Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3137372e302f32342d3234203d3e20343032323838.roa
File: 3230302e3138302e3137372e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: JxYYi7hk/wJ6rNqb0nXGJKCNf6XFk04Sc52+eXBnjL4=
Subject key identifier: 6E:E3:A6:FF:91:C7:EE:FF:94:08:CE:06:23:75:52:FB:30:33:8F:36
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 59FEC17FB008C2EBEBD350C85C97009C0B4F08DD
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3137372e302f32342d3234203d3e20343032323838.roa
Signing time: Sat 19 Sep 2026 16:24:46 +0000
ROA not before: Sat 19 Sep 2026 16:19:46 +0000
ROA not after: Sat 18 Sep 2027 16:24:46 +0000
asID: 402288
IP address blocks: 200.180.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Sep 2026 08:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:fe:c1:7f:b0:08:c2:eb:eb:d3:50:c8:5c:97:00:9c:0b:4f:08:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Sep 19 16:19:46 2026 GMT
Not After : Sep 18 16:24:46 2027 GMT
Subject: CN=6EE3A6FF91C7EEFF9408CE06237552FB30338F36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:81:1a:42:b6:fd:1c:34:1c:2e:4d:93:5d:
0d:c1:3d:34:3c:37:ef:88:77:27:0e:82:fa:d4:e1:
c5:36:01:11:a0:fe:b9:fd:5f:a2:13:64:e2:de:8a:
98:c9:e7:71:3d:2c:6f:c2:41:6e:ff:73:7b:20:f0:
b3:b4:8b:46:60:74:78:58:44:21:a4:3b:4e:98:05:
8c:f2:66:25:57:85:94:39:ca:6c:8d:46:e4:39:eb:
cc:64:ac:d8:6c:06:13:13:50:64:62:5a:2c:f5:f3:
e2:b3:0c:fc:e7:ea:4b:71:c2:b4:34:25:72:1f:c7:
5c:19:53:1d:da:5c:6c:21:6e:a9:11:b0:71:f0:b9:
5d:0f:0a:6b:3f:21:e8:a1:69:2f:a3:f5:b9:a7:71:
86:53:d8:64:a3:fa:fc:5d:6e:5e:d5:47:35:02:13:
3b:a2:46:9c:aa:14:13:e4:14:57:42:c6:d2:38:e6:
8b:ed:c9:39:33:51:2b:03:ec:86:50:c3:e8:86:1e:
04:66:ef:51:6d:d1:5f:fc:50:18:f4:3f:dd:3b:a3:
52:36:79:b4:61:a7:cb:aa:32:b1:b8:c1:25:bf:02:
9f:d2:b6:30:98:63:d4:05:28:0a:be:e9:c3:33:cf:
c1:7f:b2:fc:78:01:bc:bc:68:b7:35:ae:7d:f9:58:
24:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E3:A6:FF:91:C7:EE:FF:94:08:CE:06:23:75:52:FB:30:33:8F:36
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3137372e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.177.0/24
Signature Algorithm: sha256WithRSAEncryption
00:14:3d:e1:55:3b:9c:ba:5d:fe:e1:b1:0f:7d:14:0d:33:c4:
de:ab:1e:10:19:47:25:ad:44:ca:7c:2f:e6:8a:a2:d0:18:10:
bb:e5:f6:61:e4:e2:23:eb:f3:84:9d:68:e6:36:a2:eb:10:a9:
61:cb:5e:51:e4:22:ee:a5:51:a2:aa:9d:44:6b:32:f9:c8:ad:
71:b4:c7:03:1a:63:d1:a7:96:8a:b7:a6:8a:03:08:1e:36:fe:
ae:14:ab:3b:e8:77:12:db:aa:7b:fe:68:f0:a5:78:b7:0e:04:
04:18:12:1c:de:e8:2c:3d:59:fa:a0:fc:34:53:2b:f7:8c:33:
28:ee:fd:d9:8c:e8:d4:e4:76:6d:ad:8f:b2:01:a0:6a:a6:f2:
c4:6e:bf:0b:ed:5c:c7:7d:28:45:0d:8e:f7:ab:bf:79:8d:3c:
b0:9f:e5:17:19:a1:58:4d:7a:c5:67:0c:49:36:6b:76:44:a1:
64:26:b8:21:0a:39:5c:2a:f7:8d:45:d2:b9:da:d9:d0:04:32:
ef:d5:72:2d:12:a2:f6:b1:c2:cb:f0:1d:8e:ef:98:f7:ef:52:
a1:e4:bb:18:11:3e:3b:04:33:18:90:02:55:9c:fd:f4:59:ed:
12:01:62:5a:43:0b:65:b3:02:35:44:cb:8c:7b:96:24:0a:c9:
87:c1:3b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:27:49 2026 by rpki-client