Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CHlvrjvja-wxlanbdwOVGhOlt_A.roa
File: CHlvrjvja-wxlanbdwOVGhOlt_A.roa (raw, json)
Hash identifier: 5NoY1UEZMzL6MMa8fP9L3cpcikle7gW2G/cR09zMraw=
Subject key identifier: 08:79:6F:AE:3B:E3:6B:EC:31:95:A9:DB:77:03:95:1A:13:A5:B7:F0
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E1D0881DFF2CFDCD3D30645902E9C77B1
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CHlvrjvja-wxlanbdwOVGhOlt_A.roa
Signing time: Tue 12 May 2026 16:32:37 +0000
ROA not before: Tue 12 May 2026 16:32:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 2.26.144.0/24 maxlen: 24
2.26.146.0/24 maxlen: 24
2.26.147.0/24 maxlen: 24
2.26.149.0/24 maxlen: 24
2.26.192.0/21 maxlen: 24
2.26.228.0/22 maxlen: 24
2.27.97.0/24 maxlen: 24
2.27.126.0/24 maxlen: 24
2.27.140.0/23 maxlen: 24
2.27.152.0/24 maxlen: 24
144.31.39.0/24 maxlen: 24
144.31.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 May 2026 21:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:08:81:df:f2:cf:dc:d3:d3:06:45:90:2e:9c:77:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 12 16:32:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08796fae3be36bec3195a9db7703951a13a5b7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:33:cc:ce:83:65:b5:46:d6:d0:17:4d:d9:
4e:5b:79:20:c2:bc:2f:91:05:a4:f4:fc:cd:ef:b8:
4d:99:1f:ba:b3:d1:c2:c3:21:d8:72:4f:25:5f:d6:
d6:5d:19:0e:5c:d4:fe:e7:66:8b:64:69:c3:ae:01:
87:f7:cc:78:d2:68:04:55:4f:81:c9:32:08:34:05:
01:03:66:a5:b4:44:7b:53:3e:0a:d1:4c:12:13:14:
5f:75:00:18:bb:d1:6b:0f:e5:39:04:75:b2:e3:e8:
91:3e:53:ad:2d:b3:aa:f2:e2:d1:6d:3d:fa:46:d4:
03:b3:fe:02:38:63:0d:b5:a3:a1:72:2a:48:24:47:
0b:14:f5:3d:c6:8c:96:fd:33:5a:57:76:86:3e:f0:
4a:b4:b2:2e:c8:b2:80:0b:f3:b9:3f:da:3a:5f:cb:
1a:88:b1:59:93:3d:ac:94:69:40:93:a6:f0:3a:e0:
c9:bd:58:b6:4a:2e:4a:7c:d2:cb:dc:a0:9b:dd:cd:
1b:c3:0c:60:85:b0:e5:16:69:54:d4:91:11:7e:e8:
21:a9:10:e6:17:b3:bb:ad:fe:36:9f:fd:b0:50:cc:
be:9f:7e:a4:29:1d:68:22:1c:6b:d1:04:06:67:99:
97:10:14:86:7b:f9:3d:35:aa:38:f2:3b:c3:83:fa:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:79:6F:AE:3B:E3:6B:EC:31:95:A9:DB:77:03:95:1A:13:A5:B7:F0
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CHlvrjvja-wxlanbdwOVGhOlt_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.144.0/24
2.26.146.0/23
2.26.149.0/24
2.26.192.0/21
2.26.228.0/22
2.27.97.0/24
2.27.126.0/24
2.27.140.0/23
2.27.152.0/24
144.31.39.0/24
144.31.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:50:8b:df:4e:f9:e4:56:e2:a8:76:28:b2:93:36:be:9c:27:
36:ac:8e:f2:eb:38:81:04:98:14:c6:d9:48:64:5e:d1:df:83:
87:c2:a3:2c:0e:f8:60:d6:ce:6e:61:dc:11:16:52:25:04:fa:
7a:11:f1:c5:23:0c:72:30:03:7d:ed:10:bc:3f:cd:94:33:ca:
96:d7:bf:a7:4d:a9:3e:41:95:01:63:57:c3:a7:6a:75:18:5e:
0e:e9:68:5b:a3:d1:ab:b2:66:ca:3d:8f:12:93:ed:80:46:7d:
f4:c4:d7:62:ce:7b:8b:7a:1d:4c:da:cb:06:f1:4b:55:04:7c:
e9:45:6f:16:5a:85:f1:11:c3:e4:f3:e2:4d:21:80:2a:b5:bc:
17:f0:c3:80:f6:06:95:eb:80:7c:dc:ec:c4:4e:d5:25:9c:bc:
50:a0:7a:62:b1:3c:33:69:8f:9e:7d:b9:07:da:02:91:b2:f2:
24:04:6a:c8:3e:fb:ed:85:40:3a:bf:20:7f:72:3a:30:1d:25:
71:c4:5e:bd:c9:7a:c7:2d:fa:08:9f:29:3c:39:21:aa:7c:74:
76:0b:c1:68:57:88:10:3d:e5:21:9c:52:b4:5b:c9:b5:5c:bf:
e1:7b:a9:64:2a:a1:fb:bb:d4:42:cc:b5:ac:4b:f5:4a:97:9a:
c4:be:fa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:51:36 2026 by rpki-client