Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e20383334.roa
File: 33312e362e36322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 41Goczi/nbylTuigsJNbcItC7uFQpc0kZWR0Q/D6+4Y=
Subject key identifier: 66:17:F9:81:25:83:0A:27:5A:71:9A:B1:54:28:CC:8B:6E:79:93:58
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 7763097EE7FEC02BC0D6FB30B9F1645403505410
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e20383334.roa
Signing time: Tue 22 Sep 2026 00:02:35 +0000
ROA not before: Mon 21 Sep 2026 23:57:35 +0000
ROA not after: Tue 21 Sep 2027 00:02:35 +0000
asID: 834
IP address blocks: 31.6.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Sep 2026 16:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:63:09:7e:e7:fe:c0:2b:c0:d6:fb:30:b9:f1:64:54:03:50:54:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 21 23:57:35 2026 GMT
Not After : Sep 21 00:02:35 2027 GMT
Subject: CN=6617F98125830A275A719AB15428CC8B6E799358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:16:f9:86:30:29:93:3e:e3:01:de:39:07:
f4:f4:7a:7b:f3:28:7c:b8:bd:b3:de:1d:81:8d:ff:
ed:73:9a:cf:b9:0f:67:ab:ab:5b:3c:73:57:38:64:
bd:fc:b1:59:97:7d:4b:7f:ef:1a:90:51:b5:96:b5:
10:59:0a:6a:76:d9:f8:9a:70:22:49:ea:cb:2a:81:
39:a7:07:13:48:6f:34:4d:21:90:77:98:19:86:8d:
fe:84:f9:c1:a7:d7:b4:d2:4a:08:87:97:f4:ed:33:
f3:6e:34:a7:3f:75:e7:84:8c:35:d5:ba:49:71:ef:
33:6a:c0:2c:cc:95:7b:7a:2e:70:a6:83:3e:bf:b0:
57:ba:0b:0e:bf:df:7e:7b:33:d6:b7:d1:06:2a:a1:
25:d9:53:91:4f:01:21:e4:23:ff:05:57:22:ac:59:
89:73:3a:69:27:f0:b1:15:96:52:e1:34:de:02:43:
cf:68:41:a2:d4:0b:bc:14:d2:e7:c6:8a:34:7e:95:
c4:ce:43:c4:e8:c3:ff:ab:77:5d:6e:59:40:cc:df:
3b:8e:1d:a7:d8:28:80:12:01:38:62:18:f2:06:ee:
d2:a4:35:0a:f9:e8:52:6f:69:63:c3:4d:01:0f:77:
a6:00:cf:b4:8b:59:01:9f:33:d2:63:ba:97:b4:68:
28:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:17:F9:81:25:83:0A:27:5A:71:9A:B1:54:28:CC:8B:6E:79:93:58
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.62.0/24
Signature Algorithm: sha256WithRSAEncryption
48:eb:99:d3:1c:4d:88:9e:70:17:5d:a5:5f:4b:6b:ae:29:be:
d3:bf:04:41:5a:21:c5:06:9d:fb:cd:42:bd:7f:d8:a8:60:ec:
32:a5:3e:c1:5a:4e:eb:70:6b:da:81:43:c7:9e:72:af:6b:86:
fd:44:a1:8b:0b:3d:83:fb:62:6b:5d:1b:5c:52:b1:03:1d:53:
7b:75:db:b6:80:ad:81:c8:2c:b7:8c:4c:81:9d:b6:02:c4:ee:
16:8c:92:fc:00:48:36:a0:53:83:ca:f0:84:bc:31:ac:97:1a:
c9:47:e1:0f:a5:d0:5b:03:ea:55:f3:b5:02:fe:31:35:70:64:
94:e5:44:e9:4f:85:4c:60:be:46:cf:bd:cf:5b:b2:54:dc:a1:
5c:b2:66:8c:ec:f2:cf:ee:68:07:c9:d0:4f:2a:16:b9:a4:3f:
92:94:2f:d5:f0:bb:81:dc:85:b0:78:df:68:05:76:43:df:8f:
54:0b:87:7b:de:f4:13:16:fd:75:29:e3:14:08:52:1d:7c:89:
ef:12:a7:d8:3e:1a:44:18:1a:1f:8a:90:2a:7e:ea:89:5d:23:
90:47:37:67:dd:bd:3a:a3:31:e8:85:ca:86:1f:72:7a:56:fb:
58:a5:d5:0d:4c:5b:cb:6f:24:70:b8:01:f3:61:50:c0:c6:44:
44:6c:6d:4c
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUd2MJfuf+wCvA1vswufFkVANQVBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjA5MjEyMzU3MzVaFw0yNzA5MjEwMDAyMzVaMDMxMTAvBgNV
BAMTKDY2MTdGOTgxMjU4MzBBMjc1QTcxOUFCMTU0MjhDQzhCNkU3OTkzNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTJBb5hjApkz7jAd45B/T0envz
KHy4vbPeHYGN/+1zms+5D2erq1s8c1c4ZL38sVmXfUt/7xqQUbWWtRBZCmp22fia
cCJJ6ssqgTmnBxNIbzRNIZB3mBmGjf6E+cGn17TSSgiHl/TtM/NuNKc/deeEjDXV
uklx7zNqwCzMlXt6LnCmgz6/sFe6Cw6/3357M9a30QYqoSXZU5FPASHkI/8FVyKs
WYlzOmkn8LEVllLhNN4CQ89oQaLUC7wU0ufGijR+lcTOQ8Tow/+rd11uWUDM3zuO
HafYKIASAThiGPIG7tKkNQr56FJvaWPDTQEPd6YAz7SLWQGfM9Jjupe0aCiFAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUZhf5gSWDCidacZqxVCjMi255k1gwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM2MzIyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBj4wDQYJKoZI
hvcNAQELBQADggEBAEjrmdMcTYiecBddpV9La64pvtO/BEFaIcUGnfvNQr1/2Khg
7DKlPsFaTutwa9qBQ8eecq9rhv1EoYsLPYP7YmtdG1xSsQMdU3t127aArYHILLeM
TIGdtgLE7haMkvwASDagU4PK8IS8MayXGslH4Q+l0FsD6lXztQL+MTVwZJTlROlP
hUxgvkbPvc9bslTcoVyyZozs8s/uaAfJ0E8qFrmkP5KUL9Xwu4HchbB432gFdkPf
j1QLh3ve9BMW/XUp4xQIUh18ie8Sp9g+GkQYGh+KkCp+6oldI5BHN2fdvTqjMeiF
yoYfcnpW+1il1Q1MW8tvJHC4AfNhUMDGRERsbUw=
-----END CERTIFICATE-----
Generated at Wed Sep 23 15:16:26 2026 by rpki-client