Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-o8z7y-KAyGkUQpmtMN3t9EUQmI.roa
File: 1-o8z7y-KAyGkUQpmtMN3t9EUQmI.roa (raw, json)
Hash identifier: S22a6W8KHZBWVACKUK1vwSAau3qZb5NlnlgpYoeyr+o=
Subject key identifier: FA:8F:33:EF:2F:8A:03:21:A4:51:0A:66:B4:C3:77:B7:D1:14:42:62
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A08D25A1A6A3BCB16AA0513D736D7278B3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-o8z7y-KAyGkUQpmtMN3t9EUQmI.roa
Signing time: Thu 10 Sep 2026 21:07:28 +0000
ROA not before: Thu 10 Sep 2026 21:07:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207957
IP address blocks: 2.26.8.0/24 maxlen: 24
2.26.9.0/24 maxlen: 24
2.26.10.0/24 maxlen: 24
2.26.11.0/24 maxlen: 24
2.26.88.0/24 maxlen: 24
2.26.89.0/24 maxlen: 24
2.26.90.0/24 maxlen: 24
2.26.91.0/24 maxlen: 24
2.26.92.0/24 maxlen: 24
2.26.93.0/24 maxlen: 24
2.26.146.0/24 maxlen: 24
2.26.166.0/24 maxlen: 24
2.27.208.0/24 maxlen: 24
2.27.209.0/24 maxlen: 24
2.27.210.0/24 maxlen: 24
2.27.211.0/24 maxlen: 24
13.143.137.0/24 maxlen: 24
13.143.180.0/22 maxlen: 24
13.143.188.0/22 maxlen: 24
13.143.196.0/22 maxlen: 24
31.76.0.0/24 maxlen: 24
31.76.1.0/24 maxlen: 24
31.76.2.0/24 maxlen: 24
31.76.3.0/24 maxlen: 24
31.76.4.0/24 maxlen: 24
31.76.5.0/24 maxlen: 24
31.76.6.0/24 maxlen: 24
31.76.7.0/24 maxlen: 24
31.76.52.0/24 maxlen: 24
31.76.53.0/24 maxlen: 24
31.76.54.0/24 maxlen: 24
31.76.55.0/24 maxlen: 24
31.76.60.0/24 maxlen: 24
31.76.61.0/24 maxlen: 24
31.76.62.0/24 maxlen: 24
31.76.63.0/24 maxlen: 24
31.76.64.0/24 maxlen: 24
31.76.65.0/24 maxlen: 24
31.76.66.0/24 maxlen: 24
31.76.68.0/24 maxlen: 24
31.76.69.0/24 maxlen: 24
31.76.70.0/24 maxlen: 24
31.76.71.0/24 maxlen: 24
31.76.82.0/24 maxlen: 24
31.76.83.0/24 maxlen: 24
31.76.84.0/24 maxlen: 24
31.76.85.0/24 maxlen: 24
31.76.114.0/24 maxlen: 24
31.76.115.0/24 maxlen: 24
31.77.140.0/24 maxlen: 24
31.77.141.0/24 maxlen: 24
31.77.142.0/24 maxlen: 24
31.77.143.0/24 maxlen: 24
64.188.89.0/24 maxlen: 24
64.188.90.0/24 maxlen: 24
64.188.98.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
77.239.107.0/24 maxlen: 24
144.31.15.0/24 maxlen: 24
144.31.49.0/24 maxlen: 24
144.31.50.0/24 maxlen: 24
144.31.51.0/24 maxlen: 24
144.31.57.0/24 maxlen: 24
144.31.82.0/24 maxlen: 24
144.31.83.0/24 maxlen: 24
144.31.93.0/24 maxlen: 24
144.31.103.0/24 maxlen: 24
144.31.107.0/24 maxlen: 24
144.31.108.0/24 maxlen: 24
144.31.109.0/24 maxlen: 24
144.31.213.0/24 maxlen: 24
144.31.214.0/24 maxlen: 24
144.31.216.0/24 maxlen: 24
144.31.217.0/24 maxlen: 24
144.31.218.0/24 maxlen: 24
144.31.219.0/24 maxlen: 24
144.31.239.0/24 maxlen: 24
144.31.240.0/24 maxlen: 24
144.31.241.0/24 maxlen: 24
144.31.242.0/24 maxlen: 24
144.31.243.0/24 maxlen: 24
144.31.249.0/24 maxlen: 24
150.241.72.0/24 maxlen: 24
150.241.73.0/24 maxlen: 24
150.241.74.0/24 maxlen: 24
150.241.75.0/24 maxlen: 24
150.241.82.0/24 maxlen: 24
150.241.83.0/24 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
179.254.86.0/24 maxlen: 24
185.170.153.0/24 maxlen: 24
185.170.154.0/24 maxlen: 24
193.23.195.0/24 maxlen: 24
193.23.200.0/24 maxlen: 24
193.23.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Sep 2026 21:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:25:a1:a6:a3:bc:b1:6a:a0:51:3d:73:6d:72:78:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 10 21:07:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa8f33ef2f8a0321a4510a66b4c377b7d1144262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:c8:c8:d7:35:d8:b0:bc:14:f9:a0:31:70:
46:5f:eb:89:cf:34:8e:29:34:48:d8:4d:01:b8:b5:
77:83:0b:89:da:b6:2f:18:d5:cb:9e:82:9b:ee:ea:
8f:a6:0d:b3:9b:b8:a6:49:39:24:90:7c:a3:57:ff:
54:de:fa:28:95:40:6d:0e:e0:5c:e8:ec:42:62:91:
23:aa:94:20:84:14:c0:2d:ff:69:82:10:df:46:65:
95:8b:46:b4:f6:f0:9b:39:fa:64:fa:04:c7:b7:c8:
21:12:51:09:53:17:fb:80:94:10:0b:f3:64:78:d6:
88:be:b5:34:ba:3f:63:3a:21:53:af:05:dc:49:f9:
e9:bd:0e:9a:a5:60:4e:20:f3:b8:73:d9:7b:e5:09:
cd:eb:c5:36:75:e0:05:9c:43:ce:d6:df:f1:54:bb:
e6:1f:60:0b:c6:4d:89:b9:22:7a:78:08:91:40:b9:
3e:1d:dd:a9:a0:e9:ee:37:79:0f:1a:6c:c0:f8:5d:
ee:88:f7:43:39:b5:4e:64:0a:0d:fa:a1:c6:00:05:
bc:fd:8f:32:53:0d:52:ad:c4:d4:ae:7b:00:0f:8c:
fc:bb:54:81:c1:aa:90:90:0b:98:2a:fe:2a:23:bc:
22:d0:22:93:ae:30:a5:3f:16:70:54:ff:5b:69:f5:
39:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8F:33:EF:2F:8A:03:21:A4:51:0A:66:B4:C3:77:B7:D1:14:42:62
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-o8z7y-KAyGkUQpmtMN3t9EUQmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.8.0/22
2.26.88.0-2.26.93.255
2.26.146.0/24
2.26.166.0/24
2.27.208.0/22
13.143.137.0/24
13.143.180.0/22
13.143.188.0/22
13.143.196.0/22
31.76.0.0/21
31.76.52.0/22
31.76.60.0-31.76.66.255
31.76.68.0/22
31.76.82.0-31.76.85.255
31.76.114.0/23
31.77.140.0/22
64.188.89.0-64.188.90.255
64.188.98.0/24
64.188.127.0/24
77.239.107.0/24
144.31.15.0/24
144.31.49.0-144.31.51.255
144.31.57.0/24
144.31.82.0/23
144.31.93.0/24
144.31.103.0/24
144.31.107.0-144.31.109.255
144.31.213.0-144.31.214.255
144.31.216.0/22
144.31.239.0-144.31.243.255
144.31.249.0/24
150.241.72.0/22
150.241.82.0/23
150.241.100.0/22
179.254.86.0/24
185.170.153.0-185.170.154.255
193.23.195.0/24
193.23.200.0/24
193.23.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ba:53:97:0d:37:37:3c:0a:aa:47:57:dd:20:8a:a1:78:d9:
dc:37:ed:8b:94:2a:43:6c:55:70:2a:2a:a0:19:db:f5:8f:2c:
af:6b:58:45:3b:27:09:b0:0d:e6:93:f6:ba:53:f6:ff:b2:74:
0b:0f:1a:e8:fa:72:0f:85:16:4a:1f:08:ea:60:42:6f:46:60:
4a:d4:c7:80:d6:cc:f8:92:89:ec:34:ff:08:d2:df:d0:76:c9:
a3:c1:a5:f0:8b:d4:b4:f7:0e:4f:d4:a5:4d:cb:91:f7:1c:17:
2a:04:1b:12:29:36:9d:2c:b2:95:94:59:07:cd:47:5d:b2:be:
0c:79:29:19:67:60:62:39:c5:2a:75:03:31:af:44:58:7a:48:
54:5e:7f:8b:d0:13:46:c1:16:62:90:05:90:a2:9b:86:a4:fb:
0d:bb:03:ae:a4:98:b0:ae:1d:e4:ec:4a:af:6e:b9:67:e6:54:
a0:11:1b:ca:87:c6:e8:78:60:99:74:58:d6:b5:70:71:82:2a:
7c:21:a9:e1:58:48:cf:1b:86:49:02:83:97:a0:a3:f5:50:8c:
92:44:92:ca:94:b5:6e:7b:a8:d5:be:d2:29:5b:bf:7c:f1:be:
c7:0d:00:5d:4d:93:38:cb:b4:cd:74:6c:b4:5d:96:8f:69:9e:
52:47:29:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:43:52 2026 by rpki-client