Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/B3CSmriv8I4jkmf0j9VWs7i0RDI.roa
File: B3CSmriv8I4jkmf0j9VWs7i0RDI.roa (raw, json)
Hash identifier: EEmFNdiIcv/r27CBzlleMC2sUcGKxTseJz6A8XhfKgc=
Subject key identifier: 07:70:92:9A:B8:AF:F0:8E:23:92:67:F4:8F:D5:56:B3:B8:B4:44:32
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A05F4830E70428769FAA0C844EE44DE957
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/B3CSmriv8I4jkmf0j9VWs7i0RDI.roa
Signing time: Tue 01 Sep 2026 23:22:41 +0000
ROA not before: Tue 01 Sep 2026 23:22:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219337
IP address blocks: 2.27.136.0/24 maxlen: 24
2.27.200.0/24 maxlen: 24
2.27.201.0/24 maxlen: 24
2.27.202.0/24 maxlen: 24
2.27.203.0/24 maxlen: 24
2.27.204.0/24 maxlen: 24
2.27.205.0/24 maxlen: 24
2.27.206.0/24 maxlen: 24
2.27.207.0/24 maxlen: 24
31.77.8.0/24 maxlen: 24
31.77.9.0/24 maxlen: 24
31.77.10.0/24 maxlen: 24
31.77.11.0/24 maxlen: 24
31.77.12.0/24 maxlen: 24
31.77.13.0/24 maxlen: 24
31.77.14.0/24 maxlen: 24
31.77.15.0/24 maxlen: 24
177.3.208.0/24 maxlen: 24
177.3.209.0/24 maxlen: 24
177.3.212.0/24 maxlen: 24
177.3.213.0/24 maxlen: 24
177.3.214.0/24 maxlen: 24
177.3.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Sep 2026 21:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5f:48:30:e7:04:28:76:9f:aa:0c:84:4e:e4:4d:e9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 1 23:22:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0770929ab8aff08e239267f48fd556b3b8b44432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:5f:4c:a1:e5:1f:d6:a9:19:a5:7c:e1:19:
6f:8f:af:00:e7:ed:67:79:55:95:e6:e2:ed:85:a5:
05:36:d1:0a:62:a4:fe:92:d4:38:da:e0:95:06:ce:
1f:83:8c:3c:2b:ce:cc:c7:1a:5b:36:6c:96:3c:50:
a9:ff:e0:10:17:f7:d7:e1:f8:06:42:cf:4c:a2:eb:
14:fe:40:5e:f1:78:50:e4:ef:38:21:e0:45:de:41:
3b:76:76:69:c3:b9:fd:3d:79:dd:02:8f:89:fe:ff:
ee:c7:18:b6:a0:12:b4:f6:b7:c3:a2:20:d7:ac:38:
aa:b8:fb:d9:4e:7b:e0:1b:2b:7a:86:dc:f2:6c:11:
c9:08:11:e8:ba:e5:cb:24:99:aa:e7:d5:28:78:31:
11:e6:8f:be:b4:9f:b4:f3:56:8a:e2:c4:4f:fd:7d:
3f:b3:b5:12:82:90:c6:54:9c:d3:7b:4c:06:64:53:
2e:70:0f:49:f1:f3:42:e9:80:40:06:e8:04:63:1b:
94:3c:82:e4:9e:cb:63:ed:bc:64:0e:a3:d7:1c:4a:
62:15:04:0f:fb:21:fb:c7:d2:d5:4f:51:a5:79:85:
cc:87:59:b7:03:80:83:9d:4a:01:b0:3b:e9:fa:9d:
cb:6b:72:4c:51:7e:4c:05:c5:23:97:bb:c8:86:a5:
02:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:70:92:9A:B8:AF:F0:8E:23:92:67:F4:8F:D5:56:B3:B8:B4:44:32
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/B3CSmriv8I4jkmf0j9VWs7i0RDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.136.0/24
2.27.200.0/21
31.77.8.0/21
177.3.208.0/23
177.3.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:8c:cf:96:1a:81:70:75:62:9e:27:25:4c:5f:59:6e:4f:5a:
d6:9e:aa:1f:a6:d5:04:14:bd:21:13:1a:bb:b1:f5:c1:2b:98:
94:ce:0b:82:15:9f:99:9d:03:4a:e1:b5:ae:d4:58:19:ff:20:
e1:4e:38:77:bb:39:88:cb:ef:7b:3e:f2:7c:c0:e3:7a:34:19:
a9:ed:d0:8b:72:48:2e:f7:c5:dc:23:f0:6a:8e:a0:cb:ad:46:
27:87:df:0e:77:d9:50:19:81:49:ae:f9:bc:f2:cc:fc:c4:9b:
15:42:d9:03:0a:6e:41:d7:c8:4f:b6:fb:38:b2:a3:80:ba:0a:
a9:24:ec:fa:b7:f8:eb:81:06:bc:a1:e8:c1:5a:f0:f4:61:9d:
cd:94:5d:87:ec:02:2d:24:00:1d:14:73:38:42:75:bb:63:a0:
97:c7:72:df:01:9e:92:91:5c:c3:8a:62:8b:95:7d:f1:16:e7:
7c:e0:78:dd:09:7c:dc:ad:fd:04:4f:53:f2:31:e1:4f:69:92:
93:77:48:3e:90:12:90:ad:99:12:34:35:86:d1:02:f3:02:72:
bf:89:f2:2a:06:eb:d8:e2:2f:60:8b:88:b8:00:9a:45:88:6e:
62:8b:1e:52:87:c0:18:01:33:1d:f8:c0:ef:dd:27:a2:e8:2f:
6f:d2:2e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:27:17 2026 by rpki-client