Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137372e302f32342d3234203d3e2030.roa
File: 3138352e3136322e3137372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: XFaOCfM8u/qSC5BVDzYBRJPwjY30N/Mccz5aaMmFI8I=
Subject key identifier: 82:13:FE:1C:DA:F9:16:F8:AC:8F:94:91:AF:D3:6F:46:E9:9E:B9:73
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 7CF417E23A3ACBAF6E15B5E05C2E7079CB81348B
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137372e302f32342d3234203d3e2030.roa
Signing time: Wed 04 Nov 2026 06:57:09 +0000
ROA not before: Wed 04 Nov 2026 06:52:09 +0000
ROA not after: Wed 03 Nov 2027 06:57:09 +0000
asID: 0
IP address blocks: 185.162.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Nov 2026 11:54:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f4:17:e2:3a:3a:cb:af:6e:15:b5:e0:5c:2e:70:79:cb:81:34:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Nov 4 06:52:09 2026 GMT
Not After : Nov 3 06:57:09 2027 GMT
Subject: CN=8213FE1CDAF916F8AC8F9491AFD36F46E99EB973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:3b:7f:64:e9:1e:ee:a9:3b:1e:9f:4b:11:
bf:ae:c3:b3:4f:51:82:0c:a0:ef:ca:1b:2e:41:35:
47:66:2c:6b:6b:b8:20:02:90:8c:23:90:12:21:2c:
c1:16:f9:69:c3:7b:5b:30:ea:9d:dc:b8:42:65:1a:
be:71:1f:b5:06:32:d1:4d:48:bc:5b:d6:ac:7e:1b:
01:84:48:73:1e:44:23:df:76:80:63:ba:83:e7:e9:
bc:25:a2:04:c3:96:c5:4a:54:19:29:dc:7e:0a:1d:
41:b1:81:19:9a:20:92:a8:3c:76:c5:15:ea:2c:27:
ea:f9:36:cc:22:a4:0a:5c:ae:67:ab:0c:dc:4b:cb:
08:fd:46:5f:b0:58:1d:d7:4a:aa:15:48:0d:92:9e:
63:f9:28:f7:bc:b9:72:7e:5f:9d:53:3a:c5:d2:da:
82:d4:1c:39:84:2f:27:d2:7c:c7:05:14:80:94:19:
34:81:b5:f8:47:d9:09:2a:16:11:84:d4:ee:b1:09:
00:28:d3:8a:0f:71:3c:a0:23:90:a1:29:72:c9:5d:
45:38:c6:e7:56:30:4a:e1:4d:57:de:7e:b4:53:62:
d9:ce:8a:76:e7:aa:7b:f3:2d:0e:09:53:67:7f:07:
14:07:98:4e:4a:c9:3b:62:64:d3:00:25:df:43:75:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:13:FE:1C:DA:F9:16:F8:AC:8F:94:91:AF:D3:6F:46:E9:9E:B9:73
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137372e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.177.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b5:5f:ce:ad:11:21:2c:2c:21:da:44:8e:fa:9c:b0:57:ea:
cf:42:c6:40:f9:7c:8f:d5:a6:c4:7e:20:df:9d:33:1f:cc:28:
85:f7:d5:5e:fd:2e:7a:88:5d:a9:4d:08:d4:cd:96:1b:e5:52:
30:26:2d:61:d0:d0:4e:ce:0b:42:7a:a0:4e:99:0f:03:dc:c1:
c5:86:a1:1d:4e:bb:fb:07:69:ec:de:5b:94:ee:89:01:97:d8:
57:21:97:7a:8d:ae:17:d7:27:ea:35:41:53:7a:a4:b4:0b:d8:
b1:7c:64:8e:e1:6a:61:14:47:99:f3:2f:4d:cb:8d:ca:8c:a5:
1f:33:56:27:b7:19:d4:f7:88:e5:28:fe:91:01:f0:47:40:70:
1d:34:d6:66:e1:e4:73:12:53:5e:cc:32:24:72:78:8e:97:01:
23:ad:dc:71:60:a1:74:07:6b:cd:a5:c7:24:51:8c:5a:04:7c:
95:12:8c:28:f6:c9:43:47:1e:25:9a:2e:a8:7c:e9:6a:4a:d1:
e4:cb:c6:45:3d:98:6e:32:21:c9:28:fc:20:2a:91:af:ee:e2:
ee:87:a3:f3:d4:d7:24:6e:ef:71:a4:d8:2d:91:94:fa:b9:18:
98:36:e2:3f:cf:54:0c:af:75:e4:cb:90:6e:06:39:7e:fc:34:
d0:a5:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:15:26 2026 by rpki-client