Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138362e302f32342d3234203d3e20383334.roa
File: 34352e3134302e3138362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mMRsCPA7z8SwAZMrIUvsruJXuo5oj58LRDSm92afSxM=
Subject key identifier: 27:AF:72:1D:BD:CF:D3:B9:D1:F4:48:04:7D:8A:DC:AB:B2:BA:16:07
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 24C476F6DC2A639BE89AA1FB52D0FB2DB4D2A74B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138362e302f32342d3234203d3e20383334.roa
Signing time: Sat 10 Oct 2026 19:45:54 +0000
ROA not before: Sat 10 Oct 2026 19:40:54 +0000
ROA not after: Sat 09 Oct 2027 19:45:54 +0000
asID: 834
IP address blocks: 45.140.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Oct 2026 09:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c4:76:f6:dc:2a:63:9b:e8:9a:a1:fb:52:d0:fb:2d:b4:d2:a7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 10 19:40:54 2026 GMT
Not After : Oct 9 19:45:54 2027 GMT
Subject: CN=27AF721DBDCFD3B9D1F448047D8ADCABB2BA1607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:ea:ff:8f:62:22:d8:27:1e:4b:10:3a:ff:
2f:ab:80:d7:b5:d7:7c:c5:ca:56:17:7e:ef:85:6b:
29:65:2d:be:f0:97:47:df:97:ff:6b:9c:af:c7:dc:
78:95:7c:21:17:aa:13:14:4f:ed:b8:db:93:48:44:
c6:c1:6a:5d:a3:7b:2a:33:e6:04:f0:6b:1e:8f:6b:
47:b8:b8:20:7c:62:7e:1b:8a:40:2d:98:3a:ea:39:
d8:a3:fb:54:13:46:1d:59:70:e4:5b:7c:e8:89:ed:
cf:49:01:65:86:0b:78:10:74:a3:75:e9:fe:1b:c4:
09:50:6d:48:8f:9c:f6:dc:22:40:10:33:26:3b:8b:
25:17:d6:4e:b8:1a:73:b4:1a:62:d4:ef:8e:4a:2d:
c4:1e:a0:1f:3e:4b:83:99:31:df:25:d2:5d:0b:f4:
6c:7b:4e:48:d2:e7:fb:f5:22:75:87:90:0c:37:5f:
68:a1:38:fc:0c:1b:88:33:be:1f:e0:c4:1f:a1:c8:
eb:8a:f3:54:fa:74:c9:84:4a:d6:b4:76:ca:34:90:
98:df:28:82:45:9d:9d:20:94:83:a3:03:f5:7b:81:
48:9b:db:5a:f8:22:1e:7f:94:c3:32:53:2f:a0:e3:
5b:11:b0:f4:fa:f0:9d:78:69:77:ef:52:71:d8:49:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AF:72:1D:BD:CF:D3:B9:D1:F4:48:04:7D:8A:DC:AB:B2:BA:16:07
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.186.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:e9:db:61:75:b7:72:0c:3b:d9:65:59:6a:9d:77:f0:80:1e:
b9:84:84:e3:f6:de:20:7b:08:0c:c3:df:4c:ac:f0:eb:ab:ba:
3e:10:36:03:d4:69:be:47:06:37:29:c3:33:67:eb:5f:7e:ce:
92:78:c1:ac:14:00:7a:d1:56:e1:bf:44:0b:14:ec:cc:f3:42:
db:46:6b:1d:51:b6:06:8d:80:c2:a4:7e:89:9b:1a:e9:6b:a8:
c8:3a:33:42:9b:c6:e7:f9:6a:ed:14:ac:84:c8:5b:e5:48:bc:
43:1b:08:24:28:2f:a8:9e:d3:5e:30:a0:aa:ce:9c:64:e9:04:
77:22:f5:0a:a3:24:2e:68:73:42:94:55:51:33:80:9c:db:85:
c6:e1:7d:c4:07:e8:14:93:12:2e:4c:89:bb:31:0e:c5:1a:c2:
c7:68:5d:86:b0:48:a9:4a:8f:cc:b8:3f:48:25:63:27:e5:8d:
a1:f1:cd:0c:64:af:97:e9:1b:9b:21:89:51:26:d3:f0:bc:54:
9a:4d:c1:d4:c1:2a:69:4b:0e:d5:c0:7f:b3:6e:1f:5e:fa:74:
08:42:67:84:70:f9:a7:9a:50:6b:ab:bd:f8:f1:3f:c4:22:2a:
de:a8:5c:21:e2:7c:f8:e4:6d:e1:c6:66:fb:cf:ff:e8:be:a6:
7a:a6:ad:5f
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUJMR29twqY5vomqH7UtD7LbTSp0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMTAxOTQwNTRaFw0yNzEwMDkxOTQ1NTRaMDMxMTAvBgNV
BAMTKDI3QUY3MjFEQkRDRkQzQjlEMUY0NDgwNDdEOEFEQ0FCQjJCQTE2MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMVOr/j2Ii2CceSxA6/y+rgNe1
13zFylYXfu+FayllLb7wl0ffl/9rnK/H3HiVfCEXqhMUT+2425NIRMbBal2jeyoz
5gTwax6Pa0e4uCB8Yn4bikAtmDrqOdij+1QTRh1ZcORbfOiJ7c9JAWWGC3gQdKN1
6f4bxAlQbUiPnPbcIkAQMyY7iyUX1k64GnO0GmLU745KLcQeoB8+S4OZMd8l0l0L
9Gx7TkjS5/v1InWHkAw3X2ihOPwMG4gzvh/gxB+hyOuK81T6dMmESta0dso0kJjf
KIJFnZ0glIOjA/V7gUib21r4Ih5/lMMyUy+g41sRsPT68J14aXfvUnHYSTO/AgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUJ69yHb3P07nR9EgEfYrcq7K6FgcwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0MzAy
ZTMxMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AC2MujANBgkqhkiG9w0BAQsFAAOCAQEAtenbYXW3cgw72WVZap138IAeuYSE4/be
IHsIDMPfTKzw66u6PhA2A9RpvkcGNynDM2frX37OknjBrBQAetFW4b9ECxTszPNC
20ZrHVG2Bo2AwqR+iZsa6WuoyDozQpvG5/lq7RSshMhb5Ui8QxsIJCgvqJ7TXjCg
qs6cZOkEdyL1CqMkLmhzQpRVUTOAnNuFxuF9xAfoFJMSLkyJuzEOxRrCx2hdhrBI
qUqPzLg/SCVjJ+WNofHNDGSvl+kbmyGJUSbT8LxUmk3B1MEqaUsO1cB/s24fXvp0
CEJnhHD5p5pQa6u9+PE/xCIq3qhcIeJ8+ORt4cZm+8//6L6meqatXw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 10:02:22 2026 by rpki-client