Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138302e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3138302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: XViIbOso03B5UDn2hrcO1n46FznUIgkbpQz8xAWKl8w=
Subject key identifier: F7:D0:65:1D:73:D4:7A:FF:70:7E:D8:73:21:B5:80:AE:CB:12:F6:DB
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 4D4425DCD79A39AB989819808315B7A380BF770D
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138302e302f32322d3234203d3e20383334.roa
Signing time: Thu 28 May 2026 06:05:33 +0000
ROA not before: Thu 28 May 2026 06:00:33 +0000
ROA not after: Thu 27 May 2027 06:05:33 +0000
asID: 834
IP address blocks: 147.125.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jun 2026 09:13:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:44:25:dc:d7:9a:39:ab:98:98:19:80:83:15:b7:a3:80:bf:77:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: May 28 06:00:33 2026 GMT
Not After : May 27 06:05:33 2027 GMT
Subject: CN=F7D0651D73D47AFF707ED87321B580AECB12F6DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:de:42:a2:64:9d:2d:b1:a2:1c:0f:97:32:
25:aa:d2:23:9a:5c:28:85:d6:4c:95:a2:32:8c:82:
4b:fa:b2:dc:2f:6e:7b:0c:f0:1c:00:f6:c3:fc:e8:
f4:ac:31:cc:17:6c:21:63:07:ca:29:c6:71:fc:a4:
a2:0f:07:cc:f7:9e:be:d4:a5:03:dd:cc:7b:c1:12:
e4:63:2e:5c:e2:fd:cd:dd:77:ce:93:d4:a8:93:32:
c4:96:a6:57:ad:55:ac:10:e0:13:fd:a3:22:43:2a:
c8:b8:de:27:b6:8d:91:c7:16:74:e9:2a:cd:ff:a0:
b0:3c:b8:38:8d:12:46:01:cf:04:93:66:3f:c1:a3:
94:06:ef:27:b6:92:ca:b7:68:bb:1a:d5:7f:e6:3a:
1a:4e:ec:22:6c:53:2e:4c:dc:f9:0e:c4:73:10:29:
b0:08:e7:9f:d6:6a:b7:ef:ed:a6:a5:ea:48:1f:a3:
43:aa:0f:7f:50:ef:1f:df:dd:07:56:26:a9:58:4b:
1f:e1:39:b2:b1:27:db:da:26:e3:fc:59:2b:80:23:
65:a2:81:46:2b:e4:05:cd:29:8c:cc:37:4a:0e:d7:
09:7c:19:13:8e:c3:db:43:14:7e:1f:eb:ca:d7:a9:
d6:90:80:11:d0:fd:0d:f5:35:3e:94:3a:c5:1d:64:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D0:65:1D:73:D4:7A:FF:70:7E:D8:73:21:B5:80:AE:CB:12:F6:DB
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.180.0/22
Signature Algorithm: sha256WithRSAEncryption
63:d7:ba:8e:02:f0:48:f9:6a:a3:2f:41:f9:6c:10:ae:89:d1:
ed:e6:80:ad:aa:48:8c:4e:77:18:56:2e:0b:67:aa:51:7f:0d:
65:7d:32:f3:e4:cb:05:49:f0:c0:a3:24:0e:69:e4:f2:ef:8e:
a2:57:8d:02:48:35:34:17:28:97:f2:28:d5:94:58:5b:7c:42:
cd:b0:6b:3b:92:12:d9:48:06:0d:37:2c:61:ab:bb:e3:e0:19:
c4:80:04:69:eb:7c:d6:3a:fb:76:f8:8a:7d:87:0c:d5:3c:19:
6e:86:25:7b:a9:f4:c1:1d:e4:90:2d:75:bc:a7:6e:92:ab:9a:
54:e2:ce:d6:60:91:d1:5b:e5:d9:4a:66:17:b2:ea:6d:6f:d9:
32:f0:5f:d2:d7:7d:be:4e:56:2b:59:71:70:9c:a9:4c:87:40:
5d:68:63:c5:41:49:b8:0c:8b:72:39:0c:24:50:36:e3:df:76:
51:06:f3:86:e8:1a:9a:a0:57:b8:b7:41:59:f2:5a:e2:0b:a1:
19:9a:94:5a:a4:1b:ae:97:00:4b:a9:1d:5f:7c:2a:21:66:5c:
7e:07:a5:4c:0f:af:d6:2b:6f:ef:1d:20:03:ae:e6:bd:f5:e7:
1c:4f:1b:6b:5e:f0:26:91:ae:94:d4:6e:84:1a:3b:3e:7d:95:
b7:d0:e4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:11:59 2026 by rpki-client