Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137372e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3137372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: /T0MVkzHCklA4BhvMD9VWFP3W9bapm4VViwCjX+aYb4=
Subject key identifier: 7D:CA:9B:D4:A2:0B:32:14:50:2A:0C:04:B1:03:12:54:C3:FA:A1:19
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 0709E41CC67142274B264967C91A520CCE69054F
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137372e302f32342d3234203d3e20383334.roa
Signing time: Sun 23 Aug 2026 07:16:23 +0000
ROA not before: Sun 23 Aug 2026 07:11:23 +0000
ROA not after: Sun 22 Aug 2027 07:16:23 +0000
asID: 834
IP address blocks: 147.125.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 07:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:09:e4:1c:c6:71:42:27:4b:26:49:67:c9:1a:52:0c:ce:69:05:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 23 07:11:23 2026 GMT
Not After : Aug 22 07:16:23 2027 GMT
Subject: CN=7DCA9BD4A20B3214502A0C04B1031254C3FAA119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:05:01:1e:ed:be:78:ab:8c:97:61:0c:d5:e0:
90:e6:10:e0:bc:48:5d:74:fa:88:82:69:01:a8:eb:
3a:35:9e:1d:26:c8:05:b1:de:11:c7:97:ed:4c:e1:
cf:5e:29:0e:af:9c:36:63:51:c1:b6:8c:e7:ff:c2:
4b:29:23:64:82:41:f3:6c:ab:0d:f4:de:16:c8:ef:
db:d6:e0:91:63:e9:f5:3f:35:7e:07:84:70:a5:9c:
85:a9:12:92:9a:14:b5:bc:c4:32:cc:12:87:fa:6c:
f2:48:42:80:7f:8d:a9:b4:7c:e3:d5:8a:cf:40:4a:
d1:88:29:b6:42:82:f0:34:07:e9:52:5d:19:1c:5d:
b1:5d:4e:77:c5:46:96:fc:99:9c:4a:7c:61:3b:a6:
89:d8:09:7a:7c:21:6a:7b:44:e7:16:ef:eb:3f:d2:
22:a5:ef:ab:8b:f8:01:17:cd:1b:24:d2:eb:00:e8:
91:8c:8a:55:27:b9:7a:74:79:ed:53:73:04:91:13:
b9:9e:41:ae:e9:9c:44:6f:d5:08:50:fc:ca:b3:02:
87:03:91:b8:14:13:64:38:72:73:50:73:5c:fd:2d:
5e:5d:7b:d5:b4:7a:34:ae:06:f5:a5:89:c3:21:eb:
e6:cb:21:06:18:91:4b:61:38:e5:44:69:29:11:1b:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CA:9B:D4:A2:0B:32:14:50:2A:0C:04:B1:03:12:54:C3:FA:A1:19
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a0:12:95:ac:75:39:ef:06:22:d1:07:9d:41:62:62:73:60:
f5:bb:3e:6b:e6:fa:d8:82:1b:60:a9:f4:e4:2b:fb:13:c5:4e:
32:0c:0c:ce:ac:08:50:fc:9b:df:b2:6c:4a:69:d5:30:34:06:
13:0c:11:26:e8:77:81:69:42:27:65:2f:3d:ba:67:12:a1:22:
47:fd:f1:9e:66:ec:b2:82:77:f9:5e:b7:0b:73:69:77:e4:be:
22:6c:54:c1:7c:b3:38:ad:38:46:44:c4:6c:b2:ff:4d:fb:3a:
40:c3:3f:12:28:f1:a2:0a:11:26:e7:9a:14:ee:33:13:b1:0d:
83:1f:12:cc:63:8b:49:8a:52:8a:cb:0a:a5:93:9a:61:dc:ba:
75:2d:c0:1c:68:a6:82:b2:01:71:41:6a:80:5d:d4:55:62:e9:
e5:64:5d:db:38:5e:e3:84:d2:88:34:19:d3:9e:d7:5f:cd:18:
a9:ff:35:41:44:93:ac:18:83:67:f8:57:e9:ab:7c:1f:24:a5:
21:d8:38:e1:3b:9a:1b:63:ec:9e:f4:e2:f5:0d:9a:ec:11:b2:
89:b8:3d:b0:dd:1e:9d:03:3a:bd:58:81:16:59:14:ef:d1:ec:
cf:02:e9:bb:e3:9b:5e:90:a6:79:e5:68:1a:ce:aa:df:7f:d5:
da:5e:92:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:16:05 2026 by rpki-client