Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20383334.roa
File: 34352e3133322e39382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Yre/o/+SvxMZKJSVUhraqPq6xab617Nxi+9zuWYr6qw=
Subject key identifier: E1:D5:B4:BE:D6:56:DF:21:C4:E0:54:BF:91:C0:02:15:0D:70:EA:B8
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 7E4D8F0222B2E08AE02527A29199992AD36B3F8F
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20383334.roa
Signing time: Tue 14 Jul 2026 00:04:55 +0000
ROA not before: Mon 13 Jul 2026 23:59:55 +0000
ROA not after: Tue 13 Jul 2027 00:04:55 +0000
asID: 834
IP address blocks: 45.132.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jul 2026 05:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:4d:8f:02:22:b2:e0:8a:e0:25:27:a2:91:99:99:2a:d3:6b:3f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jul 13 23:59:55 2026 GMT
Not After : Jul 13 00:04:55 2027 GMT
Subject: CN=E1D5B4BED656DF21C4E054BF91C002150D70EAB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:ea:35:54:bd:1b:e7:fa:69:66:a5:bf:d7:
54:5b:1a:97:3e:44:2e:5f:27:29:9c:ae:3a:61:93:
7f:02:5d:b8:e4:b7:0a:e2:94:16:9a:0f:8d:27:d1:
b1:a7:5a:c5:98:52:0c:38:65:77:d0:cf:71:bf:7f:
b8:ee:29:e4:ae:2f:fe:17:b3:b2:f8:d0:b2:83:69:
ff:7e:e2:da:3f:78:de:1c:06:bd:cc:5e:2f:b1:fc:
99:71:47:09:51:c6:ce:f5:a2:9f:a1:8f:f6:dd:96:
a2:f0:87:e6:70:1d:b9:6d:28:b6:e5:14:10:b1:d1:
79:59:3e:ee:94:fb:42:1d:18:da:dd:d9:58:cc:26:
1b:2a:36:c8:26:da:f3:32:4e:5c:9e:af:86:d1:b2:
0c:16:47:0e:db:99:94:66:f1:06:c2:2b:f8:c5:81:
76:28:71:66:44:4d:96:92:76:2d:cf:c5:0c:13:58:
f7:fa:13:ea:27:49:b3:b4:cb:2c:74:44:cf:b1:52:
aa:74:99:fd:72:21:37:b1:4d:be:a1:7b:10:66:9b:
40:6e:f5:5e:40:91:4a:41:87:53:4b:10:da:d7:f0:
be:a6:d8:f2:b3:a6:48:34:89:52:47:4b:f5:74:49:
c0:d2:18:5e:72:59:d4:5b:0e:5d:00:94:bc:eb:47:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D5:B4:BE:D6:56:DF:21:C4:E0:54:BF:91:C0:02:15:0D:70:EA:B8
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:47:83:91:de:68:52:20:91:0e:7c:ef:70:6f:3f:b3:1b:e5:
c9:63:92:55:8a:62:ef:64:56:2b:e1:2d:62:e5:4a:ad:bb:e9:
9f:fc:45:2d:bd:5a:9c:ce:f2:fe:5b:3c:47:ea:ec:2d:7f:a5:
aa:25:e2:0d:14:ac:d9:ec:8b:90:75:01:e0:ce:d7:f7:fc:dd:
b4:23:85:40:7d:1b:a1:05:7f:92:7a:37:da:a4:f2:6a:20:84:
68:9f:44:41:2c:62:79:03:8a:4a:b9:62:3b:4a:b5:2d:27:06:
99:ca:f4:44:4f:d7:ae:eb:91:1b:20:7b:64:46:c7:09:e7:b9:
21:30:e6:16:87:4e:6b:09:52:54:00:d1:a5:90:96:db:64:bc:
01:43:3c:bc:14:c3:1a:7a:65:14:6a:8c:bd:dc:89:ca:78:83:
33:60:67:67:92:f0:2c:42:02:5f:5f:75:ff:d4:04:4a:9c:e5:
9d:aa:eb:9c:f3:59:5b:74:f5:13:7a:a6:a7:a3:9c:c6:bf:26:
ea:f9:a6:9e:61:ad:98:1f:8a:e6:d4:94:47:e5:71:7f:c3:b4:
ec:61:9e:f5:b6:7d:b5:20:5f:dc:d7:a2:ec:17:e4:c5:fe:dc:
fd:09:9c:b8:b6:8e:0d:20:aa:2b:d5:5a:3e:a4:ae:92:7b:49:
94:eb:96:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:55:55 2026 by rpki-client