Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jWbY_zatyFyemVNcZvJ5QXGA0mw.roa
File: jWbY_zatyFyemVNcZvJ5QXGA0mw.roa (raw, json)
Hash identifier: paksygG4TsTNynVKcGaQCjEVJnIXSUd9eH63ieMWmDM=
Subject key identifier: 8D:66:D8:FF:36:AD:C8:5C:9E:99:53:5C:66:F2:79:41:71:80:D2:6C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E9963BCF53DD226CCC8E25E1F7E66344A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jWbY_zatyFyemVNcZvJ5QXGA0mw.roa
Signing time: Fri 05 Jun 2026 20:05:10 +0000
ROA not before: Fri 05 Jun 2026 20:05:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 2.26.170.0/24 maxlen: 24
2.27.82.0/24 maxlen: 24
2.27.115.0/24 maxlen: 24
2.27.172.0/24 maxlen: 24
31.77.211.0/24 maxlen: 24
31.77.225.0/24 maxlen: 24
144.31.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jun 2026 17:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:63:bc:f5:3d:d2:26:cc:c8:e2:5e:1f:7e:66:34:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 5 20:05:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d66d8ff36adc85c9e99535c66f279417180d26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:42:4d:27:48:59:4a:5f:88:ba:4b:f8:7c:
00:bd:be:e8:a8:b3:b1:d6:73:3a:fa:40:78:aa:7f:
86:7f:24:95:44:15:30:42:0a:fe:52:c1:2a:ce:f1:
4c:0e:da:55:8d:cf:c1:1a:c2:32:4d:5b:52:54:8c:
78:c9:7c:1d:86:3a:4e:77:7c:b0:83:c2:3c:7d:7e:
c7:95:39:3f:2f:61:6a:ba:5a:40:c7:ff:8b:9a:dc:
bf:be:23:8f:30:f4:8a:d3:c6:7f:52:c5:83:35:b3:
b1:e4:9e:e2:49:5a:ab:6f:d5:0f:af:35:02:c1:27:
b5:19:41:c5:ff:2e:7e:c4:13:53:a0:8b:3a:bc:6d:
a5:e4:66:63:08:f7:4a:a3:ca:f9:21:d0:51:a1:52:
70:6d:0c:a9:be:2c:b0:8b:b8:fb:6d:fc:9a:8d:3c:
7a:03:aa:65:bc:d0:b8:33:ba:d8:9f:bb:9b:91:ed:
ff:7a:94:d5:69:6c:e1:24:e2:ff:fa:de:af:90:40:
2e:57:20:a6:82:26:d8:d5:68:fb:b8:30:1d:0b:d9:
ac:26:3f:8a:df:f7:d4:f9:35:ea:a5:b1:19:d6:cb:
21:6c:96:a1:eb:88:ee:52:ea:4d:3d:1f:61:d5:66:
ce:aa:e5:0f:dd:db:13:8c:a0:0a:0c:67:6d:cb:c5:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:66:D8:FF:36:AD:C8:5C:9E:99:53:5C:66:F2:79:41:71:80:D2:6C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jWbY_zatyFyemVNcZvJ5QXGA0mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.170.0/24
2.27.82.0/24
2.27.115.0/24
2.27.172.0/24
31.77.211.0/24
31.77.225.0/24
144.31.145.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8e:a9:da:70:ce:2f:f3:22:12:f7:49:a0:d4:8e:06:cb:4b:
3b:af:09:2b:61:65:6d:b0:57:76:0f:a8:3c:1e:3d:77:85:b3:
7b:73:9d:43:eb:9c:26:f4:47:09:36:87:d0:eb:de:17:71:49:
3c:a6:0d:5f:43:be:6a:d6:8f:71:63:d4:98:9b:69:22:8c:63:
00:1c:91:e8:96:05:22:0c:b1:a9:02:59:8c:03:11:50:17:42:
ec:b5:9c:d7:ca:2d:29:10:7b:15:0c:dd:c4:9c:35:da:ea:84:
bc:4e:c1:15:77:15:ad:23:22:8a:24:12:0e:c8:0f:0e:f5:dd:
94:4e:8a:fd:09:dc:37:52:08:c0:59:2a:7a:0f:14:5e:46:b9:
e8:b9:88:39:22:03:7d:94:a8:90:5c:4d:2f:c1:64:69:e4:10:
3c:c1:17:4c:f5:a6:df:dd:56:2d:47:ee:85:5c:ed:2a:3b:b1:
b5:81:41:0e:33:fa:63:83:06:85:e4:ce:1a:98:53:fd:e2:7a:
1a:95:3f:f3:4c:bc:93:81:7d:0a:3d:63:21:79:e4:a8:45:62:
91:a5:5b:b7:0c:a3:dc:3c:74:16:26:72:69:b9:ae:66:2e:b5:
30:b4:7c:32:68:8f:89:dd:cd:fa:4e:82:cd:db:a9:92:68:7d:
a0:91:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:06:58 2026 by rpki-client