Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/fMnyGlrLrKSVRF6523iIHhXYP44.roa
File: fMnyGlrLrKSVRF6523iIHhXYP44.roa (raw, json)
Hash identifier: P8TGEnZAVxWrXEmvRu+o/gsgRvtBDZrtUwCxKQD3yoI=
Subject key identifier: 7C:C9:F2:1A:5A:CB:AC:A4:95:44:5E:B9:DB:78:88:1E:15:D8:3F:8E
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A10C57172DEE430C3CCE9C6225B90EDFE9
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/fMnyGlrLrKSVRF6523iIHhXYP44.roa
Signing time: Mon 05 Oct 2026 13:53:16 +0000
ROA not before: Mon 05 Oct 2026 13:53:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 103.17.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Nov 2026 01:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:57:17:2d:ee:43:0c:3c:ce:9c:62:25:b9:0e:df:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Oct 5 13:53:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cc9f21a5acbaca495445eb9db78881e15d83f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:71:7b:89:37:47:24:d8:eb:b0:79:a7:29:
76:77:45:91:bb:b2:dd:ed:bc:9a:bf:de:0e:9b:d4:
f2:76:a4:3c:df:5a:d6:41:e7:4e:3a:1f:58:a7:19:
61:8c:d4:f0:4f:9f:38:4f:52:dd:7a:ee:9e:72:7a:
55:48:ac:e2:1c:29:02:a9:c1:76:75:8b:b7:ca:e7:
9d:fd:81:cd:cb:d6:f9:96:ad:20:77:09:69:3f:93:
a0:f0:b3:06:ff:e4:e6:22:49:8f:17:15:3b:88:f2:
3f:c4:7e:ff:f8:bf:2b:2a:e8:f3:42:78:3c:ed:ac:
8c:e0:1b:63:4b:81:ee:82:bb:36:2b:88:09:07:dd:
58:3a:fd:06:59:5a:1a:a1:a4:96:32:60:d3:4b:59:
0e:ba:bb:65:68:97:8e:98:b5:27:32:17:0d:25:5a:
26:7e:11:55:cf:06:ea:42:5d:57:81:1d:d6:26:fc:
2c:2d:dd:aa:32:05:1b:a5:c4:2c:c2:6a:22:eb:dd:
60:f5:82:6d:9b:cb:3d:74:c0:3f:c9:7d:bf:c6:85:
20:84:14:3c:09:3f:b6:3d:c4:89:51:9d:fd:ea:52:
e5:86:4e:ff:06:5e:df:de:f5:3c:aa:2e:f9:92:25:
34:95:24:46:f2:d4:66:b0:65:b3:9e:82:59:eb:0a:
be:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C9:F2:1A:5A:CB:AC:A4:95:44:5E:B9:DB:78:88:1E:15:D8:3F:8E
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/fMnyGlrLrKSVRF6523iIHhXYP44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b9:98:fd:a3:17:3c:7f:12:ab:d4:7a:1c:a6:60:fe:8a:66:
22:ed:72:c6:01:48:2f:e8:6e:c2:f8:73:91:21:09:5b:ab:d1:
2d:d3:70:34:c7:5d:f5:bc:3a:5a:58:91:69:80:17:b7:13:c9:
d7:ce:f0:d8:b3:fe:47:7c:e1:67:b8:02:fe:6c:35:b3:c7:e4:
dc:7e:db:56:0b:31:8a:a5:58:65:d8:a8:7c:b1:50:9b:fc:93:
ef:ea:4a:9c:4d:0f:72:69:59:28:17:aa:a7:c8:ac:c9:03:19:
48:d9:65:26:a9:82:f3:1f:69:27:da:54:72:b3:29:76:e9:86:
33:e2:58:08:6c:21:60:95:18:95:ce:bb:28:3e:6a:c5:76:f7:
a0:f1:e2:3b:ac:fe:f6:c1:1c:ac:4d:fa:a3:dc:78:f8:6a:c4:
b4:1c:cf:39:81:6a:ca:10:3e:a4:19:e4:30:14:0f:69:84:ca:
63:89:03:40:96:20:1b:83:8f:dc:c8:f5:08:d7:ab:18:c4:df:
82:82:10:eb:a6:64:47:7c:bb:14:a3:10:54:0a:ed:aa:43:4a:
57:54:25:0a:7a:dd:a4:12:7f:41:dd:2d:cb:9c:0f:8f:c0:62:
c7:f8:ab:46:0a:f5:48:45:d4:92:21:97:d0:9b:4c:2a:4a:d8:
1e:96:05:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:27:36 2026 by rpki-client