Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39352e302f32342d3234203d3e203134363138.roa
File: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: HjGeDNsrRf+xvK6JJOz/NzveODgpGc2D6yghDAGg51A=
Subject key identifier: 31:71:6A:05:0A:D4:9A:CE:58:E6:4E:21:47:FA:DA:8A:B6:27:9E:12
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 72011B8DA1173AEAEEFAAA05C2F84F3C9AF433E7
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39352e302f32342d3234203d3e203134363138.roa
Signing time: Fri 03 Apr 2026 04:46:58 +0000
ROA not before: Fri 03 Apr 2026 04:41:58 +0000
ROA not after: Fri 02 Apr 2027 04:46:58 +0000
asID: 14618
IP address blocks: 185.244.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Apr 2026 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:01:1b:8d:a1:17:3a:ea:ee:fa:aa:05:c2:f8:4f:3c:9a:f4:33:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Apr 3 04:41:58 2026 GMT
Not After : Apr 2 04:46:58 2027 GMT
Subject: CN=31716A050AD49ACE58E64E2147FADA8AB6279E12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:81:8c:8b:22:03:b7:a6:11:8d:49:f4:5a:
fa:4b:90:ce:6d:3e:06:9f:b8:c4:75:00:dd:f8:b5:
b4:f9:07:b9:e8:7c:37:e5:46:b6:8e:5a:72:6d:51:
8b:7d:60:20:79:eb:bf:33:54:9e:fc:88:ac:7a:37:
3f:4e:7e:ce:fe:6d:8a:ba:cc:42:d9:57:e9:24:7e:
4e:39:f9:04:5d:9a:e1:a5:45:c8:66:32:41:29:09:
8d:ec:a4:f4:69:d7:18:60:b9:bb:4f:97:c3:cb:19:
5b:c9:c1:b2:bf:46:c9:5e:f8:4e:b8:86:05:77:09:
f5:37:b1:0d:8b:22:4e:81:2d:43:70:b3:4d:dc:c5:
79:47:05:da:8a:c7:57:85:30:b7:25:01:8a:24:9d:
6b:50:c0:e9:bf:50:cb:b3:59:29:fe:52:37:20:75:
09:6c:e3:ea:91:ff:a1:67:71:05:85:ad:55:10:27:
86:50:58:eb:82:a8:07:ee:99:d2:77:7c:8a:ca:d2:
c8:22:7f:46:65:42:9e:a4:c5:d3:72:0b:77:6a:f4:
91:6c:5e:06:25:e8:d5:d7:2d:c3:09:7c:c9:a0:dc:
f6:91:b0:0f:3a:0b:48:9c:af:33:5a:76:72:1a:73:
7e:ca:bd:8c:2c:9e:55:29:92:a0:ec:93:07:76:c0:
58:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:71:6A:05:0A:D4:9A:CE:58:E6:4E:21:47:FA:DA:8A:B6:27:9E:12
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39352e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.95.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:59:3e:fe:79:ce:ff:2d:da:9e:98:d7:47:03:3b:53:ff:63:
42:be:11:01:e5:7b:45:2e:cd:3a:18:ba:81:7d:31:7b:39:97:
27:4c:06:f0:e0:e1:78:d8:39:6d:6c:f3:55:b3:7c:94:1a:de:
e6:95:54:2f:44:cc:af:e9:0f:9a:f9:f2:4e:ef:fc:ec:bd:af:
14:dc:37:0a:44:fe:37:1f:cb:b3:3d:a7:f3:de:1c:42:c0:57:
98:dd:ea:7d:e6:f6:e1:eb:41:bc:ad:c6:a6:fe:2d:27:69:1f:
6d:db:4d:33:4c:d1:ac:b7:13:ea:1c:8f:cb:d4:3f:ce:28:61:
69:27:ee:67:19:0e:df:fb:6f:80:c9:d3:61:c0:80:df:a1:da:
a4:eb:01:6f:f2:51:ce:9a:83:60:35:98:a5:35:de:6a:14:2b:
40:7d:5d:51:3c:e0:c8:9c:27:69:35:43:d3:a7:4d:22:0e:9c:
4d:55:55:2e:0a:27:59:45:f4:68:3b:69:47:45:e1:04:02:36:
bd:60:c9:99:16:4a:59:d7:15:59:8b:18:2a:91:94:95:e0:c7:
a1:b2:34:02:cc:b9:14:08:15:5f:73:a3:02:13:9e:81:57:69:
08:12:65:85:f4:07:7b:c3:06:59:8a:19:41:ad:22:77:a8:3a:
a1:c3:09:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:26:28 2026 by rpki-client