Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/TeRI4Khd5wsKTLn7wRCnM7L7Zbo.roa
File:                     TeRI4Khd5wsKTLn7wRCnM7L7Zbo.roa (raw, json)
Hash identifier:          LVVmPS4lCYwilv9060ZY3c5njj7noViRNZGu9IrDUcA=
Subject key identifier:   4D:E4:48:E0:A8:5D:E7:0B:0A:4C:B9:FB:C1:10:A7:33:B2:FB:65:BA
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       01A0CD63D93FBA99393785796D1ADA27E294
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/TeRI4Khd5wsKTLn7wRCnM7L7Zbo.roa
Signing time:             Wed 23 Sep 2026 08:31:07 +0000
ROA not before:           Wed 23 Sep 2026 08:31:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        62.105.192.0/24 maxlen: 24
                          62.132.2.0/24 maxlen: 24
                          62.192.110.0/24 maxlen: 24
                          77.67.26.0/24 maxlen: 24
                          77.67.27.0/24 maxlen: 24
                          77.67.92.0/24 maxlen: 24
                          81.94.104.0/21 maxlen: 24
                          194.77.3.0/24 maxlen: 24
                          194.77.6.0/24 maxlen: 24
                          194.77.78.0/24 maxlen: 24
                          194.77.219.0/24 maxlen: 24
                          194.122.78.0/24 maxlen: 24
                          195.21.129.0/24 maxlen: 24
                          195.21.145.0/24 maxlen: 24
                          195.21.146.0/24 maxlen: 24
                          195.162.248.0/24 maxlen: 24
                          212.189.113.0/24 maxlen: 24
                          212.189.116.0/24 maxlen: 24
                          212.222.171.0/24 maxlen: 24
                          217.8.194.0/24 maxlen: 24
                          217.8.197.0/24 maxlen: 24
                          217.8.199.0/24 maxlen: 24
                          217.8.201.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 24 Sep 2026 08:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:63:d9:3f:ba:99:39:37:85:79:6d:1a:da:27:e2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Sep 23 08:31:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4de448e0a85de70b0a4cb9fbc110a733b2fb65ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:21:47:ba:98:32:97:02:95:07:5d:17:20:
                    f6:a1:88:1d:bd:6d:08:37:95:62:45:4d:3c:62:86:
                    d2:fe:07:23:6b:d3:bf:a8:36:1c:ce:41:fd:6d:98:
                    85:8f:9f:c0:a4:cf:2f:07:c9:05:15:34:dd:e3:ac:
                    9c:ae:00:60:3d:fb:93:29:41:5f:ab:e0:e5:d1:08:
                    e5:44:48:d0:42:8c:cc:8b:4c:d5:4a:ce:42:e5:58:
                    d8:c4:6b:68:51:07:92:17:ed:7f:f8:c5:ad:11:fd:
                    b0:71:0d:6b:0e:53:d9:e6:32:4b:09:44:07:bd:a3:
                    10:c1:c8:38:b9:48:fc:03:4c:66:a4:d3:c7:ef:3d:
                    d4:99:c0:05:31:9a:13:64:4c:f1:87:5c:f5:2c:0d:
                    4e:c6:35:cc:7c:66:f7:0e:98:52:23:cc:1b:ec:16:
                    98:95:60:f9:ff:79:87:5e:e1:c7:c6:67:b5:66:f3:
                    51:ef:32:80:9b:89:ce:84:6a:62:ee:81:6d:16:07:
                    cc:83:bf:d4:0e:b9:10:a2:6f:80:d0:10:e2:f9:73:
                    7c:40:e7:13:76:24:c3:8f:f4:ab:34:bf:e5:45:63:
                    f8:10:54:7f:2a:d4:ab:d2:73:4a:bc:5b:11:92:ea:
                    a0:a3:98:42:96:73:dc:d4:45:81:09:d7:f5:51:fc:
                    a7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E4:48:E0:A8:5D:E7:0B:0A:4C:B9:FB:C1:10:A7:33:B2:FB:65:BA
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/TeRI4Khd5wsKTLn7wRCnM7L7Zbo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.105.192.0/24
                  62.132.2.0/24
                  62.192.110.0/24
                  77.67.26.0/23
                  77.67.92.0/24
                  81.94.104.0/21
                  194.77.3.0/24
                  194.77.6.0/24
                  194.77.78.0/24
                  194.77.219.0/24
                  194.122.78.0/24
                  195.21.129.0/24
                  195.21.145.0-195.21.146.255
                  195.162.248.0/24
                  212.189.113.0/24
                  212.189.116.0/24
                  212.222.171.0/24
                  217.8.194.0/24
                  217.8.197.0/24
                  217.8.199.0/24
                  217.8.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:2f:58:3e:d1:c0:e0:6c:3d:da:df:b6:75:9c:66:b9:3f:cb:
         d1:fb:5b:b8:40:83:85:c8:77:31:33:6f:af:df:09:ea:e3:f1:
         6a:e7:ee:3a:7c:f3:7b:3c:12:fd:97:43:b2:28:e6:8a:a4:5f:
         d7:b3:23:d2:3e:91:6c:f1:06:75:19:83:da:bc:fb:d3:d9:1a:
         36:52:e3:5e:f0:90:8a:3a:39:c9:91:41:45:b5:35:24:10:b0:
         54:3b:69:19:7d:38:33:9c:dd:18:0a:f6:ab:a0:48:73:55:66:
         ce:ee:0a:d6:fd:5d:d9:32:93:45:2e:1b:4d:7c:2f:b2:09:a6:
         b8:87:8c:2b:68:22:cf:b2:6a:83:b8:6a:19:e8:c7:7c:56:bf:
         0e:13:96:c9:f9:6b:b4:cf:3c:fb:38:98:bf:1e:db:9c:1d:7d:
         40:69:01:6a:f8:31:e1:20:f3:b4:cf:00:df:8e:6a:6f:1a:3a:
         ee:e5:4b:2e:68:d8:20:af:6d:36:59:56:3a:35:73:b4:db:fd:
         3a:42:16:61:be:ed:fe:ed:d3:33:e9:39:29:94:cb:eb:15:b3:
         68:b4:c2:c7:5a:15:24:14:25:88:8c:8a:1a:b0:6a:f4:1f:e9:
         fe:b6:56:ab:13:8f:61:67:90:64:8e:82:7b:65:2e:75:fb:ae:
         c7:a0:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:37:42 2026 by rpki-client