:58:f0:2e:d7:30:80:3b:28:09:9b:
0c:0e:61:5f:9c:55:11:15:54:30:06:94:9b:6b:7e:
c8:30:7b:53:a2:88:e9:5a:a3:49:4f:df:4a:a4:88:
14:52:7a:8d:2b:59:79:94:3f:1a:f5:57:84:bb:de:
be:7d:c1:a8:4c:fd:86:aa:52:b4:33:d5:e7:ab:52:
83:dd:cb:f3:0a:e5:8e:31:59:d6:2e:44:26:08:13:
de:7b:75:c8:9a:17:a0:9a:4e:e0:4a:ce:3b:c8:e5:
7d:2e:e0:aa:c5:cf:63:af:c7:89:44:89:e4:cd:60:
ca:7b:3b:38:bc:75:61:e0:c0:18:33:e3:a4:05:9b:
fc:5d:8b:77:cb:e0:33:da:d8:15:2d:48:e9:e2:da:
81:62:93:76:57:4b:08:87:6c:38:28:41:06:97:0e:
a1:a9:77:a7:7d:40:fe:6a:80:25:d8:55:87:57:7a:
5a:30:8c:9f:90:6c:61:c7:84:bc:5c:10:d5:da:22:
ee:bf:fa:a1:4e:9b:b8:ef:79:fc:97:ea:73:ec:0b:
21:d9:f6:6f:47:82:55:60:98:d7:a3:6b:d8:86:a9:
57:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F7:52:70:01:D7:97:8A:80:D0:21:81:3F:E0:56:F5:91:C8:89:AD
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/HPdScAHXl4qA0CGBP-BW9ZHIia0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.187.0/24
193.19.76.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:d1:ac:1c:20:4d:f3:db:36:77:70:38:e2:89:c2:65:52:86:
fa:6d:3e:ed:65:e1:e0:cf:b6:10:af:61:c1:7e:31:b2:08:06:
57:0d:69:e2:7c:bc:1e:8b:7c:6f:39:3d:65:f2:69:63:05:c8:
da:b6:9c:05:e6:a2:0e:50:f6:ab:a6:02:32:10:ae:ca:db:9a:
92:ed:89:fe:37:35:7b:8a:81:43:e9:02:8c:0f:e5:57:79:4d:
c2:82:47:4c:a8:37:ac:3a:cc:c6:86:35:f9:d0:b6:c9:a5:5a:
f9:8d:6c:80:a5:b8:c7:ce:d9:34:5a:e9:6b:e2:4c:1b:89:ba:
e4:3a:48:5d:5c:24:3c:91:31:33:42:84:e9:b9:89:44:78:6b:
ac:17:22:dd:54:dc:a8:c4:3c:82:f9:b7:03:a8:2a:b7:b0:8b:
77:57:aa:66:72:14:18:85:0c:4e:a7:08:ca:22:32:70:87:a1:
03:cc:47:60:98:7b:7d:9d:b9:00:26:41:d5:71:d9:c5:8a:c1:
df:98:15:38:59:08:28:4b:cc:8b:e1:0b:b5:6f:60:37:8b:45:
2b:3c:2c:e5:19:4e:f2:0f:4f:5e:fe:84:4b:9c:8d:a6:61:2e:
94:0f:74:40:ae:ee:94:87:92:d8:c3:02:93:b6:ab:f2:b5:0b:
89:f3:8e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:36:29 2026 by rpki-client