Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/680nT0ZBUtvpPQ5-4m4aoRW-2U0.roa
File: 680nT0ZBUtvpPQ5-4m4aoRW-2U0.roa (raw, json)
Hash identifier: ICvwBtlqlizULeyX0cLm4rsX1kTINdG3YW8MDHR/Q2Y=
Subject key identifier: EB:CD:27:4F:46:41:52:DB:E9:3D:0E:7E:E2:6E:1A:A1:15:BE:D9:4D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A15F915B89B5B20C72C9E59CEEA960AE76
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/680nT0ZBUtvpPQ5-4m4aoRW-2U0.roa
Signing time: Wed 21 Oct 2026 17:45:24 +0000
ROA not before: Wed 21 Oct 2026 17:45:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197256
IP address blocks: 177.3.199.0/24 maxlen: 24
179.236.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Oct 2026 16:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:91:5b:89:b5:b2:0c:72:c9:e5:9c:ee:a9:60:ae:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 21 17:45:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebcd274f464152dbe93d0e7ee26e1aa115bed94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:0e:f9:cd:ce:87:51:a1:a0:82:d5:da:36:
7a:f6:1d:3a:1c:53:72:f5:17:48:47:76:8f:cd:7c:
84:1f:c7:b2:d5:0c:83:f5:ee:0d:d2:97:ae:dd:8b:
cb:c7:f3:af:08:ac:22:02:e3:e4:ec:03:29:64:3f:
d8:08:34:2d:f3:d5:8c:fd:14:45:14:8b:e2:4c:95:
1a:7a:fc:09:58:dc:e1:8c:ab:10:56:0a:ff:79:1b:
88:65:ae:7a:d5:b4:e5:c5:c3:e3:20:72:cb:37:72:
34:ca:7b:fd:9f:5b:46:3a:05:c8:9e:18:2d:75:57:
20:be:4c:47:6e:88:72:40:cf:55:39:9f:06:f3:d9:
78:55:99:51:21:5a:9d:20:a2:53:2c:1e:1d:14:16:
18:b0:5f:b9:dc:32:8d:c0:15:52:9b:17:20:b4:2f:
e1:42:d8:18:6f:b5:c2:77:29:e4:92:f6:fb:35:54:
a3:a1:09:c5:82:b2:a1:61:be:91:84:3f:a4:0b:5e:
b4:5d:8c:6b:e3:75:3c:a2:28:a8:64:87:04:eb:8d:
b9:82:3b:59:5c:e2:d1:65:8d:ba:65:85:72:3f:90:
8b:19:12:81:85:24:87:d1:ed:fa:b0:7c:9d:48:c4:
99:c8:58:b1:74:85:2b:b8:1a:38:7a:a3:95:bf:de:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CD:27:4F:46:41:52:DB:E9:3D:0E:7E:E2:6E:1A:A1:15:BE:D9:4D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/680nT0ZBUtvpPQ5-4m4aoRW-2U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.3.199.0/24
179.236.130.0/24
Signature Algorithm: sha256WithRSAEncryption
19:00:67:61:c7:0e:11:4b:8c:f6:4d:2a:15:05:28:8b:66:2e:
cc:7a:07:61:b0:70:5e:74:c7:d4:e1:a7:06:8e:55:03:11:ef:
64:fc:56:d7:2b:9d:b7:d6:30:ab:0f:2e:a1:8d:aa:7f:1a:fa:
5c:99:02:7a:f9:63:bb:2e:c4:70:60:0e:f5:04:c7:6d:58:21:
21:dd:7b:e7:f8:23:44:7c:db:16:43:19:7d:02:30:8f:16:37:
d2:a3:79:e3:44:aa:fc:ed:df:7b:13:24:1f:46:ee:13:51:51:
10:c2:3e:a9:f9:02:e1:a5:04:fb:51:91:bf:ac:b2:99:52:85:
55:df:3d:de:c1:2c:a5:29:5c:12:f2:c3:dd:f2:75:9d:22:f0:
4d:7d:d1:a0:f3:c1:95:6e:fc:79:9f:e3:31:81:f0:c4:fa:4e:
04:3a:de:5d:be:2f:f9:40:3d:c5:a0:e4:f7:77:97:d6:1b:78:
ca:69:60:2a:ab:71:d7:2d:25:71:0c:d6:57:75:a8:56:73:38:
d8:f4:c3:7b:8d:56:03:0c:04:65:3b:3f:58:73:18:4b:65:40:
2a:1b:be:49:ad:f9:4a:00:90:de:84:95:f3:24:91:c0:b0:9d:
ae:3c:49:d8:4e:c2:e9:c9:3d:57:18:f7:52:e2:09:18:77:c2:
bf:5d:0d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:49:54 2026 by rpki-client