Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: v6rVopmb/QMcyyIcLE90/IKBuhEOYCN1SMJWNr6/ZRQ=
Subject key identifier: 00:D0:97:D1:32:8D:F0:EA:54:92:D5:25:6F:B0:6E:AC:DA:EF:22:D3
Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial: 77FFA6ECF63DF4AC2335170240697332B0F36671
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa
Signing time: Fri 05 Jun 2026 20:46:10 +0000
ROA not before: Fri 05 Jun 2026 20:41:10 +0000
ROA not after: Fri 04 Jun 2027 20:46:10 +0000
asID: 151349
IP address blocks: 2a06:9f81:3011::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Jun 2026 15:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ff:a6:ec:f6:3d:f4:ac:23:35:17:02:40:69:73:32:b0:f3:66:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Validity
Not Before: Jun 5 20:41:10 2026 GMT
Not After : Jun 4 20:46:10 2027 GMT
Subject: CN=00D097D1328DF0EA5492D5256FB06EACDAEF22D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:23:10:76:54:73:af:26:f0:e2:01:19:8b:43:
61:23:f6:63:a6:bf:9d:0d:35:39:a0:a3:fc:dc:5b:
f1:33:20:5e:f5:eb:e1:8f:ce:76:9f:38:31:93:cd:
b6:41:d2:ea:3c:8d:dc:f7:99:5d:66:84:6f:14:98:
9f:5b:19:a8:5d:6a:54:b6:5d:20:87:6f:70:cc:7d:
c9:e2:64:58:d3:11:b6:86:a6:04:c9:ca:95:f1:22:
60:51:ac:74:ac:9d:30:c4:81:fe:bb:65:6d:ef:5f:
94:c5:f1:4b:3a:24:58:1b:72:f1:93:61:21:15:d5:
15:b9:77:87:73:36:6f:fe:35:aa:2a:71:f9:e7:d3:
dc:8c:c2:59:4f:39:12:c3:5d:a2:34:2c:f2:0b:5f:
f4:a2:ef:e5:39:b1:8a:ae:ff:44:eb:f7:22:83:f0:
67:09:d7:f2:0e:ae:f9:b8:8f:5a:23:1d:87:6a:6c:
44:5d:74:37:6c:0e:f3:75:9f:4a:96:e8:6e:84:a0:
fc:98:ea:8b:bd:e6:bb:fa:da:f7:4f:68:d6:2b:2e:
f4:03:62:57:31:6d:bb:ae:21:0c:c4:d4:d7:f3:21:
d2:bb:75:09:28:a3:b8:9a:34:3f:da:6b:07:49:a1:
cd:89:02:73:ae:fe:61:60:3f:f3:72:a7:6d:8a:f5:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D0:97:D1:32:8D:F0:EA:54:92:D5:25:6F:B0:6E:AC:DA:EF:22:D3
X509v3 Authority Key Identifier:
keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3011::/48
Signature Algorithm: sha256WithRSAEncryption
41:fb:83:90:c1:b4:a5:81:b4:25:63:98:0b:dd:9f:65:93:80:
b5:89:ab:3e:d1:1e:30:fd:38:47:59:44:48:8b:76:78:cf:14:
d2:c5:a0:6d:59:85:3a:cc:0a:1f:b8:2e:10:55:24:cd:5a:e5:
0f:c9:3c:75:3b:97:5e:54:92:a2:9b:7d:c2:54:40:25:19:46:
5f:7a:05:08:47:be:c5:cd:07:7d:ae:6d:13:cf:fe:f0:6a:31:
68:16:70:43:02:e5:de:0a:df:c5:59:44:ac:f0:69:22:36:e1:
b9:49:81:f1:19:c5:81:d3:8b:f5:ee:ae:1c:76:00:0a:b2:e3:
fb:9c:5d:11:b4:e5:a4:e8:e3:40:36:bd:e4:bd:3e:b2:00:3d:
5d:18:9f:7d:e6:03:00:33:3e:f0:01:0c:66:70:9d:b7:9b:d5:
d2:51:1b:48:d1:1f:d2:93:88:ef:b0:65:76:c5:15:e4:f8:ac:
b9:fe:60:1c:c8:dd:b3:14:e1:36:09:01:0d:6b:ab:18:33:75:
93:69:08:f3:bd:2e:19:0d:5c:5b:fa:33:7b:cb:22:ff:3e:e1:
54:d7:99:d8:1c:57:54:59:36:69:9b:e8:43:16:a1:96:78:d6:
54:26:76:36:7b:fc:21:82:5f:36:42:ae:64:7c:34:51:83:e6:
b8:87:b9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:13:10 2026 by rpki-client