Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663330323a3a2f34382d3438203d3e20313331363330.roa
File: 326131343a373538303a663330323a3a2f34382d3438203d3e20313331363330.roa (raw, json)
Hash identifier: 0U978EwLr0cQOJZIpeug1XzeDzeS9rc2Q8ZVm/cX9Sc=
Subject key identifier: 6E:3F:39:5B:C5:BD:66:30:CD:0C:19:FD:48:F7:B7:01:94:AB:B6:0C
Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Certificate serial: 73B38F5D5531E60BECBE985C8A540DE34731845D
Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663330323a3a2f34382d3438203d3e20313331363330.roa
Signing time: Tue 10 Mar 2026 13:17:36 +0000
ROA not before: Tue 10 Mar 2026 13:12:36 +0000
ROA not after: Tue 09 Mar 2027 13:17:36 +0000
asID: 131630
IP address blocks: 2a14:7580:f302::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Mar 2026 08:41:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b3:8f:5d:55:31:e6:0b:ec:be:98:5c:8a:54:0d:e3:47:31:84:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Validity
Not Before: Mar 10 13:12:36 2026 GMT
Not After : Mar 9 13:17:36 2027 GMT
Subject: CN=6E3F395BC5BD6630CD0C19FD48F7B70194ABB60C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a0:2f:bc:2f:7d:b7:41:71:28:6a:a4:d1:00:
7f:80:85:8c:3f:88:a8:fe:2b:05:b4:ac:16:0f:4f:
e0:1a:e2:66:2d:76:ff:01:67:ab:20:ab:db:59:72:
de:e6:7d:42:e4:d6:d2:4a:eb:8f:f0:af:6c:60:10:
47:62:68:58:98:fc:31:4c:16:1a:ea:0c:b4:e8:fe:
da:74:14:10:06:84:a7:48:bc:04:3e:2b:ff:8c:3b:
14:13:61:5d:80:fc:42:32:c8:00:d2:68:7b:38:f9:
00:79:7f:3b:74:1a:9f:d0:5f:ce:54:97:95:00:20:
39:2c:64:a7:cf:55:ea:92:30:75:a9:ad:b8:5d:66:
ca:20:f9:7f:ef:ba:d4:00:e0:3e:42:97:86:38:43:
36:71:2e:a6:30:aa:e6:79:fd:61:da:a1:58:58:20:
55:7f:58:98:49:4c:7c:a8:7d:f7:95:05:32:41:d9:
0d:50:85:ce:c1:97:68:65:0b:d1:ae:ec:1e:c4:fb:
a4:8d:15:88:23:6b:65:0f:c0:36:9c:b1:1f:2f:7f:
95:9a:47:14:b1:1a:fc:e3:7a:fb:56:46:77:da:dc:
96:d4:ba:da:9e:d3:9e:f0:fc:14:ce:95:96:2c:b3:
a5:65:f5:08:c4:b9:ec:17:ed:f1:71:ad:f0:33:c8:
0c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3F:39:5B:C5:BD:66:30:CD:0C:19:FD:48:F7:B7:01:94:AB:B6:0C
X509v3 Authority Key Identifier:
keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663330323a3a2f34382d3438203d3e20313331363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f302::/48
Signature Algorithm: sha256WithRSAEncryption
68:d0:d1:75:56:53:11:a1:30:a2:2f:ee:21:88:b8:7d:74:06:
ca:3a:80:72:39:1e:84:21:9f:b4:c6:ca:1d:48:92:be:36:cf:
90:75:f6:d5:39:78:eb:99:42:ae:e9:ca:41:bc:6d:6f:c3:52:
14:00:90:67:20:aa:23:58:e4:1a:af:1d:5f:9b:e0:34:eb:78:
6e:25:00:c5:9c:60:8c:dd:de:17:4b:3f:74:b4:31:03:71:f7:
08:94:bf:3f:6c:91:5a:6d:1f:f6:9b:b9:d0:40:36:5f:35:e4:
82:05:bb:da:bb:31:9e:b0:cb:c7:11:54:47:7a:b1:52:bb:23:
3a:64:f2:28:68:18:56:28:be:3b:93:19:9b:c4:ec:d1:15:a9:
ff:de:de:b3:a4:52:56:3b:9c:8d:a8:bb:54:c0:68:08:22:03:
89:b1:40:fe:b5:21:55:16:87:e5:12:10:fb:65:6e:e2:46:f6:
c6:f9:f5:7c:82:43:e6:3e:07:df:e3:39:93:99:f8:23:0b:03:
0b:f6:1c:15:da:8a:27:43:1b:63:a6:6f:a4:65:ba:0c:8d:73:
00:ad:ed:78:79:7a:72:6e:dc:8a:e3:e4:d8:1d:f8:ea:6b:2c:
41:9e:5a:4c:8a:79:98:2e:02:b6:c6:ca:93:2e:a3:35:6a:b0:
70:30:c7:7d
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUc7OPXVUx5gvsvphcilQN40cxhF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG
OTM5RjRGNDAeFw0yNjAzMTAxMzEyMzZaFw0yNzAzMDkxMzE3MzZaMDMxMTAvBgNV
BAMTKDZFM0YzOTVCQzVCRDY2MzBDRDBDMTlGRDQ4RjdCNzAxOTRBQkI2MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOoC+8L323QXEoaqTRAH+AhYw/
iKj+KwW0rBYPT+Aa4mYtdv8BZ6sgq9tZct7mfULk1tJK64/wr2xgEEdiaFiY/DFM
FhrqDLTo/tp0FBAGhKdIvAQ+K/+MOxQTYV2A/EIyyADSaHs4+QB5fzt0Gp/QX85U
l5UAIDksZKfPVeqSMHWprbhdZsog+X/vutQA4D5Cl4Y4QzZxLqYwquZ5/WHaoVhY
IFV/WJhJTHyoffeVBTJB2Q1Qhc7Bl2hlC9Gu7B7E+6SNFYgja2UPwDacsR8vf5Wa
RxSxGvzjevtWRnfa3JbUutqe057w/BTOlZYss6Vl9QjEuewX7fFxrfAzyAyHAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUbj85W8W9ZjDNDBn9SPe3AZSrtgwwHwYDVR0j
BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4
Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5
QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8xOWFhOWRhNy1mMWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvMC8zMjYxMzEz
NDNhMzczNTM4MzAzYTY2MzMzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz
MzMxMzYzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gPMCMA0GCSqGSIb3DQEBCwUAA4IBAQBo
0NF1VlMRoTCiL+4hiLh9dAbKOoByOR6EIZ+0xsodSJK+Ns+QdfbVOXjrmUKu6cpB
vG1vw1IUAJBnIKojWOQarx1fm+A063huJQDFnGCM3d4XSz90tDEDcfcIlL8/bJFa
bR/2m7nQQDZfNeSCBbvauzGesMvHEVRHerFSuyM6ZPIoaBhWKL47kxmbxOzRFan/
3t6zpFJWO5yNqLtUwGgIIgOJsUD+tSFVFoflEhD7ZW7iRvbG+fV8gkPmPgff4zmT
mfgjCwML9hwV2oonQxtjpm+kZboMjXMAre14eXpybtyK4+TYHfjqayxBnlpMinmY
LgK2xsqTLqM1arBwMMd9
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:42:06 2026 by rpki-client