Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137392e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3137392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: jlrA5lCuI9MoopELhlBVaCAvisggUaEq8Z4FRoQe8OQ=
Subject key identifier: 6C:C7:B1:8F:AA:77:4D:2E:8D:78:B6:3A:BA:61:8E:90:5D:8B:40:AE
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 4FAC7B63493AC4C5631E22610E5409565F956291
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137392e302f32342d3234203d3e20383334.roa
Signing time: Sat 17 Oct 2026 05:21:49 +0000
ROA not before: Sat 17 Oct 2026 05:16:49 +0000
ROA not after: Sat 16 Oct 2027 05:21:49 +0000
asID: 834
IP address blocks: 109.110.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Oct 2026 16:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ac:7b:63:49:3a:c4:c5:63:1e:22:61:0e:54:09:56:5f:95:62:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Oct 17 05:16:49 2026 GMT
Not After : Oct 16 05:21:49 2027 GMT
Subject: CN=6CC7B18FAA774D2E8D78B63ABA618E905D8B40AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:f4:38:19:ea:07:0a:29:54:63:bf:9d:b1:
ee:d2:8f:de:c1:50:0b:06:00:a5:89:55:80:05:ac:
6d:ea:dc:fa:35:6d:2b:dd:e1:7b:94:1d:ec:36:75:
49:25:e8:bd:c2:94:a4:2d:b2:0c:1c:92:06:f6:ce:
02:72:98:dd:55:e2:75:75:21:03:a9:75:de:c8:02:
9a:a2:70:48:3a:26:1e:fd:6d:0d:a8:05:a4:59:f7:
63:18:f2:bd:b3:50:85:c4:64:5e:16:d9:93:ca:3e:
30:ab:3b:8a:c4:e2:bf:4d:56:8e:0e:fa:51:bf:c8:
c8:54:f9:4a:b7:e3:3d:58:b9:61:7b:31:9b:e1:5c:
c6:cc:e3:ce:df:2e:53:e6:96:d1:7b:9a:a4:75:48:
75:84:63:f0:e3:74:4a:24:8e:72:92:e2:54:ef:e4:
d9:83:04:60:62:19:10:24:6b:1f:b7:13:46:b6:3c:
33:8b:31:b9:8d:02:30:36:c7:75:0d:a7:c1:ad:61:
24:41:0c:df:68:86:db:17:ee:a3:ba:02:6f:c8:4c:
ca:56:31:f7:3d:db:06:27:78:4a:98:fa:3f:0e:ad:
db:f2:12:e6:d0:bb:01:dd:74:bf:d5:a8:8d:6d:be:
10:e7:f5:51:50:79:cf:11:b6:4a:5f:7a:42:e1:df:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C7:B1:8F:AA:77:4D:2E:8D:78:B6:3A:BA:61:8E:90:5D:8B:40:AE
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.179.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ab:f8:ea:3d:b0:f6:95:02:56:43:98:d9:a7:7e:48:c5:78:
60:75:73:74:16:b4:9d:90:50:1c:e1:97:33:c4:c5:ce:f3:38:
b3:ec:cc:c4:de:b8:8b:67:ae:56:3b:17:5a:00:f4:1f:91:7e:
5f:95:0b:4c:03:02:c5:49:5f:80:ee:cb:42:31:a5:5a:e0:c9:
30:16:f3:5b:7b:61:e4:5e:cd:94:1d:20:58:81:76:57:f9:58:
64:43:eb:07:63:60:83:db:29:fd:df:a2:54:c1:65:02:f5:37:
ac:a8:65:c4:d0:9f:85:3e:62:1b:d2:2f:07:65:15:d9:22:ca:
c3:3d:ad:24:9f:e9:e0:93:4b:cb:fd:f6:35:a8:4b:b2:70:a9:
7b:29:76:1a:1b:5f:7d:a6:83:76:13:39:34:9e:5b:6e:ee:14:
c5:ab:53:cb:69:36:01:7f:6a:b5:e3:a3:ee:4f:f0:cc:ed:e5:
ee:89:7e:b9:15:21:b1:00:04:b4:a3:45:ad:c1:16:24:be:fd:
7d:b4:8e:8c:d6:74:32:ab:e7:bf:b1:e6:f8:04:06:4d:ce:ed:
4b:8d:f6:a6:87:61:0d:91:cf:23:c3:ec:eb:fd:47:a1:8e:72:
3b:9f:12:49:e9:08:33:1b:a4:3f:4e:18:23:db:3b:84:0e:2d:
89:20:18:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:51:00 2026 by rpki-client