Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/36tOtzLRrYiJYwkdVkaH9FrC5uQ.roa
File: 36tOtzLRrYiJYwkdVkaH9FrC5uQ.roa (raw, json)
Hash identifier: JrgBzrUN8JTU70iYUWwE6CqWA0fgpLZQZW6LqKpkCI0=
Subject key identifier: DF:AB:4E:B7:32:D1:AD:88:89:63:09:1D:56:46:87:F4:5A:C2:E6:E4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0CA00D8C9E44A73AD52883BAE44316948
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/36tOtzLRrYiJYwkdVkaH9FrC5uQ.roa
Signing time: Tue 22 Sep 2026 16:44:08 +0000
ROA not before: Tue 22 Sep 2026 16:44:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207957
IP address blocks: 2.26.8.0/24 maxlen: 24
2.26.9.0/24 maxlen: 24
2.26.10.0/24 maxlen: 24
2.26.11.0/24 maxlen: 24
2.26.88.0/24 maxlen: 24
2.26.89.0/24 maxlen: 24
2.26.90.0/24 maxlen: 24
2.26.91.0/24 maxlen: 24
2.26.92.0/24 maxlen: 24
2.26.93.0/24 maxlen: 24
2.26.95.0/24 maxlen: 24
2.27.208.0/24 maxlen: 24
2.27.209.0/24 maxlen: 24
2.27.210.0/24 maxlen: 24
2.27.211.0/24 maxlen: 24
13.143.137.0/24 maxlen: 24
13.143.142.0/24 maxlen: 24
13.143.180.0/22 maxlen: 24
13.143.184.0/24 maxlen: 24
13.143.185.0/24 maxlen: 24
13.143.186.0/24 maxlen: 24
13.143.187.0/24 maxlen: 24
13.143.188.0/22 maxlen: 24
13.143.192.0/24 maxlen: 24
13.143.193.0/24 maxlen: 24
13.143.194.0/24 maxlen: 24
13.143.195.0/24 maxlen: 24
13.143.196.0/22 maxlen: 24
31.76.0.0/24 maxlen: 24
31.76.1.0/24 maxlen: 24
31.76.2.0/24 maxlen: 24
31.76.3.0/24 maxlen: 24
31.76.4.0/24 maxlen: 24
31.76.5.0/24 maxlen: 24
31.76.6.0/24 maxlen: 24
31.76.7.0/24 maxlen: 24
31.76.52.0/24 maxlen: 24
31.76.53.0/24 maxlen: 24
31.76.54.0/24 maxlen: 24
31.76.55.0/24 maxlen: 24
31.76.60.0/24 maxlen: 24
31.76.61.0/24 maxlen: 24
31.76.62.0/24 maxlen: 24
31.76.63.0/24 maxlen: 24
31.76.64.0/24 maxlen: 24
31.76.65.0/24 maxlen: 24
31.76.66.0/24 maxlen: 24
31.76.68.0/24 maxlen: 24
31.76.69.0/24 maxlen: 24
31.76.70.0/24 maxlen: 24
31.76.71.0/24 maxlen: 24
31.76.82.0/24 maxlen: 24
31.76.83.0/24 maxlen: 24
31.76.84.0/24 maxlen: 24
31.76.85.0/24 maxlen: 24
31.76.114.0/24 maxlen: 24
31.76.115.0/24 maxlen: 24
31.77.140.0/24 maxlen: 24
31.77.141.0/24 maxlen: 24
31.77.142.0/24 maxlen: 24
31.77.143.0/24 maxlen: 24
64.188.89.0/24 maxlen: 24
64.188.90.0/24 maxlen: 24
64.188.98.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
77.239.107.0/24 maxlen: 24
144.31.15.0/24 maxlen: 24
144.31.49.0/24 maxlen: 24
144.31.50.0/24 maxlen: 24
144.31.51.0/24 maxlen: 24
144.31.57.0/24 maxlen: 24
144.31.82.0/24 maxlen: 24
144.31.83.0/24 maxlen: 24
144.31.93.0/24 maxlen: 24
144.31.103.0/24 maxlen: 24
144.31.107.0/24 maxlen: 24
144.31.108.0/24 maxlen: 24
144.31.109.0/24 maxlen: 24
144.31.213.0/24 maxlen: 24
144.31.214.0/24 maxlen: 24
144.31.216.0/24 maxlen: 24
144.31.217.0/24 maxlen: 24
144.31.218.0/24 maxlen: 24
144.31.219.0/24 maxlen: 24
144.31.239.0/24 maxlen: 24
144.31.240.0/24 maxlen: 24
144.31.241.0/24 maxlen: 24
144.31.242.0/24 maxlen: 24
144.31.243.0/24 maxlen: 24
144.31.249.0/24 maxlen: 24
150.241.72.0/24 maxlen: 24
150.241.73.0/24 maxlen: 24
150.241.74.0/24 maxlen: 24
150.241.75.0/24 maxlen: 24
150.241.82.0/24 maxlen: 24
150.241.83.0/24 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
179.254.86.0/24 maxlen: 24
185.170.153.0/24 maxlen: 24
185.170.154.0/24 maxlen: 24
193.23.195.0/24 maxlen: 24
193.23.200.0/24 maxlen: 24
193.23.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 18:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:00:d8:c9:e4:4a:73:ad:52:88:3b:ae:44:31:69:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 22 16:44:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfab4eb732d1ad888963091d564687f45ac2e6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:cc:e8:3a:c2:51:7f:3f:1a:f7:05:e9:af:
28:66:e4:08:13:ca:a2:ed:c3:ca:e9:1e:84:f1:6a:
09:39:dd:b4:3a:0a:ac:d9:1c:a0:d0:f6:2c:fa:3f:
03:e2:be:9f:3e:9e:ba:ef:15:60:8d:75:99:7f:21:
70:9e:74:61:85:2c:b7:c1:b8:a3:af:d2:a7:4b:d7:
65:6e:6d:fa:dd:f6:0d:7c:f2:34:f2:f0:37:bb:b0:
18:f3:4b:93:d9:9f:94:fd:6a:38:57:96:d1:e9:a6:
61:cc:c9:54:a1:7a:04:69:b0:46:fe:4b:67:f1:d6:
2c:b1:0f:4a:22:4a:c9:7f:9d:f7:41:63:5b:24:12:
af:6f:54:65:a2:66:eb:e6:ea:24:4e:1e:d1:74:9f:
b1:ee:36:89:12:88:82:b2:77:c6:35:a4:e9:b7:d4:
99:4c:33:1f:67:06:d2:5a:c0:1d:f2:ef:da:0e:74:
28:e6:0a:dc:3e:2c:f4:70:4a:89:6c:8a:31:95:dc:
a3:fd:35:f7:e0:ea:f8:7f:28:01:b5:a3:4c:bd:b0:
dd:bb:be:68:a9:6f:62:f6:1e:30:f7:2f:cb:cf:52:
91:e5:69:3d:4c:38:1a:4e:78:12:23:04:73:7d:d8:
fd:88:ff:e8:29:3e:f9:46:07:df:be:77:bd:b4:29:
7a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AB:4E:B7:32:D1:AD:88:89:63:09:1D:56:46:87:F4:5A:C2:E6:E4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/36tOtzLRrYiJYwkdVkaH9FrC5uQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.8.0/22
2.26.88.0-2.26.93.255
2.26.95.0/24
2.27.208.0/22
13.143.137.0/24
13.143.142.0/24
13.143.180.0-13.143.199.255
31.76.0.0/21
31.76.52.0/22
31.76.60.0-31.76.66.255
31.76.68.0/22
31.76.82.0-31.76.85.255
31.76.114.0/23
31.77.140.0/22
64.188.89.0-64.188.90.255
64.188.98.0/24
64.188.127.0/24
77.239.107.0/24
144.31.15.0/24
144.31.49.0-144.31.51.255
144.31.57.0/24
144.31.82.0/23
144.31.93.0/24
144.31.103.0/24
144.31.107.0-144.31.109.255
144.31.213.0-144.31.214.255
144.31.216.0/22
144.31.239.0-144.31.243.255
144.31.249.0/24
150.241.72.0/22
150.241.82.0/23
150.241.100.0/22
179.254.86.0/24
185.170.153.0-185.170.154.255
193.23.195.0/24
193.23.200.0/24
193.23.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f9:9b:68:77:1b:22:6b:90:c8:e6:3c:5b:b2:48:a2:18:13:
84:4c:6a:6c:93:cb:a8:7a:97:ae:8c:f7:1e:35:21:3f:c9:78:
a1:0a:0b:5b:58:64:19:8c:9b:34:ca:b7:64:5a:d8:44:2b:da:
39:86:87:9e:40:25:bc:18:76:7e:4e:2c:3d:c9:02:07:b0:e9:
3f:f1:9d:eb:a0:33:06:62:6f:9f:fb:cb:e9:c2:52:41:f8:84:
f5:36:66:fb:af:8d:29:10:9c:1f:f4:9f:b3:0f:3b:f6:63:2c:
f6:35:4a:d2:53:44:43:4a:28:aa:f0:70:35:c3:49:24:46:6f:
c4:5c:f0:9a:b3:7c:43:42:de:43:7b:65:39:52:c4:fa:20:87:
7d:67:49:b8:c2:9b:dc:bc:51:32:39:23:ea:35:c6:c1:f1:25:
cf:e1:0d:4d:ff:7b:1d:f2:e9:c3:ac:96:cf:cd:3f:31:74:12:
e5:d7:f0:58:4c:02:0c:3a:80:e9:3c:2c:58:8a:88:aa:05:e3:
f3:6b:76:a1:22:e6:fe:bf:f1:6e:f0:34:0e:bd:7b:6e:61:f5:
af:d9:3b:be:c1:2f:97:7b:ca:3e:75:f5:cd:e0:41:0f:24:9d:
e0:3c:51:aa:aa:e5:88:50:dd:7e:62:60:86:dc:5b:28:47:bb:
6f:f8:f8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:51:14 2026 by rpki-client