Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TuER2FQLXvYzXNTI5HTLUzPuSnw.roa
File: TuER2FQLXvYzXNTI5HTLUzPuSnw.roa (raw, json)
Hash identifier: TyPHL7osJG85J69ikgWsiAH0nNOZwFzREIfZL2fvuu0=
Subject key identifier: 4E:E1:11:D8:54:0B:5E:F6:33:5C:D4:C8:E4:74:CB:53:33:EE:4A:7C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A08D37F0BF82E451D69B1674AEC70A9CA3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TuER2FQLXvYzXNTI5HTLUzPuSnw.roa
Signing time: Thu 10 Sep 2026 21:27:28 +0000
ROA not before: Thu 10 Sep 2026 21:27:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 144.31.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Sep 2026 17:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:37:f0:bf:82:e4:51:d6:9b:16:74:ae:c7:0a:9c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 10 21:27:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ee111d8540b5ef6335cd4c8e474cb5333ee4a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:10:94:64:af:a2:49:ce:8f:50:91:b7:72:27:
d2:d2:bf:1a:18:06:d2:0c:87:4c:d4:88:35:51:e6:
88:d7:ec:b8:0c:fe:95:62:09:ed:19:8e:91:6b:af:
ab:06:a2:80:3c:63:ee:6b:32:95:5e:b8:94:3d:f2:
a1:d3:ac:52:bb:c8:86:4c:15:70:4f:e2:b0:d3:a1:
3c:41:5c:02:77:04:51:2c:69:95:cb:99:4c:f2:1a:
77:a0:29:4a:5b:03:db:d2:da:41:87:cb:dd:20:6c:
b4:f6:a8:48:a4:03:5b:db:b6:40:d7:b7:40:c1:92:
45:f1:b8:db:a5:65:84:f2:15:ad:11:40:49:f8:1f:
a3:a5:d4:8d:e6:71:2c:8c:7a:70:5a:e6:4d:af:fa:
e9:be:6d:84:4b:b3:4b:c4:dc:a0:c9:d0:f4:eb:cc:
8c:94:e2:62:21:98:f3:d5:31:44:de:7e:93:1c:23:
36:c1:5c:cf:fd:c9:75:b3:b1:de:cf:8d:69:67:e1:
d4:33:d4:89:af:d2:9d:c1:ec:80:f1:c3:3f:48:6f:
46:99:c7:9e:70:9a:8d:6b:e5:77:15:a1:91:f0:62:
97:83:c8:bc:56:50:03:07:22:dd:0c:04:b3:bd:7f:
72:ad:e6:c0:2f:09:69:c5:2b:23:fe:65:af:1e:27:
e3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E1:11:D8:54:0B:5E:F6:33:5C:D4:C8:E4:74:CB:53:33:EE:4A:7C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TuER2FQLXvYzXNTI5HTLUzPuSnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.145.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ef:5f:a9:f6:86:08:c7:1c:50:bf:2f:4f:b0:85:a4:e6:21:
08:58:9c:ac:44:74:a3:39:f8:2d:07:05:c0:20:0d:42:f2:cf:
ec:18:13:a8:dc:6b:46:b0:09:b0:43:83:b2:87:9a:ac:70:9b:
1b:65:1f:3c:81:de:11:ce:d8:04:35:e3:b1:56:c4:21:7c:6c:
5e:98:84:d7:ed:49:47:2c:55:17:db:06:83:6b:24:ba:f3:90:
65:e1:b6:5b:79:ce:e0:ea:3e:e3:a0:5c:5b:fc:9d:d1:ae:72:
21:fd:c9:57:5d:b1:24:9c:0a:db:5e:b4:61:3b:f5:75:cb:d3:
35:a3:24:31:40:83:61:b6:cf:88:76:4c:4f:ef:fa:80:05:4e:
bc:85:45:dd:64:3b:92:ec:49:ec:49:14:66:1e:6c:83:14:e4:
7f:73:6a:ae:e3:ba:b3:50:07:5a:22:72:d9:6a:57:ee:40:d2:
0c:f5:f2:74:c3:6a:65:74:37:dd:e7:cb:6e:5f:50:cd:8b:af:
f6:82:a0:b1:87:f8:d0:9d:e1:a8:f9:b5:f2:7b:24:19:1f:28:
4c:8d:0a:75:1c:60:f2:73:4e:45:5d:06:fa:d6:85:62:9c:0a:
1c:b1:0b:10:c8:5b:a9:74:07:3b:67:34:ab:de:20:fe:3e:a1:
4c:7f:cd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:29:34 2026 by rpki-client