Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa
File: 326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: p2spmSWJ6fKcjyQjLBtcF5BD0R2A1mYMjqGlSkiciJk=
Subject key identifier: 83:B2:5C:93:E9:3A:0E:4C:82:0B:78:37:68:ED:49:81:53:9C:90:73
Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial: 1AD27DD85350AE1B8C92255722956EFD4DB67BC5
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa
Signing time: Fri 05 Jun 2026 20:46:15 +0000
ROA not before: Fri 05 Jun 2026 20:41:15 +0000
ROA not after: Fri 04 Jun 2027 20:46:15 +0000
asID: 16509
IP address blocks: 2a06:9f81:30f9::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Jun 2026 15:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d2:7d:d8:53:50:ae:1b:8c:92:25:57:22:95:6e:fd:4d:b6:7b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Validity
Not Before: Jun 5 20:41:15 2026 GMT
Not After : Jun 4 20:46:15 2027 GMT
Subject: CN=83B25C93E93A0E4C820B783768ED4981539C9073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:7b:85:d6:37:55:eb:00:0c:fe:2a:fc:ed:
00:0b:29:a8:f5:76:92:d1:e6:ba:e4:68:2e:86:4a:
17:4b:9c:e2:de:b0:a1:ad:72:ff:de:4b:f0:6c:62:
8f:22:cf:24:35:34:6f:a1:29:14:d5:98:b9:0b:43:
db:1e:44:13:5a:3d:73:ba:2e:55:9c:dd:0b:43:8b:
b3:21:d7:8a:98:fd:47:66:e1:40:1b:a0:f7:ce:77:
1a:f1:3a:4c:15:42:8b:3f:d3:31:d7:77:99:09:5f:
8d:cc:63:42:a5:e0:1c:0c:d9:a2:c7:7e:d5:3d:26:
0d:82:5d:60:64:96:fb:e7:36:ed:a4:8d:03:d3:1d:
45:fe:ee:ad:56:6f:cf:38:a2:08:0e:4c:60:13:38:
bb:7e:0e:8d:e7:87:a5:3c:42:4f:89:79:03:5d:c0:
da:11:31:6f:aa:5d:f6:7f:a2:d8:f4:49:fd:75:21:
66:29:63:d6:5f:92:3b:24:f6:c7:6b:9d:c6:4f:4e:
19:bc:7a:af:1b:d1:3a:3b:43:ee:e9:c9:47:1b:22:
92:80:1f:43:0d:47:4f:69:5d:ed:07:27:8f:42:2c:
dc:ee:b5:af:dc:7c:66:77:e3:0c:ed:8c:21:a0:54:
24:4f:64:18:e3:9b:ca:6b:9d:31:40:10:b3:ba:e8:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B2:5C:93:E9:3A:0E:4C:82:0B:78:37:68:ED:49:81:53:9C:90:73
X509v3 Authority Key Identifier:
keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:30f9::/48
Signature Algorithm: sha256WithRSAEncryption
75:f4:4b:ea:6d:43:1f:f1:2c:ca:9d:06:b8:f4:89:32:94:53:
f5:0f:51:ff:75:cc:94:7c:2d:1f:b5:cc:e8:4d:16:d2:fe:e0:
45:41:71:24:72:65:57:f1:82:5f:f2:09:b5:9d:cc:ee:b7:53:
c0:77:81:bf:8e:e2:d3:47:de:7e:f0:04:02:8b:0c:dc:01:b4:
98:8d:ef:f9:d4:3e:cb:c1:bc:b4:0e:b5:94:93:e4:cf:e7:d3:
7a:27:a8:63:a1:21:f5:f1:ec:55:db:20:28:27:a4:83:3e:df:
48:af:d6:87:c1:34:d0:57:87:fb:3f:46:3b:71:e4:5d:67:6c:
8e:80:e8:1d:6b:26:0c:3f:8e:55:ef:4e:05:b9:7a:40:83:99:
7c:67:bc:5e:9b:c4:04:4e:03:47:7c:d9:fe:b6:ed:13:37:9a:
86:70:69:bf:1d:48:e6:e1:ab:e9:a6:01:ca:06:b1:c2:d5:e1:
01:a5:46:fc:57:8a:b7:63:a4:4c:72:10:df:aa:76:14:e4:63:
aa:c2:5c:55:63:b3:b2:9b:f0:a6:d9:e7:da:ba:4b:a3:69:c6:
ea:04:3f:74:b9:d0:b5:00:c4:b2:22:fc:d6:76:d0:3a:a0:0e:
cc:b3:ab:ca:35:61:7b:21:07:d0:98:58:2d:ff:06:ac:4e:90:
fc:43:8a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:11:53 2026 by rpki-client