Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138382e302f32322d3234203d3e20383334.roa
File: 3230302e3138302e3138382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: +ofSxiO9jU0xhRAsmJ6ISWsCkKCQ5Q37Wt5RrMyFmsA=
Subject key identifier: E7:0C:DF:8C:06:FE:D2:C9:88:DE:49:4E:F3:C6:D5:9E:2C:66:7D:4F
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 49A2E07D7C9E785DCFC01BEE5C975B69234BBCBB
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138382e302f32322d3234203d3e20383334.roa
Signing time: Sun 20 Sep 2026 04:05:31 +0000
ROA not before: Sun 20 Sep 2026 04:00:31 +0000
ROA not after: Sun 19 Sep 2027 04:05:31 +0000
asID: 834
IP address blocks: 200.180.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Sep 2026 08:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a2:e0:7d:7c:9e:78:5d:cf:c0:1b:ee:5c:97:5b:69:23:4b:bc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Sep 20 04:00:31 2026 GMT
Not After : Sep 19 04:05:31 2027 GMT
Subject: CN=E70CDF8C06FED2C988DE494EF3C6D59E2C667D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d9:5c:fc:d1:2d:84:a5:b9:6d:ce:3c:fb:2a:
ba:c6:c7:ff:88:66:c7:56:c7:37:d4:2f:0b:0a:0d:
51:56:28:dc:bb:06:51:a4:85:76:b7:5f:59:ae:eb:
f3:cb:6b:14:24:84:b7:47:7a:0a:eb:60:1b:74:ec:
b3:75:14:e5:10:15:3a:f3:58:bc:79:bc:e5:ff:43:
07:3e:8c:b7:f9:87:02:9e:1a:e2:55:c9:b3:57:18:
12:f6:1b:aa:cb:d2:15:19:fa:82:98:80:eb:0c:d9:
8e:5c:f8:7f:bb:43:d0:66:7c:08:86:b2:23:7c:9e:
69:9b:8c:64:02:7f:89:be:77:ea:9d:55:97:db:7a:
68:e7:39:d8:0f:48:0e:5a:1d:7c:af:00:8f:f7:a1:
69:4d:60:13:6b:66:e6:f8:5a:46:f0:95:5b:e1:76:
ea:f0:62:08:a0:85:9a:13:8a:28:dd:5c:6b:02:5e:
c0:c1:7d:b0:ac:c0:7e:fd:c4:ca:d7:01:be:42:aa:
1b:59:fd:c3:0a:8d:5f:c6:82:19:5d:12:28:ee:e8:
2a:bf:24:b2:6f:14:92:34:4e:c7:0c:42:a2:59:42:
2f:7f:a9:9a:4a:be:7f:83:b7:8f:eb:03:5f:55:fb:
08:10:00:95:a6:bc:b6:41:c7:49:1b:5a:2b:a0:ab:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0C:DF:8C:06:FE:D2:C9:88:DE:49:4E:F3:C6:D5:9E:2C:66:7D:4F
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138382e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:af:63:00:ed:53:ba:48:a9:c4:da:cd:e2:74:b2:9b:b5:b7:
84:4a:2b:2e:16:65:ee:94:ba:93:23:3e:f1:a5:d4:1d:eb:4b:
17:5c:0d:4c:05:67:56:32:63:3d:d3:e0:55:dd:2d:34:ba:04:
40:1d:2d:45:2a:e5:6a:ee:17:2c:74:1b:97:3c:21:41:d5:f3:
ef:45:81:28:20:50:56:e1:f2:1c:b4:33:a3:c9:45:0d:86:21:
af:47:c6:dd:b3:32:4e:ba:e0:de:ad:bf:dd:61:1d:7d:c4:69:
66:22:9a:9b:5b:3d:a6:d4:02:3d:c5:f7:a7:ac:7d:89:bc:26:
0f:34:88:f0:72:18:4d:28:be:de:21:d9:04:b5:a2:c2:ed:83:
24:cb:05:61:54:27:66:2e:c3:66:34:1a:7f:d5:c4:03:77:ba:
9d:90:7c:dc:cd:49:02:2d:99:76:0e:b6:23:ff:b6:a4:42:2d:
69:4e:4a:e7:38:76:aa:9e:72:26:a9:50:be:f9:41:b8:b1:ac:
4c:62:84:81:ef:09:08:39:3b:44:a4:f1:27:78:5d:ff:59:37:
c5:d1:8b:6a:b8:04:12:12:31:ed:1f:1d:de:b2:3f:49:e7:6b:
7a:9b:29:27:64:2d:f8:2f:de:48:e0:8f:7b:6b:f9:c2:0a:3e:
ec:e2:57:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:42:12 2026 by rpki-client