Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32342d3234203d3e20323134313734.roa
File: 3130332e34392e3133302e302f32342d3234203d3e20323134313734.roa (raw, json)
Hash identifier: GQbvplh/iG+rnC/2ELO7kZI2K0yUTdZC4a5ptnlo34Y=
Subject key identifier: 6D:18:DE:3F:AD:D8:59:12:33:7F:75:9C:1D:5B:D2:70:F4:C5:BD:36
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 6E80E92DD7A21384BF74BECF6C06126A367BC30B
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32342d3234203d3e20323134313734.roa
Signing time: Fri 06 Feb 2026 11:17:50 +0000
ROA not before: Fri 06 Feb 2026 11:12:50 +0000
ROA not after: Fri 05 Feb 2027 11:17:50 +0000
asID: 214174
IP address blocks: 103.49.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Feb 2026 10:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:80:e9:2d:d7:a2:13:84:bf:74:be:cf:6c:06:12:6a:36:7b:c3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Feb 6 11:12:50 2026 GMT
Not After : Feb 5 11:17:50 2027 GMT
Subject: CN=6D18DE3FADD85912337F759C1D5BD270F4C5BD36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:b0:e2:26:25:92:ee:9b:69:9f:20:89:f1:
fa:06:4d:e3:88:28:ee:04:6e:19:f3:3f:8b:47:e1:
83:4f:36:ab:6d:a5:2b:7a:22:6f:83:3b:7a:77:3b:
83:92:1e:61:fb:65:43:1d:2e:80:28:75:42:14:b8:
1c:72:97:ed:1d:27:1a:b3:f4:76:06:64:ef:d3:fc:
9d:06:bd:61:93:19:1b:b5:04:c7:78:71:fa:34:8c:
43:26:e0:65:9b:04:88:4b:ed:3b:6a:a8:c4:f1:94:
36:02:d4:26:5e:08:36:38:d8:b5:e1:76:b2:e5:ea:
b0:47:3d:6d:ca:46:37:e8:1f:bf:2d:eb:7b:0c:b4:
06:d3:e9:fe:79:3e:91:20:07:da:97:76:66:bc:eb:
79:1a:db:7f:2d:c7:f7:02:23:ba:79:41:8e:b2:c2:
f0:20:69:c4:c9:68:bc:be:62:be:86:6c:ee:ad:ae:
73:2f:a6:c8:b8:85:c7:bb:d4:96:c6:05:35:22:99:
36:2b:eb:2c:3b:93:fa:fa:b7:0d:34:e9:03:11:07:
75:e1:4a:4d:e3:76:aa:88:2c:5e:f4:5b:07:69:3c:
aa:32:63:00:aa:ec:25:d6:d0:e8:3d:c8:c0:44:26:
54:94:bc:3b:79:f2:97:28:8e:26:e9:d2:47:5c:8c:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:18:DE:3F:AD:D8:59:12:33:7F:75:9C:1D:5B:D2:70:F4:C5:BD:36
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32342d3234203d3e20323134313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0e:11:36:80:73:44:f3:47:df:ce:6b:68:e4:26:a2:91:6f:
f4:d1:0d:94:18:57:d1:56:07:28:5c:a2:78:ee:c6:f7:49:63:
a7:c7:42:e4:27:87:2f:35:55:c7:f7:3e:15:4b:d7:3f:ae:a7:
1e:86:db:1a:dc:ec:6f:9e:61:6b:a8:c0:8c:86:46:99:5c:5f:
8d:66:5e:18:f1:bf:15:78:de:2d:ea:f2:6e:9c:6d:9c:25:c2:
1a:4a:a9:4d:19:38:19:d1:d3:66:36:5f:3c:7f:0b:09:5e:49:
73:57:25:a5:ac:66:00:85:44:b7:59:99:f7:f6:0c:78:a6:31:
b9:78:e8:1f:30:99:9d:11:7b:a1:41:50:0a:0f:1a:dc:f1:4b:
69:e5:0b:37:c0:d6:37:86:fd:e1:7f:29:7a:ee:f0:ac:ba:cd:
d0:75:70:6a:c5:c3:c8:b8:be:72:ec:4f:9e:c9:26:6c:16:46:
89:39:48:02:19:6f:19:9f:6b:3d:4c:2c:57:40:58:3c:02:55:
5b:78:47:20:1d:10:e2:7b:0a:b3:12:9c:a0:dc:7c:32:13:06:
5d:9a:db:d3:63:6d:b4:38:a4:87:8c:b6:ef:2f:b9:92:9c:ff:
80:58:5c:92:15:3c:28:17:45:28:51:13:56:82:da:89:29:f0:
c2:8b:a8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:47:39 2026 by rpki-client