Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: 0MnobC7dC0ZDS86DLQtL6VA77WDiu48DC0pZeNj5MUQ=
Subject key identifier: 18:7D:D2:F1:97:2B:6E:A3:42:99:9B:7B:F6:37:71:B9:93:ED:C2:3F
Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial: 663E294F9777402973C21127E0521A2847FDCC7C
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
Signing time: Fri 05 Jun 2026 20:46:12 +0000
ROA not before: Fri 05 Jun 2026 20:41:12 +0000
ROA not after: Fri 04 Jun 2027 20:46:12 +0000
asID: 151349
IP address blocks: 2a06:9f81:3031::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Jun 2026 15:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:3e:29:4f:97:77:40:29:73:c2:11:27:e0:52:1a:28:47:fd:cc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Validity
Not Before: Jun 5 20:41:12 2026 GMT
Not After : Jun 4 20:46:12 2027 GMT
Subject: CN=187DD2F1972B6EA342999B7BF63771B993EDC23F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:34:91:fa:de:a9:0a:5e:65:70:93:61:f1:c4:
55:f6:b7:86:41:5b:9c:cd:35:d5:98:07:9d:e7:15:
6f:2e:1c:02:84:0e:62:18:b4:a6:e8:48:79:43:9b:
7e:63:b6:89:03:66:5c:a2:d4:bb:30:59:e1:f9:f1:
a9:89:5d:95:8d:96:2e:fd:7d:0c:f5:c4:f9:bb:d0:
09:7a:02:01:0c:6c:06:77:41:02:1c:b6:ad:a0:46:
b9:19:20:eb:ec:fc:60:07:af:f8:0c:b5:bd:1d:f0:
b2:04:53:27:44:da:7b:3b:9c:f3:14:58:42:30:f6:
50:b3:8a:2e:f4:85:ef:3d:1e:01:f1:3d:32:34:34:
a2:ec:8d:ed:d7:4b:7f:8f:3b:cb:47:f9:e6:bc:7f:
9e:ae:8e:df:49:d9:97:0b:09:cf:44:84:b5:67:de:
65:63:31:22:d3:41:05:ca:f4:2d:96:10:d0:e8:1c:
fe:e0:b8:45:cb:c4:4a:15:e2:ff:48:c1:fb:e1:3c:
7e:a1:0f:98:20:e6:2a:a4:56:75:59:44:bf:da:fe:
23:ca:4d:b1:a4:62:73:f1:1c:97:9d:62:44:06:e8:
f5:3f:4a:ca:a8:d9:0d:40:27:98:95:53:23:09:11:
29:e5:47:56:16:69:d5:35:c9:d2:35:53:ee:45:3d:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7D:D2:F1:97:2B:6E:A3:42:99:9B:7B:F6:37:71:B9:93:ED:C2:3F
X509v3 Authority Key Identifier:
keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3031::/48
Signature Algorithm: sha256WithRSAEncryption
99:7d:df:9f:99:9f:94:42:65:19:30:7b:1e:55:f6:f0:a5:99:
3f:6a:54:93:b5:dc:85:f3:6e:a2:1f:e2:14:ed:c4:27:2c:c8:
88:9e:60:11:e4:d3:7d:f1:88:2c:3b:27:f4:d3:f5:b6:47:ec:
02:bf:b6:3c:4b:3d:1f:1e:a5:76:74:37:be:53:4e:a8:17:68:
d6:b2:ed:01:14:9c:09:3f:bc:3a:b0:b1:e8:96:ec:49:25:18:
93:72:02:33:b3:44:29:96:59:59:c0:e6:b2:7d:0f:6c:02:f1:
94:4e:54:56:1c:f2:cd:18:f6:3a:bc:92:6c:70:e7:27:84:20:
77:24:f8:9d:14:5f:8e:d3:27:ec:53:a1:24:8e:f1:d3:5b:4b:
be:b2:f8:28:99:72:1e:3f:f7:ad:c4:6e:a3:52:89:3c:36:9c:
bf:be:65:d0:f8:bd:ff:7c:8d:e1:7c:41:1b:90:85:e7:65:d5:
d0:34:93:5e:0f:b7:6f:ca:0f:dd:04:fd:e5:46:ca:1a:30:3e:
de:b2:a9:98:94:fc:b8:f0:27:24:b8:28:fd:70:ff:43:11:69:
ff:fd:54:8a:67:01:36:f4:64:23:0b:2b:df:07:e7:e7:57:a1:
b5:9d:79:4e:3e:92:b2:94:46:de:8b:73:5e:9f:a2:e8:aa:1a:
4f:8f:c4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:53:45 2026 by rpki-client