Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138362e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3138362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ck7ndhjQsOIye2s1IBGWlkk6bhiwAdwuFrMQpAc5NNM=
Subject key identifier: CB:37:31:77:44:31:E3:11:9C:BD:36:30:C3:78:0F:35:78:60:C3:C9
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 09E8E94F4228220A8473DCABF52F475E65629267
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138362e302f32342d3234203d3e20383334.roa
Signing time: Fri 05 Jun 2026 16:13:41 +0000
ROA not before: Fri 05 Jun 2026 16:08:41 +0000
ROA not after: Fri 04 Jun 2027 16:13:41 +0000
asID: 834
IP address blocks: 147.125.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jun 2026 13:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e8:e9:4f:42:28:22:0a:84:73:dc:ab:f5:2f:47:5e:65:62:92:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jun 5 16:08:41 2026 GMT
Not After : Jun 4 16:13:41 2027 GMT
Subject: CN=CB3731774431E3119CBD3630C3780F357860C3C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:29:98:87:16:e1:37:95:9d:e4:c9:3f:5e:
9d:43:43:c4:12:8f:aa:60:4a:74:c1:ae:61:80:a9:
e3:23:2c:c2:3c:4a:64:38:e9:11:13:68:76:1b:12:
98:da:62:80:4d:62:5a:1a:3f:f0:71:f6:86:09:d2:
e0:ed:31:cd:63:23:94:f6:b2:01:66:1d:43:df:28:
f4:4e:88:25:33:77:8d:90:da:38:0f:52:53:8f:b0:
0b:17:0e:4f:fc:13:20:83:e0:d1:37:d7:48:e4:99:
12:a0:76:7b:bc:b6:33:23:ca:f2:e4:2e:b9:8f:11:
3a:a2:9f:37:5a:8c:eb:57:4b:9f:e7:ed:16:e3:ae:
25:90:8d:ae:71:79:01:6c:16:3f:f0:67:67:a1:49:
76:1e:17:1e:0a:3a:b8:5b:68:b2:00:35:83:f7:05:
a2:43:4f:86:cd:fa:8b:9f:a9:49:6a:a2:1c:79:43:
b6:3f:bd:30:e7:22:81:1b:21:62:8f:08:c7:df:a7:
fe:b9:17:bc:96:e6:9b:db:c7:f0:da:e8:a5:ff:4b:
2e:60:25:77:f9:c5:8e:85:ab:d7:0e:35:95:c0:18:
f6:26:b4:35:83:5b:e8:ec:53:8f:ed:2a:ea:ff:4e:
fc:ad:e6:48:50:66:d9:48:98:22:bc:b9:3c:38:44:
83:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:37:31:77:44:31:E3:11:9C:BD:36:30:C3:78:0F:35:78:60:C3:C9
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.186.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e8:eb:cf:0f:90:92:54:d5:75:f4:69:16:cc:fa:4f:d6:3c:
3c:2b:c0:3d:4b:d9:e2:76:ff:5b:e8:16:b9:df:61:6f:8a:ba:
f0:0d:07:32:08:58:51:b3:0d:15:94:77:d8:e0:4c:1f:a0:f2:
d0:63:0b:a7:22:63:04:9a:49:cc:cf:55:28:e3:1c:66:42:d6:
19:e2:f3:8d:21:19:41:31:a8:eb:e9:47:f2:e3:a7:04:b2:92:
b6:ff:9f:70:16:17:b3:a9:b8:e9:59:4e:19:2d:42:92:21:6f:
b5:02:b4:4f:42:08:cc:5b:12:12:8e:a0:1b:7f:ab:83:09:c7:
74:d7:09:14:f0:59:53:5b:bf:85:50:69:90:47:b6:1c:86:ef:
95:a6:2a:f2:de:2b:b4:96:3a:7b:d2:2c:d4:72:65:7e:2b:50:
47:df:25:51:71:1b:b8:94:2f:47:ca:00:30:1c:d8:34:3e:70:
37:83:f2:df:6b:c6:bc:85:42:c6:be:76:e7:50:04:aa:fd:ae:
04:db:c4:51:a2:fb:36:5d:38:62:33:ac:f6:67:4d:e9:a6:a0:
ea:cd:f5:03:a7:56:4c:b9:3c:98:fd:17:fc:4d:1d:96:b3:a1:
80:06:4c:c3:e0:4d:14:23:96:2a:a9:43:f6:2b:48:2c:8c:2d:
8d:a3:04:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:06:32 2026 by rpki-client