Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MHoPTH3gR4zzMzPOKT9bSN-ra34.roa
File: MHoPTH3gR4zzMzPOKT9bSN-ra34.roa (raw, json)
Hash identifier: 4ikqlPG3iSoP5TCb2RPyRx7U3Z92EjTMTwowJxdE63E=
Subject key identifier: 30:7A:0F:4C:7D:E0:47:8C:F3:33:33:CE:29:3F:5B:48:DF:AB:6B:7E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0E948C474CE2EF4082A7FB5AB96B4E6A6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MHoPTH3gR4zzMzPOKT9bSN-ra34.roa
Signing time: Mon 28 Sep 2026 18:30:55 +0000
ROA not before: Mon 28 Sep 2026 18:30:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200203
IP address blocks: 2.26.120.0/23 maxlen: 24
31.77.240.0/24 maxlen: 24
179.254.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Oct 2026 19:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:48:c4:74:ce:2e:f4:08:2a:7f:b5:ab:96:b4:e6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 28 18:30:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=307a0f4c7de0478cf33333ce293f5b48dfab6b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:0f:87:f2:88:51:23:d7:4f:48:f4:f2:52:
12:a5:78:b0:1f:b5:12:39:c8:75:0e:b1:16:3d:4c:
ee:64:76:9f:ea:24:b5:d8:8f:3d:b7:4c:17:cd:6f:
fa:c7:7c:99:74:54:b0:39:a3:52:44:a9:96:cc:18:
54:c6:40:eb:ad:59:fc:06:c1:c3:e3:84:f3:a0:80:
83:ec:9e:c1:57:c9:ad:3b:74:2c:c1:57:e2:9e:fa:
ed:ad:3e:4f:7c:c2:c7:2c:f8:97:24:6f:09:f6:8c:
3c:46:98:3e:4e:b8:33:dc:cc:1b:7e:96:8d:29:b3:
62:63:f9:03:8e:57:7f:92:20:5c:9b:19:02:d9:2d:
57:09:24:3b:f2:10:a4:05:ee:7e:6b:4f:92:7e:ba:
18:28:25:5d:e5:5c:24:90:cf:f0:8f:49:27:48:9e:
7f:c4:ff:74:5f:15:be:5b:0f:20:a4:14:28:15:6f:
85:97:44:67:46:72:36:f7:3c:07:4e:36:6a:25:0c:
8e:1a:3a:dd:a8:81:76:5c:8f:4b:9f:dc:f3:44:1e:
ed:09:a5:5c:28:81:ba:ec:03:ca:e9:04:54:9e:e1:
a2:e0:d5:39:12:c4:d6:3c:aa:e5:bd:6f:16:6f:f9:
8d:5b:ce:cd:bd:9b:24:75:a0:28:4a:38:2f:f4:8e:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7A:0F:4C:7D:E0:47:8C:F3:33:33:CE:29:3F:5B:48:DF:AB:6B:7E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MHoPTH3gR4zzMzPOKT9bSN-ra34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.120.0/23
31.77.240.0/24
179.254.160.0/23
Signature Algorithm: sha256WithRSAEncryption
21:e4:30:18:5d:9c:06:3f:e0:08:83:7b:6e:64:d9:3a:a7:69:
45:91:33:22:95:2c:0e:d7:35:c1:33:3f:11:84:3f:33:0e:e6:
a0:0d:a9:41:8e:e1:45:7a:07:06:2e:f1:88:ba:aa:d4:36:ab:
18:4e:2d:ae:3d:ab:b6:42:45:cc:e5:b4:89:c5:07:9f:78:df:
d7:f9:a8:86:64:4f:9e:0a:1b:98:6c:93:1f:ea:9d:4c:1e:c3:
d8:4e:78:c3:1e:08:7f:33:ae:cc:03:8a:af:5e:5d:b9:ad:a8:
16:6b:19:31:32:2a:d5:b8:d8:45:be:57:eb:f1:b2:6e:69:bf:
a4:96:a6:ca:34:c3:66:c6:7d:ee:16:4a:f9:75:1d:f4:c7:a0:
f4:e4:2e:ee:21:fa:bb:24:df:03:5d:0f:73:ef:12:80:b6:61:
2f:60:ee:ea:c5:bd:1e:a2:0f:dd:63:87:6c:5c:f3:de:76:af:
c2:21:e0:da:24:5e:ea:69:b6:35:af:b1:ab:65:f2:9d:57:aa:
87:5b:e5:95:7e:40:08:eb:8a:ac:ea:6b:46:f9:b4:13:75:73:
87:2d:88:9d:46:df:64:6a:36:83:b4:74:b0:79:da:3a:de:fa:
dd:53:c1:9d:1c:c3:7f:20:1b:19:b9:45:e6:92:75:f4:ef:60:
76:ea:09:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:06:32 2026 by rpki-client