Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136302e302f32302d3234203d3e20383334.roa
File: 3134372e3132352e3136302e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: hsZsg3kOMr+f+IDucEhx7AHYJm5HYLUGfiFjmro12WY=
Subject key identifier: DE:6E:B0:51:57:F0:F6:BE:CD:4B:30:4A:B8:04:54:0E:10:21:D8:23
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 3C25D4CBBEADE1416E136B01F1710A8A144929DE
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136302e302f32302d3234203d3e20383334.roa
Signing time: Thu 28 May 2026 05:01:43 +0000
ROA not before: Thu 28 May 2026 04:56:43 +0000
ROA not after: Thu 27 May 2027 05:01:43 +0000
asID: 834
IP address blocks: 147.125.160.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jun 2026 01:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:25:d4:cb:be:ad:e1:41:6e:13:6b:01:f1:71:0a:8a:14:49:29:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: May 28 04:56:43 2026 GMT
Not After : May 27 05:01:43 2027 GMT
Subject: CN=DE6EB05157F0F6BECD4B304AB804540E1021D823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:6c:6a:84:54:a4:ef:25:95:7b:e4:61:ad:
c3:4f:70:64:7c:6d:69:4c:71:cc:f7:fa:10:25:5e:
0b:83:b0:c9:ca:00:d1:a1:67:58:98:ec:89:54:b7:
c1:47:99:a1:37:2e:82:96:50:11:c5:66:db:33:a9:
50:14:22:32:15:0e:4d:f3:2a:ac:6f:50:65:69:0d:
86:cd:f1:19:8e:5a:f7:fa:88:f2:8c:72:9b:af:dc:
a0:43:48:3f:bc:45:fa:44:a2:b5:58:11:f6:83:49:
1a:3e:a6:95:7d:40:cf:c1:b3:82:f1:52:c3:1a:28:
4a:8e:a0:00:f2:5c:9c:17:2b:ed:5b:6c:da:73:20:
6a:76:9f:8a:b8:e6:ac:58:42:1d:88:c2:3f:3a:9c:
96:fd:ca:59:aa:a4:b3:db:81:5e:15:de:9a:d6:13:
e1:c4:93:3f:15:c1:13:1e:12:82:56:68:c4:86:51:
5d:b0:7c:0c:05:2e:54:a8:6a:a5:28:8c:6e:a9:6c:
c6:b3:20:85:c9:d8:4f:65:9e:1d:40:fb:9c:6e:4c:
3f:56:a5:2f:fe:4d:57:71:3b:52:32:5a:68:a1:cf:
24:ec:ac:81:d0:eb:a2:11:a8:22:59:75:07:68:78:
c5:67:63:ac:0b:2e:c0:7b:2d:9b:c2:34:b6:9d:e2:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6E:B0:51:57:F0:F6:BE:CD:4B:30:4A:B8:04:54:0E:10:21:D8:23
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136302e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.160.0/20
Signature Algorithm: sha256WithRSAEncryption
43:eb:25:b9:e5:7e:3c:72:7e:37:89:1c:c2:3c:ad:c5:90:bf:
2e:af:fb:82:fb:a5:27:06:a1:a9:4e:82:9b:dd:33:f5:e9:41:
fc:fb:dd:73:d7:1a:36:c7:3a:97:b3:b3:d3:e8:16:80:85:99:
b2:8d:27:ad:ff:80:52:d9:65:bc:4a:af:5c:e9:a0:75:69:58:
17:df:b4:7b:3c:9f:8e:e6:1f:4b:5f:4c:41:9b:45:d5:e6:24:
1c:37:3d:1a:d1:21:d7:3b:e7:f2:4c:8b:53:53:79:f3:67:e8:
1b:c1:f7:c1:9a:31:d4:f9:05:c8:88:4e:9a:58:98:4f:65:17:
a1:f2:cf:3b:ba:3c:97:95:af:08:d4:0d:80:32:7c:06:05:ce:
d0:03:64:d8:7e:77:5a:be:ba:fb:74:1f:d0:a7:46:e4:fd:27:
c3:4f:e0:70:3d:11:04:c2:1b:48:d5:94:a0:e5:35:1f:49:a4:
7e:8b:76:96:cb:87:7a:5e:31:81:4a:c6:09:12:03:09:b4:7a:
e2:02:1f:53:7b:25:2d:4f:aa:50:16:c2:49:d4:bf:35:6c:76:
eb:8c:4d:89:75:7f:59:f0:e4:94:a5:55:10:64:7d:f2:db:4b:
03:a4:98:85:07:b5:fc:51:8a:bc:61:eb:e0:53:26:8c:90:50:
9e:07:da:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:05:26 2026 by rpki-client