Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TozFzR2-syPm7SdJtDeYNC3fMZE.roa
File: TozFzR2-syPm7SdJtDeYNC3fMZE.roa (raw, json)
Hash identifier: 2yflv/Bbt2BdeZz+nhdRc/QD0uA+Yb7lTN5daJVKM0g=
Subject key identifier: 4E:8C:C5:CD:1D:BE:B3:23:E6:ED:27:49:B4:37:98:34:2D:DF:31:91
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0DA34E94B16E6EC7F84495F46C99A59FA
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TozFzR2-syPm7SdJtDeYNC3fMZE.roa
Signing time: Fri 25 Sep 2026 20:14:55 +0000
ROA not before: Fri 25 Sep 2026 20:14:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 144.31.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Sep 2026 22:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:34:e9:4b:16:e6:ec:7f:84:49:5f:46:c9:9a:59:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 25 20:14:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e8cc5cd1dbeb323e6ed2749b43798342ddf3191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:62:b4:66:8f:2c:23:09:e2:e7:20:f5:92:48:
58:f0:8a:44:3a:7c:0c:30:6b:41:8f:bf:a9:32:be:
9a:61:d8:41:97:d7:ba:ec:19:77:2b:24:65:03:a7:
86:b9:8a:af:98:7a:f9:55:d9:19:ca:82:1a:64:af:
30:87:3e:ab:ef:40:84:3f:7d:14:1e:d3:10:ba:2e:
04:52:06:b5:39:e8:72:9c:f2:25:0a:df:38:d8:ee:
07:9c:c9:46:c2:6a:7f:fc:fc:88:f0:82:cd:2e:cb:
0a:7d:a3:cf:60:d8:75:e8:f7:6b:28:14:c6:52:3e:
20:b4:2c:da:46:b7:47:fa:a9:15:b4:63:37:6e:15:
ff:42:e5:52:2d:5e:0d:4b:58:c8:ab:dd:9f:15:4e:
03:06:74:8b:5a:71:6d:7e:56:2b:3f:4b:eb:c9:9d:
e4:25:51:a9:dd:0c:81:63:7e:21:25:96:ee:aa:a3:
24:d4:70:55:be:e7:4a:b0:a4:bd:19:61:56:de:bf:
88:13:96:a2:51:3c:7f:a0:f9:eb:7a:08:70:c5:1f:
99:83:69:fa:03:d5:39:08:10:76:c8:eb:83:56:ab:
b4:ce:86:92:9d:ea:32:e8:fe:8d:01:98:95:71:99:
f6:ba:c9:0c:97:1b:bf:84:57:2f:e7:4c:a7:33:5e:
f9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8C:C5:CD:1D:BE:B3:23:E6:ED:27:49:B4:37:98:34:2D:DF:31:91
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TozFzR2-syPm7SdJtDeYNC3fMZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.145.0/24
Signature Algorithm: sha256WithRSAEncryption
55:7a:bc:63:34:ad:ac:2b:7c:2a:73:8c:31:8a:15:27:37:68:
da:e4:10:09:df:b8:c8:76:74:d9:d8:8a:7b:d5:ed:58:3b:9f:
e3:ec:0d:54:25:43:8f:18:64:24:59:a7:8a:9e:67:1f:35:9b:
3d:ff:cb:b4:7d:4b:aa:f0:71:71:18:b2:46:66:3c:63:f9:dc:
f8:de:2b:1c:0e:05:e5:04:c4:72:b8:71:f8:b3:b6:f4:e2:e2:
8d:8e:64:30:47:5c:a3:f1:ed:c5:a4:dd:2e:cb:50:3b:27:83:
a5:b2:eb:10:75:c3:b2:e0:9d:35:80:14:11:ed:52:74:97:3d:
30:ba:ed:18:a2:cb:56:56:e7:6b:08:0d:9a:af:f3:5d:24:a9:
44:d6:84:b4:dd:f7:99:3f:50:f2:e7:a7:74:05:a6:f0:20:c2:
1b:94:8b:02:70:c8:ee:b3:4a:0f:db:b9:bc:89:d6:05:ab:ba:
4e:53:a3:5b:86:77:8d:80:cd:12:19:84:8c:46:13:0d:ce:ee:
1c:dc:8b:e5:e7:bb:39:12:05:19:8b:3f:e4:f9:be:ae:58:7d:
1a:4a:49:99:57:38:22:9f:9b:ff:6c:14:67:9d:cd:f0:ea:52:
65:69:c5:71:3f:25:1c:40:f8:44:9d:ea:c0:4a:c8:20:b2:1b:
4d:c8:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:13:21 2026 by rpki-client