Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/SjOKPcqAsX9WlLJ3JLg787_VZtY.roa
File: SjOKPcqAsX9WlLJ3JLg787_VZtY.roa (raw, json)
Hash identifier: aEt2BVFwdLPFvxQoHn0MJuOb9EyYIXNXbcydFLvPuV4=
Subject key identifier: 4A:33:8A:3D:CA:80:B1:7F:56:94:B2:77:24:B8:3B:F3:BF:D5:66:D6
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0C8362987E07429FD19A5753213EACB00
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/SjOKPcqAsX9WlLJ3JLg787_VZtY.roa
Signing time: Tue 22 Sep 2026 08:23:07 +0000
ROA not before: Tue 22 Sep 2026 08:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142482
IP address blocks: 77.67.91.0/24 maxlen: 24
194.231.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Sep 2026 05:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:36:29:87:e0:74:29:fd:19:a5:75:32:13:ea:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 22 08:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a338a3dca80b17f5694b27724b83bf3bfd566d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:22:3b:0e:40:cb:65:1c:dd:87:73:6c:ed:
7f:f7:32:a3:45:e0:61:4e:b8:e8:c6:2e:28:2a:47:
21:02:ec:d0:e8:65:d7:fc:1a:1e:be:e7:21:73:4f:
91:f3:d9:45:5d:cf:51:74:c4:ab:9e:a4:2d:2a:91:
e0:01:3b:8f:13:d3:5c:10:f5:14:e4:e4:57:e5:09:
de:85:96:11:2f:14:90:9f:e6:fd:9e:12:31:40:6f:
ba:93:24:f9:74:6b:52:eb:22:79:ee:6b:33:98:6b:
1e:58:8a:85:63:72:e2:b3:e2:ef:6a:20:66:cc:b2:
08:6c:9c:fc:26:c1:15:99:7b:47:d6:58:0a:20:9b:
35:85:ee:3b:9f:97:cb:6a:a4:77:ee:2c:b0:03:3e:
9b:50:00:69:76:7b:45:06:11:00:06:0d:d2:6a:90:
90:75:75:5a:1c:f6:21:e5:76:e6:f2:40:27:db:79:
a5:8f:14:fe:ca:ac:ef:71:1f:06:c6:b6:20:4b:2a:
4b:05:34:65:10:9f:7d:39:92:30:4b:05:99:d4:c0:
e8:3a:87:d5:a3:de:17:98:ae:cc:b5:b6:26:cf:82:
68:f4:f9:f1:8b:1b:bd:9c:30:66:74:f2:77:36:db:
48:a4:4b:ed:fc:23:fe:65:70:c9:a3:b5:f5:91:04:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:33:8A:3D:CA:80:B1:7F:56:94:B2:77:24:B8:3B:F3:BF:D5:66:D6
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/SjOKPcqAsX9WlLJ3JLg787_VZtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.91.0/24
194.231.143.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5f:a4:6c:78:31:b3:ed:fb:5c:8a:70:a6:28:d9:eb:f5:b6:
82:d3:44:2b:df:18:6b:6f:3a:ca:33:06:db:ba:b2:65:62:67:
a0:eb:bf:8d:10:87:01:91:dd:8f:f4:cf:92:80:82:d6:3d:e4:
6b:8a:ad:1f:8e:dd:36:bc:c7:d4:d1:af:19:72:d6:f3:ba:29:
27:72:79:18:4e:a4:aa:85:bf:1a:cf:ec:f5:09:05:4a:10:cf:
9b:e2:70:9a:08:6a:a2:e7:43:fc:65:11:cd:0b:ca:91:9e:e1:
00:83:22:43:14:5f:44:c3:d1:7a:0e:f3:05:5a:a2:92:96:f4:
15:44:b1:25:5e:70:55:f2:1b:05:44:84:5d:11:e0:4a:93:e7:
8e:46:fd:41:47:98:ec:81:24:63:16:52:a2:59:89:10:23:b1:
98:ac:43:5e:df:ee:52:e1:5f:37:f3:78:52:5e:02:f4:d2:0b:
66:cc:b2:e5:13:bd:39:1f:81:29:2e:bb:cc:5c:5a:a1:c8:db:
30:45:75:31:8c:22:43:d0:81:75:5c:c2:88:41:aa:40:14:bc:
09:ca:48:b9:aa:5b:cd:db:12:28:a3:c3:b4:af:08:ad:a6:82:
bf:6c:17:8c:e0:87:90:64:6f:0e:8f:06:e3:a9:62:40:07:72:
db:0d:24:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:06:18 2026 by rpki-client