Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138332e302f32342d3234203d3e20313532313739.roa
File: 3230302e3138302e3138332e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: vn05iA6kR0IZNNIbZkoQ84oVErqJtmMKicpOfU46ftw=
Subject key identifier: 43:10:9A:D0:1E:F5:28:5C:A0:55:EA:C3:67:89:F9:F8:14:90:4F:47
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 52AB11B310E45B35E84E410D6BEFEFD48EB4B01C
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138332e302f32342d3234203d3e20313532313739.roa
Signing time: Sun 20 Sep 2026 02:15:11 +0000
ROA not before: Sun 20 Sep 2026 02:10:11 +0000
ROA not after: Sun 19 Sep 2027 02:15:11 +0000
asID: 152179
IP address blocks: 200.180.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Sep 2026 08:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ab:11:b3:10:e4:5b:35:e8:4e:41:0d:6b:ef:ef:d4:8e:b4:b0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Sep 20 02:10:11 2026 GMT
Not After : Sep 19 02:15:11 2027 GMT
Subject: CN=43109AD01EF5285CA055EAC36789F9F814904F47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:ef:97:50:51:4e:64:e5:a7:65:82:35:56:
cb:64:cd:97:ad:b0:22:d8:0e:95:86:bc:91:c0:a0:
7b:28:7f:e5:6f:c8:99:ae:62:00:38:bd:22:9b:0d:
b8:d2:54:b9:27:95:da:5b:41:97:15:55:32:77:7b:
51:fd:f5:78:c6:d6:d3:91:63:c0:10:53:65:dc:9d:
39:fe:e2:ef:f8:22:09:21:d4:7f:4a:0d:6b:3f:6d:
ff:22:81:f1:9f:4b:e7:ca:21:e1:46:e3:d3:53:d0:
61:da:04:d5:ce:2c:76:83:e1:e9:4a:b5:a4:3c:ab:
ac:dc:87:af:f0:8e:8d:7b:f6:7e:a3:f5:e5:fa:9c:
a8:70:a8:75:aa:67:27:f4:36:f4:83:9e:30:84:ae:
33:a8:b8:39:e7:ba:00:d1:89:28:6a:79:f9:11:93:
f4:13:ca:5e:a5:07:d3:cf:8b:86:3a:7a:01:c9:b4:
ba:60:74:71:97:98:9e:49:35:dc:63:fb:57:1a:f4:
09:02:c8:fc:3d:8f:08:58:52:5a:9d:2c:97:2a:58:
3c:6b:a9:94:58:32:3f:50:b6:84:d4:a9:b3:56:f5:
67:75:9f:95:d9:1a:39:81:8a:0f:bd:26:d7:1c:32:
bf:60:5a:47:62:fa:40:9c:7a:88:30:7e:bf:49:da:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:10:9A:D0:1E:F5:28:5C:A0:55:EA:C3:67:89:F9:F8:14:90:4F:47
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138332e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.183.0/24
Signature Algorithm: sha256WithRSAEncryption
34:28:ab:cc:e7:7a:86:a2:ff:2e:86:22:1f:21:8a:f1:52:11:
e6:a7:39:0c:b7:42:07:b8:fd:88:f9:7f:41:8f:fa:b7:30:90:
bf:f3:c4:d4:bc:1d:dc:a9:0e:9a:e5:84:b0:c0:62:15:83:41:
d9:1d:06:4a:0a:96:08:8e:a6:86:02:8b:8e:c0:93:29:ea:a0:
2d:c2:25:dd:07:24:bf:ff:8e:aa:f6:3a:41:28:1d:36:9c:70:
55:98:d6:86:39:a3:08:a1:81:c4:e8:7b:98:9e:bc:eb:11:4b:
3e:7a:17:4e:e6:6a:81:e6:3e:b2:09:ac:bc:4c:ca:57:40:0b:
66:24:ae:85:dd:3a:88:db:eb:3e:4a:e6:87:98:06:7f:2d:80:
da:1d:05:64:bd:70:a8:8a:54:54:01:93:1b:dc:46:16:49:fa:
af:c1:bd:c1:d8:56:71:ab:c6:4a:27:a8:54:9d:bf:ff:c1:c6:
28:89:c5:75:2b:fb:51:1b:5c:92:97:46:43:e8:3e:9e:34:ce:
52:7f:1c:8f:52:a9:c8:0f:9a:cf:92:9c:67:86:b9:d0:cd:29:
36:b1:a1:f8:25:55:f9:4c:93:4b:fe:8a:63:50:dd:7b:7c:3f:
6b:03:12:da:fe:c6:83:11:83:ea:38:36:9d:97:f4:26:b7:ae:
6e:d3:4b:2f
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIUUqsRsxDkWzXoTkENa+/v1I60sBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC
MzJBODFERjAeFw0yNjA5MjAwMjEwMTFaFw0yNzA5MTkwMjE1MTFaMDMxMTAvBgNV
BAMTKDQzMTA5QUQwMUVGNTI4NUNBMDU1RUFDMzY3ODlGOUY4MTQ5MDRGNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMx++XUFFOZOWnZYI1VstkzZet
sCLYDpWGvJHAoHsof+VvyJmuYgA4vSKbDbjSVLknldpbQZcVVTJ3e1H99XjG1tOR
Y8AQU2XcnTn+4u/4Igkh1H9KDWs/bf8igfGfS+fKIeFG49NT0GHaBNXOLHaD4elK
taQ8q6zch6/wjo179n6j9eX6nKhwqHWqZyf0NvSDnjCErjOouDnnugDRiShqefkR
k/QTyl6lB9PPi4Y6egHJtLpgdHGXmJ5JNdxj+1ca9AkCyPw9jwhYUlqdLJcqWDxr
qZRYMj9QtoTUqbNW9Wd1n5XZGjmBig+9JtccMr9gWkdi+kCceogwfr9J2iBvAgMB
AAGjggJ8MIICeDAdBgNVHQ4EFgQUQxCa0B71KFygVerDZ4n5+BSQT0cwHwYDVR0j
BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1
NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw
MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3
NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF
BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy
ZTMxMzgzMDJlMzEzODMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMyMzEz
NzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAyLS3MA0GCSqGSIb3DQEBCwUAA4IBAQA0KKvM53qGov8u
hiIfIYrxUhHmpzkMt0IHuP2I+X9Bj/q3MJC/88TUvB3cqQ6a5YSwwGIVg0HZHQZK
CpYIjqaGAouOwJMp6qAtwiXdByS//46q9jpBKB02nHBVmNaGOaMIoYHE6HuYnrzr
EUs+ehdO5mqB5j6yCay8TMpXQAtmJK6F3TqI2+s+SuaHmAZ/LYDaHQVkvXCoilRU
AZMb3EYWSfqvwb3B2FZxq8ZKJ6hUnb//wcYoicV1K/tRG1ySl0ZD6D6eNM5SfxyP
UqnID5rPkpxnhrnQzSk2saH4JVX5TJNL/opjUN17fD9rAxLa/saDEYPqODadl/Qm
t65u00sv
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:06:52 2026 by rpki-client