Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mH4-D3UHdvbUfEil_6PD61SUhRo.roa
File: mH4-D3UHdvbUfEil_6PD61SUhRo.roa (raw, json)
Hash identifier: BcIHZfkCQKO466+VEnUQ1fknsi8M4jSs0WcIa3R1WeM=
Subject key identifier: 98:7E:3E:0F:75:07:76:F6:D4:7C:48:A5:FF:A3:C3:EB:54:94:85:1A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0780EF77599D4D9D634E0F0ACF81A190D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mH4-D3UHdvbUfEil_6PD61SUhRo.roa
Signing time: Sun 06 Sep 2026 18:50:41 +0000
ROA not before: Sun 06 Sep 2026 18:50:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 31.77.56.0/24 maxlen: 24
31.77.57.0/24 maxlen: 24
31.77.109.0/24 maxlen: 24
31.77.138.0/24 maxlen: 24
31.77.168.0/24 maxlen: 24
31.77.170.0/24 maxlen: 24
31.77.219.0/24 maxlen: 24
31.77.220.0/24 maxlen: 24
31.77.247.0/24 maxlen: 24
31.77.248.0/24 maxlen: 24
150.241.93.0/24 maxlen: 24
150.241.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Sep 2026 16:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:78:0e:f7:75:99:d4:d9:d6:34:e0:f0:ac:f8:1a:19:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 6 18:50:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=987e3e0f750776f6d47c48a5ffa3c3eb5494851a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:4e:6b:35:25:e6:ba:53:86:a4:2c:88:0e:
6f:ae:0e:54:84:83:67:77:cc:d1:2d:b0:6a:a6:95:
bb:2f:48:36:f2:9c:6f:36:f8:67:41:69:61:8c:cb:
12:ca:2b:07:a8:ee:aa:1a:b1:3f:b0:69:5c:0b:32:
1e:87:59:ff:22:cc:1a:36:b5:be:a7:40:5d:c6:b4:
c9:df:12:e5:3d:4f:ef:f2:8a:22:1a:19:28:cf:6a:
7c:be:da:b6:1a:e3:6a:ee:f2:f4:54:00:47:d4:11:
eb:30:53:ba:20:44:ce:14:4c:03:d4:fb:f8:48:15:
0c:5f:ab:19:9f:ac:23:08:0b:f4:30:23:30:be:80:
47:f6:3c:43:39:78:b4:7b:39:b1:35:fe:76:51:f5:
c6:6c:6a:b6:f2:a8:76:90:0b:46:a5:49:23:17:05:
6a:b8:a7:f1:55:ee:84:af:d5:be:02:9d:0c:1a:2e:
25:0f:13:98:44:99:e8:e2:d2:bd:7d:88:48:b1:cc:
39:e8:00:11:3f:87:94:42:c0:28:48:4d:70:92:4f:
7c:9a:f2:4f:fd:df:f4:4d:5b:10:6e:bc:16:15:6b:
57:f0:a1:f0:bb:d1:28:f9:b2:0d:1b:4a:9f:91:51:
6a:dd:fb:6a:e9:b9:84:eb:e3:06:b1:c5:14:6f:01:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7E:3E:0F:75:07:76:F6:D4:7C:48:A5:FF:A3:C3:EB:54:94:85:1A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mH4-D3UHdvbUfEil_6PD61SUhRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.56.0/23
31.77.109.0/24
31.77.138.0/24
31.77.168.0/24
31.77.170.0/24
31.77.219.0-31.77.220.255
31.77.247.0-31.77.248.255
150.241.93.0/24
150.241.124.0/24
Signature Algorithm: sha256WithRSAEncryption
09:5f:48:08:3b:44:76:34:b5:f1:9c:b5:c4:9f:f2:71:93:b9:
c6:06:72:22:14:ba:2c:83:84:78:9b:ec:5b:80:10:07:37:f2:
77:08:ac:52:62:92:d6:0d:02:d1:22:3d:46:5b:b9:79:b4:dc:
4f:99:69:10:a0:6a:71:9e:db:ea:4a:2f:50:8f:51:53:77:c5:
ba:b1:ac:3e:5d:a8:6f:bd:16:b4:d9:ff:25:58:db:31:29:32:
c8:a6:18:76:d2:f6:ef:c1:4d:f1:e2:f1:f2:87:cc:45:f2:9d:
03:26:cc:a0:07:bf:dd:15:9b:b1:8b:6c:cf:60:bd:40:a8:f0:
3d:ef:b7:40:3d:4b:88:04:a9:f1:1d:45:a1:ff:80:e2:83:ac:
9d:b9:33:bf:ec:6d:82:6b:11:7b:32:53:4f:67:f3:14:11:6e:
c1:dc:ce:ee:0b:51:63:f1:72:29:5f:7e:52:bd:4c:bd:bc:49:
17:3e:ec:2a:12:94:8b:91:15:32:15:19:1d:bf:58:ca:2a:56:
ae:0c:52:41:a2:47:72:a5:8d:46:99:e9:8f:1a:37:1a:9c:68:
92:63:35:21:57:ab:ff:4d:c0:08:e8:9b:28:1c:2b:2b:b5:5d:
b9:24:ea:7c:d0:02:44:12:31:47:5b:7c:5c:1b:c8:f2:36:ce:
db:c8:8d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:29:34 2026 by rpki-client