Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OEzlL2T-eS_eNq6KCEgWwDoEvI8.roa
File: OEzlL2T-eS_eNq6KCEgWwDoEvI8.roa (raw, json)
Hash identifier: m+a8ady+IZG0kARpXJkdPeimD+txjyT80+PAsmE2RJk=
Subject key identifier: 38:4C:E5:2F:64:FE:79:2F:DE:36:AE:8A:08:48:16:C0:3A:04:BC:8F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0D57257BD006743F43E5001757486BD58
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OEzlL2T-eS_eNq6KCEgWwDoEvI8.roa
Signing time: Thu 24 Sep 2026 22:03:55 +0000
ROA not before: Thu 24 Sep 2026 22:03:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219443
IP address blocks: 2.27.241.0/24 maxlen: 24
13.143.140.0/24 maxlen: 24
13.143.169.0/24 maxlen: 24
177.1.190.0/24 maxlen: 24
177.1.191.0/24 maxlen: 24
177.1.194.0/24 maxlen: 24
177.1.196.0/24 maxlen: 24
177.1.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Oct 2026 17:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:72:57:bd:00:67:43:f4:3e:50:01:75:74:86:bd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 24 22:03:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=384ce52f64fe792fde36ae8a084816c03a04bc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:a8:51:e8:14:85:50:ca:91:ec:cc:fc:60:
77:f7:6c:5c:1c:ca:6a:8a:5a:b7:29:57:1b:3d:f9:
93:bb:44:0b:68:c0:00:ed:65:1f:be:62:05:fa:c7:
2e:08:96:69:1c:2b:d3:f4:31:5e:2d:e6:88:d9:fb:
5d:3d:3f:1d:ae:78:31:5b:4b:4c:5f:0c:5c:12:5d:
d3:a0:9a:68:d5:69:36:b8:5a:af:3d:3c:e4:58:0e:
24:62:c3:76:e9:a6:30:97:8a:d9:b8:06:c8:9e:cc:
b5:5b:d5:f9:fb:76:7d:7e:e4:81:a3:52:e3:25:a4:
70:69:ed:25:15:72:39:3e:ae:5f:5a:0b:90:fe:dc:
dc:58:33:bd:85:38:df:87:0f:b4:c2:31:c4:51:bd:
9e:a0:51:54:90:09:17:e1:a1:be:75:f7:5d:1c:05:
42:66:7d:79:98:3f:1f:5c:c3:f3:73:a0:47:61:a2:
7a:0e:ee:b8:7e:de:f8:eb:64:f7:e8:7d:b4:71:9c:
d9:ac:66:3b:4b:fd:1d:49:0e:21:79:67:6c:a6:e7:
4a:3e:34:66:1c:59:b7:0f:70:16:10:51:fd:ef:e6:
36:ba:b4:e1:8c:01:49:fe:c3:cd:ec:10:62:79:d7:
d9:e8:70:bb:53:7f:bc:22:30:8f:72:b0:60:2d:50:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4C:E5:2F:64:FE:79:2F:DE:36:AE:8A:08:48:16:C0:3A:04:BC:8F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OEzlL2T-eS_eNq6KCEgWwDoEvI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.241.0/24
13.143.140.0/24
13.143.169.0/24
177.1.190.0/23
177.1.194.0/24
177.1.196.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:90:dd:7f:db:bc:ba:71:fb:d0:a5:00:4f:91:27:c0:d5:6d:
84:77:3f:8c:2a:04:fb:e4:7f:ad:4b:96:f8:98:8b:46:7d:69:
66:6c:76:f9:0b:1a:cd:c5:61:dd:ec:d7:b9:f4:7a:5b:43:f9:
59:96:8c:b5:9f:da:15:01:f6:4f:f7:af:5b:b5:52:16:e8:48:
55:6c:6d:e4:0a:47:94:6c:c2:84:e7:86:71:00:e4:33:55:a7:
e8:3d:a9:a4:dc:9b:9b:5e:7e:74:71:ec:44:c1:4d:1c:57:f8:
d2:07:8f:84:24:15:f9:20:40:d7:db:17:fd:eb:96:93:a1:22:
7e:11:9e:84:f1:d6:84:aa:49:49:79:27:25:e3:98:0e:81:a1:
5a:9f:99:da:55:b8:21:eb:e2:76:cc:50:f1:9e:30:1a:14:d7:
a6:93:97:bb:a9:d9:49:7d:36:c6:02:bb:f9:8c:0d:86:11:f5:
c2:2e:1b:b2:a2:04:84:b3:11:c2:c6:10:1f:03:73:87:44:30:
9c:a8:04:e9:9c:06:aa:4b:d2:83:4d:eb:18:07:85:3e:e2:56:
b8:14:77:59:f4:38:e9:61:be:76:01:8a:ec:d3:e8:d7:5e:6d:
4e:7c:16:29:f2:96:a5:87:77:1f:9d:35:c4:79:65:c7:48:45:
fa:b8:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:36:24 2026 by rpki-client