Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139322e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3139322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: QSFDjAQG9SM2Lq8bAHZZb9eVYS1fmF+bpLt0xxMYOEo=
Subject key identifier: 01:63:4A:19:78:78:44:08:14:90:00:A4:CC:83:80:78:75:07:F7:13
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 0D01535CC9B190346C76D4C2D8D2343A124A80E2
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139322e302f32332d3234203d3e20383334.roa
Signing time: Wed 03 Jun 2026 12:40:10 +0000
ROA not before: Wed 03 Jun 2026 12:35:10 +0000
ROA not after: Wed 02 Jun 2027 12:40:10 +0000
asID: 834
IP address blocks: 147.125.192.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jun 2026 03:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:01:53:5c:c9:b1:90:34:6c:76:d4:c2:d8:d2:34:3a:12:4a:80:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jun 3 12:35:10 2026 GMT
Not After : Jun 2 12:40:10 2027 GMT
Subject: CN=01634A1978784408149000A4CC8380787507F713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:1a:78:cc:7b:c0:19:a9:15:75:3a:04:2d:
98:05:42:5b:2c:5b:73:01:b6:7a:b8:0d:1d:4d:d7:
3d:2f:c4:a4:10:d2:cc:a8:91:9c:c2:9e:76:9c:5c:
b3:ab:16:a8:78:83:23:48:bb:bb:76:db:bf:b6:bd:
2e:e2:ef:08:07:76:af:51:f5:00:0d:48:18:db:a1:
5f:7a:ba:bc:39:71:f7:fc:39:eb:25:d8:c8:e3:21:
2f:26:ed:25:1e:0c:d9:d3:dd:05:09:82:9f:33:73:
b8:04:a3:df:8b:b6:7f:cb:46:f3:b1:05:29:bb:f0:
6b:12:d0:d5:3c:22:7c:4a:14:66:17:60:02:c8:53:
68:4b:09:81:a3:aa:78:4a:92:16:9a:43:2e:b2:37:
04:08:d1:76:b4:54:26:c9:6c:3b:d2:bd:e1:c2:c2:
a0:cb:65:2d:a1:21:cc:bf:97:9f:1e:bf:f2:2e:c6:
3b:d5:51:a6:f1:49:ef:45:58:72:d2:21:7d:47:87:
bf:7e:4a:ad:1a:44:7e:b7:9c:7a:fc:76:7e:e7:c4:
88:5f:49:df:15:9e:86:81:61:e3:1b:c3:10:db:85:
d5:bf:28:cb:14:e8:14:69:6d:b5:7f:65:34:f6:77:
47:90:38:bf:b3:0d:cb:39:3c:eb:ab:f8:2f:9a:bb:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:4A:19:78:78:44:08:14:90:00:A4:CC:83:80:78:75:07:F7:13
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.192.0/23
Signature Algorithm: sha256WithRSAEncryption
78:1b:36:0c:5e:05:25:7f:bf:a1:41:ee:fa:4f:0c:6b:cb:20:
5a:21:8b:da:e6:76:78:f7:5c:45:5e:a1:fc:95:66:46:6c:bf:
33:71:44:88:d6:b8:10:aa:1b:44:7e:6b:9a:8b:8a:21:c7:1c:
43:09:66:04:43:19:13:c5:78:94:3c:d9:24:ad:b9:a9:36:82:
c5:e0:4a:e3:a2:c3:81:ec:03:22:0f:02:57:8b:29:47:00:8a:
a1:7e:bb:e8:70:a5:70:7d:9c:18:73:65:66:92:09:ef:78:fa:
d2:62:5f:22:11:0e:a0:af:e5:99:c7:7d:c4:ef:66:32:79:e2:
cc:0e:b7:22:bb:bb:1c:72:f9:35:88:91:35:04:2c:52:58:d0:
9c:5d:ae:53:0d:c3:2b:04:dd:6f:db:21:61:d4:b6:15:ce:a5:
c7:55:4e:49:8c:d3:1b:0a:c6:d4:6d:31:91:f1:80:8b:dc:40:
0a:14:22:2a:8e:3e:e1:dd:02:ea:53:48:a5:e1:95:50:29:ca:
06:c3:00:40:a1:49:62:ba:59:01:75:0c:f5:23:b2:6a:35:6f:
d1:25:38:55:8a:da:02:c2:09:e0:20:59:34:bf:9a:f7:cb:ab:
08:95:a7:ba:df:d0:d8:25:fc:0b:6f:41:94:a8:53:3d:4f:c8:
05:aa:ca:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:11:12 2026 by rpki-client