Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wd6oW2ZB6aAbzwJmIUYUukAQwFo.roa
File: wd6oW2ZB6aAbzwJmIUYUukAQwFo.roa (raw, json)
Hash identifier: 8FIT46WBnYumC2z+WZyk/gdnB1SoPq3sKvN/EXxvGsc=
Subject key identifier: C1:DE:A8:5B:66:41:E9:A0:1B:CF:02:66:21:46:14:BA:40:10:C0:5A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0876DB275DF768297B416C19E9CFAD835
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wd6oW2ZB6aAbzwJmIUYUukAQwFo.roa
Signing time: Wed 09 Sep 2026 18:28:28 +0000
ROA not before: Wed 09 Sep 2026 18:28:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 2.27.64.0/22 maxlen: 24
2.27.72.0/23 maxlen: 24
2.27.74.0/23 maxlen: 24
2.27.76.0/24 maxlen: 24
2.27.77.0/24 maxlen: 24
2.27.80.0/24 maxlen: 24
2.27.81.0/24 maxlen: 24
13.143.144.0/22 maxlen: 24
13.143.148.0/22 maxlen: 24
13.143.160.0/22 maxlen: 24
13.143.168.0/22 maxlen: 24
13.143.172.0/22 maxlen: 24
13.143.184.0/22 maxlen: 24
13.143.192.0/22 maxlen: 24
31.77.70.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Sep 2026 17:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:6d:b2:75:df:76:82:97:b4:16:c1:9e:9c:fa:d8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 9 18:28:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1dea85b6641e9a01bcf0266214614ba4010c05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:23:38:c1:a1:ca:b4:3c:c7:be:7a:81:91:
96:d9:17:53:33:cf:66:1d:06:c4:4e:55:74:38:c1:
67:9d:f2:0b:a0:e8:c9:1c:7b:6e:f8:09:03:25:0f:
5b:33:d1:d2:75:82:94:04:fb:59:14:da:42:52:b8:
fa:37:20:be:cb:1f:7e:9c:0e:16:3c:7f:a9:ca:58:
6c:b1:c0:d4:f6:31:84:3c:e6:a0:b6:7f:3f:8d:64:
e2:48:a5:ca:64:2b:bf:8e:2e:44:04:02:63:59:0e:
c4:5d:8a:b9:c2:bb:18:cd:91:06:21:3b:c0:23:ec:
7d:3b:7b:aa:bd:ad:31:1e:d3:13:51:64:c1:e6:c4:
e0:b7:6a:28:c2:f3:f8:70:d6:a2:2b:8a:03:33:c0:
95:fd:40:7b:36:f5:b5:0b:11:d0:35:22:79:63:f2:
c7:8c:45:0a:3a:91:6a:f4:41:b6:68:99:c6:f3:a8:
88:9a:aa:cb:66:14:2b:b3:2b:cc:00:67:b5:74:32:
22:61:48:75:17:2e:e0:60:83:49:a0:56:4d:8c:fd:
66:e0:ca:63:da:6d:4b:70:fd:87:9b:e9:07:18:86:
ed:57:33:45:c6:01:3e:80:68:64:89:2a:77:72:8e:
f6:a2:29:4d:b7:ce:15:b2:1c:b3:3a:ae:b9:f6:62:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DE:A8:5B:66:41:E9:A0:1B:CF:02:66:21:46:14:BA:40:10:C0:5A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wd6oW2ZB6aAbzwJmIUYUukAQwFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.64.0/22
2.27.72.0-2.27.77.255
2.27.80.0/23
13.143.144.0/21
13.143.160.0/22
13.143.168.0/21
13.143.184.0/22
13.143.192.0/22
31.77.70.0/23
Signature Algorithm: sha256WithRSAEncryption
26:cc:3e:6e:46:8f:76:73:d0:8d:0f:37:43:6a:d2:79:8e:d7:
e5:0a:45:75:b2:21:16:f0:6c:d2:53:6d:ae:95:03:db:d8:29:
28:b8:e3:a9:80:61:64:df:e1:9a:40:d3:2a:8e:bd:cf:d3:7b:
2f:ab:c6:1f:4e:26:6c:40:ca:13:0f:c6:98:a2:2d:59:55:91:
d1:41:97:ee:ce:d6:5c:a8:56:cc:2f:25:69:f7:6d:d2:9b:31:
6d:09:b9:91:36:f9:5f:cb:3f:e1:4f:03:63:55:52:25:fe:c9:
7a:be:94:bf:c9:4c:68:e2:53:90:e1:db:c4:9a:26:4b:19:10:
1b:67:cf:d4:27:0d:e9:6f:dd:9b:be:53:fb:a3:cd:ca:53:4d:
a9:81:32:66:f4:a0:64:e6:e1:44:6a:db:be:9d:62:f6:f3:21:
5a:f9:7e:16:04:63:fd:c8:00:d4:9f:75:ec:62:9c:4d:e7:4c:
1c:0b:70:61:2a:30:ca:c2:37:31:33:f8:99:e4:91:5a:92:82:
4e:be:2a:b1:f4:1a:73:9e:90:d9:15:6c:71:47:36:51:00:69:
2f:dd:5e:7c:da:b9:88:54:5d:48:5e:61:2f:f8:a6:16:f5:b0:
f6:8c:f0:59:65:25:e8:cb:28:9d:45:a0:f9:d4:a9:9e:34:6d:
02:0b:a0:bb
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAaCHbbJ133aCl7QWwZ6c+tg1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTA5MTgyODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWRlYTg1YjY2NDFlOWEwMWJjZjAyNjYyMTQ2MTRiYTQwMTBjMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFEjOMGhyrQ8x756gZGW2RdTM89m
HQbETlV0OMFnnfILoOjJHHtu+AkDJQ9bM9HSdYKUBPtZFNpCUrj6NyC+yx9+nA4W
PH+pylhsscDU9jGEPOagtn8/jWTiSKXKZCu/ji5EBAJjWQ7EXYq5wrsYzZEGITvA
I+x9O3uqva0xHtMTUWTB5sTgt2oowvP4cNaiK4oDM8CV/UB7NvW1CxHQNSJ5Y/LH
jEUKOpFq9EG2aJnG86iImqrLZhQrsyvMAGe1dDIiYUh1Fy7gYINJoFZNjP1m4Mpj
2m1LcP2Hm+kHGIbtVzNFxgE+gGhkiSp3co72oilNt84VshyzOq659mJ9dQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFMHeqFtmQemgG88CZiFGFLpAEMBaMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvd2Q2b1cyWkI2YUFiendKbUlVWVV1a0FRd0ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCAhtAMAwD
BAMCG0gDBAECG0wDBAECG1ADBAMNj5ADBAINj6ADBAMNj6gDBAINj7gDBAINj8AD
BAEfTUYwDQYJKoZIhvcNAQELBQADggEBACbMPm5Gj3Zz0I0PN0Nq0nmO1+UKRXWy
IRbwbNJTba6VA9vYKSi446mAYWTf4ZpA0yqOvc/Tey+rxh9OJmxAyhMPxpiiLVlV
kdFBl+7O1lyoVswvJWn3bdKbMW0JuZE2+V/LP+FPA2NVUiX+yXq+lL/JTGjiU5Dh
28SaJksZEBtnz9QnDelv3Zu+U/ujzcpTTamBMmb0oGTm4URq276dYvbzIVr5fhYE
Y/3IANSfdexinE3nTBwLcGEqMMrCNzEz+JnkkVqSgk6+KrH0GnOekNkVbHFHNlEA
aS/dXnzauYhUXUheYS/4phb1sPaM8FllJejLKJ1FoPnUqZ40bQILoLs=
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:22:39 2026 by rpki-client