Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sldZQRI7iIAgdzNMGRWc1_-fP20.roa
File: sldZQRI7iIAgdzNMGRWc1_-fP20.roa (raw, json)
Hash identifier: pzwCwXSq+oeurAVKxzDQde0t2CMDr6xb0ixhmxgHqPg=
Subject key identifier: B2:57:59:41:12:3B:88:80:20:77:33:4C:19:15:9C:D7:FF:9F:3F:6D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FA47CE255AAEDC33D31D10A8DF549424C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sldZQRI7iIAgdzNMGRWc1_-fP20.roa
Signing time: Mon 27 Jul 2026 16:51:15 +0000
ROA not before: Mon 27 Jul 2026 16:51:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 2.26.165.0/24 maxlen: 24
2.26.167.0/24 maxlen: 24
2.26.170.0/24 maxlen: 24
2.26.175.0/24 maxlen: 24
2.26.189.0/24 maxlen: 24
2.26.191.0/24 maxlen: 24
2.26.208.0/21 maxlen: 24
2.27.82.0/24 maxlen: 24
2.27.119.0/24 maxlen: 24
2.27.140.0/23 maxlen: 24
2.27.142.0/23 maxlen: 24
2.27.162.0/24 maxlen: 24
2.27.163.0/24 maxlen: 24
2.27.172.0/24 maxlen: 24
2.27.196.0/22 maxlen: 24
2.27.200.0/21 maxlen: 24
2.27.224.0/21 maxlen: 24
2.27.232.0/24 maxlen: 24
2.27.241.0/24 maxlen: 24
2.27.243.0/24 maxlen: 24
2.27.249.0/24 maxlen: 24
2.27.255.0/24 maxlen: 24
31.77.96.0/24 maxlen: 24
31.77.97.0/24 maxlen: 24
31.77.113.0/24 maxlen: 24
31.77.178.0/23 maxlen: 24
31.77.209.0/24 maxlen: 24
31.77.211.0/24 maxlen: 24
31.77.219.0/24 maxlen: 24
31.77.220.0/24 maxlen: 24
31.77.225.0/24 maxlen: 24
31.77.239.0/24 maxlen: 24
31.77.242.0/24 maxlen: 24
31.77.243.0/24 maxlen: 24
31.77.251.0/24 maxlen: 24
144.31.39.0/24 maxlen: 24
144.31.41.0/24 maxlen: 24
144.31.145.0/24 maxlen: 24
144.31.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jul 2026 16:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:7c:e2:55:aa:ed:c3:3d:31:d1:0a:8d:f5:49:42:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 27 16:51:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2575941123b88802077334c19159cd7ff9f3f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:75:6e:93:c9:d1:20:9d:c7:c1:f9:47:1b:
f1:4a:15:5d:7d:81:d6:48:94:09:9a:2b:8b:a1:5e:
01:de:c1:4a:8b:36:d0:ef:b6:00:9f:b5:31:85:06:
ed:f7:17:54:91:1b:0f:74:33:e2:ad:af:16:69:91:
68:17:43:b5:2c:90:44:98:a3:14:59:eb:45:dd:6b:
22:33:28:dd:70:39:42:4a:f5:03:d0:87:d6:63:93:
90:93:73:6c:6c:97:3e:fb:82:67:38:f8:04:1e:37:
40:cc:18:6e:45:7a:d6:72:17:07:0a:24:0f:d1:ee:
6e:6e:8b:9d:1b:15:7c:9e:d1:e8:cf:d3:1e:9a:9d:
8a:9c:0f:d5:ce:d0:6f:92:2e:02:2d:4b:ff:4b:e2:
b2:fd:15:f6:67:de:a3:b6:07:a1:37:35:0b:e8:0e:
b6:88:1f:02:39:04:f8:c8:d9:45:b5:c2:07:75:93:
8e:4e:c5:77:a9:9b:0b:5c:18:b5:54:dc:77:47:35:
80:02:47:d4:e3:f5:10:7f:c5:96:c1:90:f5:d7:53:
8c:39:4f:7f:9e:19:81:e6:c5:f9:12:21:a2:7b:78:
3e:2b:be:a5:48:0b:87:55:1e:9e:6a:8b:66:d4:e3:
62:9d:bb:9c:e4:78:e9:4b:f3:4c:c6:45:2a:86:85:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:57:59:41:12:3B:88:80:20:77:33:4C:19:15:9C:D7:FF:9F:3F:6D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sldZQRI7iIAgdzNMGRWc1_-fP20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.165.0/24
2.26.167.0/24
2.26.170.0/24
2.26.175.0/24
2.26.189.0/24
2.26.191.0/24
2.26.208.0/21
2.27.82.0/24
2.27.119.0/24
2.27.140.0/22
2.27.162.0/23
2.27.172.0/24
2.27.196.0-2.27.207.255
2.27.224.0-2.27.232.255
2.27.241.0/24
2.27.243.0/24
2.27.249.0/24
2.27.255.0/24
31.77.96.0/23
31.77.113.0/24
31.77.178.0/23
31.77.209.0/24
31.77.211.0/24
31.77.219.0-31.77.220.255
31.77.225.0/24
31.77.239.0/24
31.77.242.0/23
31.77.251.0/24
144.31.39.0/24
144.31.41.0/24
144.31.145.0/24
144.31.150.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:82:ee:06:42:10:3e:6f:75:a7:4c:89:71:6a:4e:82:78:2d:
10:b5:1f:51:76:d4:e1:f9:9d:78:24:d6:b8:9e:f7:1c:83:27:
1a:fc:a4:89:11:4a:3d:49:d4:63:bb:35:b0:d4:3e:ae:d6:97:
45:54:e4:00:13:6d:1a:38:91:f1:a9:ee:af:51:ad:3e:7f:1e:
56:45:38:87:52:30:a0:73:d8:52:2b:f2:05:ab:08:74:e8:92:
9b:a2:fa:4c:ee:45:b6:b2:64:d1:5e:f3:1e:fb:f2:9f:12:01:
93:e4:45:74:d9:51:0a:59:ad:75:d9:8f:c5:5d:3b:8d:73:f0:
1c:73:65:0b:6b:6f:b6:ab:d4:31:d2:ef:51:9b:2d:01:57:9f:
98:3e:f9:9c:87:9e:a8:26:c6:a8:a7:32:42:13:cd:c5:a6:c2:
d5:57:bd:b3:5c:f4:d3:d7:94:bc:60:13:a8:b9:7b:11:a9:81:
d9:d3:7a:fd:c0:e5:80:22:71:00:9e:fe:fd:83:55:1c:08:a6:
3c:c8:6a:e0:fd:b0:7e:b0:9f:4d:b4:6d:12:5b:98:ef:21:ea:
c9:ad:b0:8a:b8:83:32:61:32:69:c2:97:be:26:ba:61:37:62:
cb:09:26:dc:ca:e8:73:bb:c8:06:c0:37:5b:bc:5c:60:f3:76:
24:5b:81:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:04:17 2026 by rpki-client