Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7FWwXy1ZDYTqqhtc3cWRYbAEUbI.roa
File: 7FWwXy1ZDYTqqhtc3cWRYbAEUbI.roa (raw, json)
Hash identifier: blDNVJvdA5g5tDp1GCsEQcd+1mGD+I8Si/7TOReSvnE=
Subject key identifier: EC:55:B0:5F:2D:59:0D:84:EA:AA:1B:5C:DD:C5:91:61:B0:04:51:B2
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0266DDBC2A6A4520ACB34225B77A0675C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7FWwXy1ZDYTqqhtc3cWRYbAEUbI.roa
Signing time: Fri 21 Aug 2026 22:25:28 +0000
ROA not before: Fri 21 Aug 2026 22:25:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219147
IP address blocks: 2.27.142.0/24 maxlen: 24
2.27.143.0/24 maxlen: 24
13.143.206.0/24 maxlen: 24
31.77.60.0/24 maxlen: 24
31.77.178.0/24 maxlen: 24
31.77.179.0/24 maxlen: 24
31.77.253.0/24 maxlen: 24
201.10.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Sep 2026 18:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:6d:db:c2:a6:a4:52:0a:cb:34:22:5b:77:a0:67:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 21 22:25:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec55b05f2d590d84eaaa1b5cddc59161b00451b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:df:ec:e6:9e:21:41:5d:5a:2a:b2:69:16:
62:6f:b3:bc:45:5d:c6:3c:b2:9b:d1:42:c7:f0:7f:
4f:42:51:3a:6b:b9:90:3a:a9:5b:bf:16:cd:04:a9:
ac:6a:53:1e:1b:51:61:a5:4e:00:9f:60:b9:af:a8:
8c:f3:ec:22:2e:9e:22:d0:f6:d6:4c:05:1e:01:f2:
55:a3:35:b8:47:34:9f:3c:6b:68:9d:5c:36:ab:47:
d2:27:ba:d9:6f:4d:23:d1:48:44:3d:48:29:ad:58:
cb:97:47:5d:b8:4d:61:f3:a7:1b:5b:7b:0c:40:f3:
08:44:c9:91:79:5d:bb:e4:06:51:c1:1f:45:22:42:
77:ee:37:5e:7b:e4:37:70:9a:17:35:64:8e:94:1b:
22:cf:7e:db:28:e3:03:f5:a8:11:81:0e:13:ed:65:
5f:05:db:61:b9:ea:7f:35:c6:5b:34:45:fa:9a:0b:
ee:5e:9a:0f:44:99:04:db:5c:f9:02:5d:73:00:40:
8f:dd:80:5c:65:29:55:e7:54:cf:20:d4:ff:d3:d6:
68:2b:67:2a:24:dd:9a:ea:c5:87:13:f8:96:0a:fc:
b6:8a:34:d7:65:d0:f8:96:85:fc:de:a0:ea:5c:02:
59:08:d1:e8:f2:e3:82:94:b5:5a:95:9c:a7:78:41:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:55:B0:5F:2D:59:0D:84:EA:AA:1B:5C:DD:C5:91:61:B0:04:51:B2
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7FWwXy1ZDYTqqhtc3cWRYbAEUbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.142.0/23
13.143.206.0/24
31.77.60.0/24
31.77.178.0/23
31.77.253.0/24
201.10.90.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:18:94:e8:bf:0e:a7:75:52:97:ad:ae:59:eb:1b:20:66:24:
9f:cc:b9:95:2b:a3:fd:ce:99:80:ea:5a:55:bf:c4:7f:89:2d:
53:c4:80:77:f2:fe:71:03:b6:95:16:3b:4d:a7:a6:92:64:69:
a2:0a:c3:2a:25:61:65:a3:d3:1c:74:44:fd:9c:0e:30:f5:a6:
29:5a:fb:48:e9:37:af:f2:64:61:9a:bc:13:bc:52:0f:7d:b4:
af:92:7f:f3:71:31:5e:1d:2b:99:54:22:14:d9:da:f8:43:18:
10:a9:24:40:3d:d6:ac:e2:43:33:e9:b1:0d:a6:15:9d:b1:04:
05:4b:ce:55:4d:9f:a1:ba:61:da:97:c5:1b:cf:67:e3:5e:f6:
56:af:12:7f:4d:c9:bf:c9:8c:ad:f7:af:b6:fe:e3:c9:0b:d5:
a3:96:cc:8e:ff:75:74:4d:08:ae:31:16:f7:64:cd:ac:88:4a:
2e:60:94:7c:b7:6d:d8:08:b7:47:89:6b:3f:4d:34:c9:61:a7:
37:86:4f:9b:0c:42:df:26:72:83:54:0d:b2:b5:fa:4a:0d:00:
2c:0c:3c:96:35:81:6f:03:3a:cb:8a:ae:d1:7d:c7:c0:7d:19:
40:65:ed:11:c4:a5:eb:a2:a5:b8:fc:57:45:f8:32:e8:dc:cf:
37:cc:ff:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:39:53 2026 by rpki-client