Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: BM9oZiVyl1Smj9c1uifiUseJszh9FTrWYfxgpL9UeMo=
Subject key identifier: 03:AF:9C:A2:CF:B4:A3:82:F9:00:9F:3C:98:53:1F:34:A2:38:25:2D
Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial: 79E0BE41A47443A59E8C3C4330C6BA77378614D5
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa
Signing time: Fri 05 Jun 2026 20:46:14 +0000
ROA not before: Fri 05 Jun 2026 20:41:14 +0000
ROA not after: Fri 04 Jun 2027 20:46:14 +0000
asID: 151349
IP address blocks: 2a06:9f81:3001::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Jun 2026 15:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:e0:be:41:a4:74:43:a5:9e:8c:3c:43:30:c6:ba:77:37:86:14:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Validity
Not Before: Jun 5 20:41:14 2026 GMT
Not After : Jun 4 20:46:14 2027 GMT
Subject: CN=03AF9CA2CFB4A382F9009F3C98531F34A238252D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:e7:52:d1:a1:41:f1:e8:77:ca:40:f0:e9:
7c:8f:e3:90:c1:dc:41:15:e3:4d:57:c0:e7:d4:0b:
25:53:5c:6d:25:26:31:23:67:15:3d:4d:39:e0:84:
a4:9a:e2:3a:10:b9:6e:e2:43:cd:4d:d6:e2:f8:f6:
35:86:70:31:2f:1c:be:df:22:a0:19:63:9d:37:21:
bf:26:39:c6:ff:69:5c:71:15:c6:12:07:4f:a4:70:
08:e7:4d:a9:6e:64:78:78:73:4a:06:9a:53:d2:ff:
b7:a6:f5:be:e2:6d:02:61:4d:53:c4:c3:89:57:a3:
e9:fa:75:83:35:d4:08:22:47:da:44:fa:ff:bd:41:
45:fe:a7:7f:5f:27:b4:05:a2:cc:7b:74:1c:a8:04:
d0:a2:38:40:ed:b2:61:1d:0b:4e:d2:02:e5:48:c8:
4a:bb:91:cc:04:c4:69:c4:db:0b:4a:c3:4b:0b:db:
60:d3:ef:33:3c:d8:08:af:7c:3e:52:56:b1:34:27:
b7:9c:89:3e:86:40:51:09:8a:7b:e3:74:5d:53:22:
19:c9:4c:ef:2c:2b:7a:48:f8:d6:54:e3:93:56:b6:
06:3c:c2:72:a0:c1:3a:43:71:00:49:a2:96:ba:1c:
3c:bf:1f:92:bd:f8:b1:b6:3a:77:dd:0b:04:93:72:
30:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AF:9C:A2:CF:B4:A3:82:F9:00:9F:3C:98:53:1F:34:A2:38:25:2D
X509v3 Authority Key Identifier:
keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3001::/48
Signature Algorithm: sha256WithRSAEncryption
60:4b:36:6a:e7:ec:fe:87:2e:fb:fb:3a:5b:47:15:89:c2:b1:
1d:7a:36:65:e0:73:eb:c1:26:85:fa:d5:c8:77:6a:4f:ae:31:
0e:f9:55:3f:e4:f3:f9:66:43:49:31:31:9c:24:b7:36:07:14:
d9:96:f1:08:1f:71:70:b3:01:96:b3:82:f4:f8:9c:63:fa:4c:
97:45:dc:b5:26:77:78:9a:d6:72:43:d5:e4:1a:c1:76:c5:20:
36:0e:50:40:68:ab:8a:ef:af:50:0a:dc:bf:b9:62:82:b7:9f:
72:d1:34:ad:2a:20:e2:b6:1f:93:b9:8a:c2:80:e6:01:d6:9c:
da:62:02:af:34:35:93:09:7f:17:0b:29:c1:48:10:7a:58:03:
b9:58:22:f3:2b:df:2e:a5:fc:d0:78:9e:61:a6:55:e7:46:ee:
16:9b:21:3c:9d:1e:6f:63:6f:51:72:a4:21:69:04:5c:d5:b1:
c5:5e:87:d2:84:66:39:e4:34:47:e7:93:65:1f:62:31:d9:37:
78:03:6c:a7:00:92:ca:9f:b9:3c:27:87:04:ab:ae:80:7f:37:
6a:88:53:01:a1:68:b1:53:4b:c9:17:a8:fa:f4:06:5d:e1:48:
5c:a5:e2:f9:78:67:d4:ac:73:52:bf:67:cb:a0:97:6b:19:91:
b8:9f:3c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:34:31 2026 by rpki-client