Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa
File: 326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa (raw, json)
Hash identifier: TUUNLb3b5i8vzGuP+Llrx8trEXBj5uvzg5IZfz+Z25Q=
Subject key identifier: E3:0A:2C:6C:E1:54:23:C1:EA:7E:AB:EA:0E:CC:E7:81:FE:D5:93:55
Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial: 41C069689ECB662A617E9AC0988CBB1994A70540
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa
Signing time: Fri 05 Jun 2026 20:46:06 +0000
ROA not before: Fri 05 Jun 2026 20:41:06 +0000
ROA not after: Fri 04 Jun 2027 20:46:06 +0000
asID: 147036
IP address blocks: 2a06:9f81:3045::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Jun 2026 15:26:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c0:69:68:9e:cb:66:2a:61:7e:9a:c0:98:8c:bb:19:94:a7:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Validity
Not Before: Jun 5 20:41:06 2026 GMT
Not After : Jun 4 20:46:06 2027 GMT
Subject: CN=E30A2C6CE15423C1EA7EABEA0ECCE781FED59355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:59:d1:80:b0:3e:45:2b:af:21:e9:9a:ae:
0f:26:ce:50:de:7a:21:d5:68:b1:1a:6e:cf:93:c5:
b0:20:c8:5a:f2:eb:e7:f6:91:ca:ec:24:ab:eb:eb:
ac:9e:20:ae:3a:a0:8e:fc:8e:37:b1:ae:bf:21:65:
a9:ad:be:67:72:15:31:a6:da:66:ad:a4:c2:52:39:
8a:ce:db:ff:34:98:08:1f:08:d2:76:9d:e9:cd:f1:
00:32:0e:3e:32:3d:ec:aa:59:e7:c6:8e:d0:d1:32:
9e:a6:dc:1f:20:a0:77:f3:45:f4:08:82:c4:d6:16:
d1:fb:5d:e9:6e:59:13:9a:19:49:f9:c0:fd:c9:5b:
48:79:09:f5:fd:08:0e:a6:c8:17:85:8d:b6:16:b3:
39:3d:d6:21:91:c6:c7:d9:76:d1:e9:de:15:21:43:
83:19:94:66:b7:98:80:81:2c:cb:7e:d8:b5:e0:48:
1d:45:ea:48:e8:e8:ca:50:94:50:b3:c1:84:52:75:
16:e9:e2:b8:7c:0c:3d:43:58:df:5b:6d:8b:cd:30:
b8:16:11:88:e1:cd:78:36:08:77:c4:60:07:a6:ed:
2e:ca:41:11:2a:3b:c3:5c:70:a5:d6:df:4d:48:51:
4a:37:f2:ed:d6:fe:9c:5d:a8:cd:de:94:74:53:6d:
69:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0A:2C:6C:E1:54:23:C1:EA:7E:AB:EA:0E:CC:E7:81:FE:D5:93:55
X509v3 Authority Key Identifier:
keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3045::/48
Signature Algorithm: sha256WithRSAEncryption
17:c6:1f:63:c2:24:f2:0f:68:7c:b2:97:28:5b:3a:d7:f8:36:
1c:22:cb:fd:d3:24:5f:66:f6:e9:b7:be:35:92:6f:55:8e:ad:
6a:41:cf:51:ca:03:e2:d7:2e:f6:19:93:60:4f:a8:0e:17:76:
08:4a:5b:fd:c9:68:95:e7:6f:e6:2b:d7:ed:0d:95:fe:f4:18:
b1:a2:31:c3:28:3a:a1:fc:f7:1b:34:6a:95:44:76:a2:1a:18:
53:0f:5c:79:79:76:49:6e:50:36:e4:9f:30:08:59:f1:10:7e:
03:91:90:29:54:c2:0f:63:8a:93:74:4d:38:9f:4c:f5:c8:06:
6e:7b:b8:c5:a6:47:eb:8b:19:42:45:1e:e5:94:79:eb:e3:07:
80:61:44:6c:2a:a2:e2:74:cb:40:bb:7e:da:b2:7a:fe:bd:eb:
47:2e:5c:ae:79:b3:9d:5a:5d:96:c4:f5:14:df:86:99:62:82:
fe:75:ee:36:65:e5:a9:a5:2a:a8:4d:65:d9:03:83:ff:95:d7:
ad:e1:08:27:86:ed:73:69:13:71:10:a0:cf:22:e7:92:d8:f3:
e0:5f:10:2a:42:8a:02:be:8f:61:cc:ce:04:66:6b:b3:d6:57:
1f:d9:9b:2c:59:b3:50:21:2c:27:a1:46:75:9d:42:45:7f:2b:
80:28:4e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:02:04 2026 by rpki-client