Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vi2ECM0--AHCO3AddX9OmfM9-qg.roa
File: vi2ECM0--AHCO3AddX9OmfM9-qg.roa (raw, json)
Hash identifier: HXbWEyrBpvsSH9TmZ8+pCFZDw2SSyhAuMzqmujuNa4M=
Subject key identifier: BE:2D:84:08:CD:3E:F8:01:C2:3B:70:1D:75:7F:4E:99:F3:3D:FA:A8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CBAB0141EEA86E4AF4C0BD9DB1355968B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vi2ECM0--AHCO3AddX9OmfM9-qg.roa
Signing time: Wed 04 Mar 2026 21:10:27 +0000
ROA not before: Wed 04 Mar 2026 21:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203374
IP address blocks: 103.91.147.0/24 maxlen: 24
141.193.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Mar 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:b0:14:1e:ea:86:e4:af:4c:0b:d9:db:13:55:96:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 4 21:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be2d8408cd3ef801c23b701d757f4e99f33dfaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:02:15:d5:fc:e3:f7:41:30:14:12:44:95:
03:0d:6a:da:9a:4a:b9:6e:15:5f:f9:1c:ec:44:71:
52:f7:ab:18:52:43:6d:dd:f5:6e:38:6e:17:b4:9c:
7e:54:a3:e7:af:73:18:36:80:ac:c5:84:2a:72:9f:
96:c3:58:b1:e5:f4:5c:46:73:6a:89:fd:6b:a8:55:
b3:0d:09:a5:aa:93:65:97:88:77:14:18:f1:4e:6d:
6e:d2:13:2a:4d:f2:be:d8:9f:ca:f7:c6:59:ae:9d:
4c:2a:29:40:e1:ff:83:78:6f:2e:d2:a6:5d:84:9e:
52:a6:9f:ae:0f:24:4c:04:d0:5e:42:0d:0c:13:23:
31:64:6c:ad:6c:f1:d6:b8:82:af:22:ae:ff:83:7c:
82:ae:4d:cb:18:d5:4a:70:5b:1b:f4:47:30:41:19:
13:c5:0c:86:aa:2f:56:06:13:e3:6a:60:e4:7f:a0:
a4:93:43:44:de:43:cc:0b:f1:88:ed:1b:8d:e4:1c:
6a:ca:76:3c:53:35:a9:c5:2e:ef:1a:a3:92:84:24:
59:ff:68:1d:0f:8c:ba:bc:35:2e:fb:0e:f1:69:9d:
3d:78:87:3d:3b:2d:53:96:24:e9:56:dd:8a:b9:28:
c9:5e:ce:f7:01:a7:5a:95:ae:4b:96:80:cb:6b:5f:
81:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2D:84:08:CD:3E:F8:01:C2:3B:70:1D:75:7F:4E:99:F3:3D:FA:A8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vi2ECM0--AHCO3AddX9OmfM9-qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.91.147.0/24
141.193.20.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:34:68:16:06:13:65:f0:ef:1c:20:6c:bb:40:b9:96:ad:86:
8f:f0:2d:79:df:57:a6:71:22:a7:fe:d8:8b:04:73:b9:b6:1b:
06:a1:23:78:59:71:00:b6:ae:99:12:5d:0c:73:75:e3:db:c2:
fb:ef:0f:64:3b:a1:fe:03:93:c7:ba:ed:72:c1:9a:1b:f6:18:
80:8c:a1:31:17:15:e4:45:2b:16:f1:26:52:78:6d:b4:23:fe:
40:71:47:13:be:b1:8b:e1:53:eb:2b:c7:e4:1b:e5:fd:02:ee:
3e:1f:20:b9:c1:82:a6:ba:21:b5:63:f6:2a:e5:ff:35:82:7e:
11:3a:5b:eb:de:e4:2a:5b:9d:27:e3:bc:fa:ee:98:12:69:48:
13:0a:1e:1e:ce:11:2d:7f:99:e6:66:a4:ce:7b:a8:07:80:2f:
36:d7:f5:56:12:db:f0:a6:8f:28:ce:3f:5a:39:80:ef:0b:ef:
1d:05:a7:05:0a:fb:f9:dd:34:3c:d9:dc:9f:21:bd:2a:e2:62:
3d:93:41:45:82:8c:61:23:84:33:71:89:3e:dc:6e:ac:5f:63:
21:e5:57:bd:26:80:f8:c2:5f:72:35:e8:61:97:ca:ac:a4:4b:
df:18:95:35:43:9c:bd:37:1e:98:58:6f:23:df:7a:ff:7f:26:
b2:f9:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 19:05:57 2026 by rpki-client