Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1taoOG_jlvWcyRFF1QOZAPKTPQI.roa
File: 1taoOG_jlvWcyRFF1QOZAPKTPQI.roa (raw, json)
Hash identifier: 51ZY5sbO8Ld6jVo9gGvBCwX+KOcetcsJOf4cZ3WLUAU=
Subject key identifier: D6:D6:A8:38:6F:E3:96:F5:9C:C9:11:45:D5:03:99:00:F2:93:3D:02
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A022425A7533A4EA432F84E345F68AF760
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1taoOG_jlvWcyRFF1QOZAPKTPQI.roa
Signing time: Fri 21 Aug 2026 02:59:28 +0000
ROA not before: Fri 21 Aug 2026 02:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197462
IP address blocks: 31.76.33.0/24 maxlen: 24
31.76.35.0/24 maxlen: 24
31.76.112.0/24 maxlen: 24
31.76.116.0/24 maxlen: 24
31.77.239.0/24 maxlen: 24
177.1.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Sep 2026 18:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:22:42:5a:75:33:a4:ea:43:2f:84:e3:45:f6:8a:f7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 21 02:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6d6a8386fe396f59cc91145d5039900f2933d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2c:6a:d8:24:31:0b:a3:94:b5:bf:7b:05:c4:
af:98:b3:5f:ab:39:69:91:45:8e:31:a1:d4:6e:89:
05:1c:3c:c2:e1:3c:56:8a:b4:99:46:af:6c:60:a5:
a3:69:f3:1f:89:1b:c9:44:82:9b:ab:cf:bd:f9:79:
a1:d5:f9:01:c2:c8:df:6f:b5:b5:fe:36:84:72:7d:
16:d6:b5:62:df:68:a3:8a:c1:ac:ff:00:cd:cd:3d:
0c:97:b8:3d:b4:23:aa:28:19:d4:df:e8:35:65:43:
55:1d:c6:3e:a3:de:c5:76:5e:5b:f2:d1:8f:21:4e:
7a:5f:20:9c:50:fc:c4:94:51:c2:70:6b:fe:93:16:
6b:18:12:a4:7c:86:f3:45:d3:68:36:0e:26:7f:97:
36:da:d9:18:b1:1c:03:28:06:96:97:db:d2:2b:bf:
6d:01:77:23:03:f2:65:a1:24:ed:93:5f:a9:a7:b3:
04:b6:b1:da:c7:3c:88:75:be:31:90:0d:9b:49:46:
71:b4:18:d4:41:19:e8:5b:2c:7b:9d:bb:b9:d0:41:
89:97:8f:fd:69:9d:61:e5:32:7b:2d:dc:f0:63:a3:
7e:1b:e4:92:19:66:ae:e1:e5:7b:46:6c:c9:a5:f0:
f7:44:38:18:d1:78:14:b3:20:08:46:79:fc:8f:df:
4f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D6:A8:38:6F:E3:96:F5:9C:C9:11:45:D5:03:99:00:F2:93:3D:02
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1taoOG_jlvWcyRFF1QOZAPKTPQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.33.0/24
31.76.35.0/24
31.76.112.0/24
31.76.116.0/24
31.77.239.0/24
177.1.192.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fb:06:7d:9b:7e:09:7a:55:04:de:f5:06:36:62:d6:43:64:
a7:10:fb:91:4a:63:25:de:6d:e3:c9:21:c8:f9:a3:54:d4:11:
66:98:3b:48:30:39:e4:19:96:f4:60:53:04:53:51:70:e6:34:
f3:dc:3c:be:6e:2c:3f:9c:39:18:9f:e0:02:2c:93:54:7c:1c:
e9:8e:4c:70:af:a6:7b:6f:bb:92:53:a4:f7:ae:26:ea:81:e4:
13:ca:48:62:1c:d1:7e:ef:5b:f3:28:ca:47:4f:e9:34:be:79:
8e:8d:52:53:c2:f4:51:42:3b:67:94:5c:c5:ba:85:19:98:89:
05:92:a3:34:fc:f0:07:f9:f0:65:90:e4:4c:b1:ef:9e:df:52:
cc:46:2f:ee:07:ca:e2:40:9d:15:38:14:df:8f:1f:52:64:cc:
be:80:b5:52:78:a1:2b:ae:1e:0e:7f:75:67:74:fc:dc:c4:2c:
ce:f1:08:c8:7a:2f:51:bf:46:75:11:67:8d:cc:64:90:5c:9f:
13:7e:23:88:c2:f1:7f:76:b3:21:d4:a2:89:18:28:55:da:db:
81:da:bb:ae:6a:97:ec:8e:57:92:c0:49:da:05:1f:47:32:27:
9a:2e:0b:bd:6c:72:2b:8c:88:0a:1d:e6:11:de:70:80:c4:7b:
29:e2:bf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:29:40 2026 by rpki-client