Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32332d3234203d3e20383334.roa
File: 34352e3134392e36322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: /lT0ECPVUkQR1q6WCeMK1pM3e2p2Gia0WyXxQtAZuMA=
Subject key identifier: FB:03:C0:1B:3C:08:21:6E:22:0B:0E:7D:B9:28:EC:FB:B8:46:6C:25
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 1CE4786BCEF9B1457C50C1736BB5DB08BD5C84AF
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32332d3234203d3e20383334.roa
Signing time: Tue 03 Nov 2026 00:09:57 +0000
ROA not before: Tue 03 Nov 2026 00:04:57 +0000
ROA not after: Tue 02 Nov 2027 00:09:57 +0000
asID: 834
IP address blocks: 45.149.62.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Nov 2026 18:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e4:78:6b:ce:f9:b1:45:7c:50:c1:73:6b:b5:db:08:bd:5c:84:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Nov 3 00:04:57 2026 GMT
Not After : Nov 2 00:09:57 2027 GMT
Subject: CN=FB03C01B3C08216E220B0E7DB928ECFBB8466C25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dc:75:04:8b:23:a1:2e:98:6f:e2:29:83:81:
ab:97:a9:8c:49:03:35:a3:71:23:c4:3d:59:38:8a:
b4:af:89:20:0f:59:d1:e7:e1:b4:87:64:72:be:04:
9b:97:d1:ca:79:97:04:3c:e6:42:ac:67:57:cd:a8:
8d:65:32:29:b3:57:aa:0a:8f:e0:91:42:23:b6:32:
ee:83:4d:4e:2b:3f:99:4e:ba:92:f7:8c:64:5b:ae:
54:fb:30:8b:4c:32:66:f8:c8:0c:1a:35:5d:0c:39:
47:52:ec:05:8a:fc:d1:f3:6c:b6:0d:f1:59:ea:41:
47:32:8a:62:a1:08:06:b1:d5:b5:22:7b:cd:e9:6b:
84:bf:7e:a0:bb:12:68:e3:f3:16:ca:df:e2:89:68:
44:73:68:6c:e6:6d:c4:30:d0:2d:ba:7b:37:cc:9a:
e7:b8:e5:87:20:f9:b2:6b:38:59:a7:1b:02:86:a1:
f5:c6:8f:cf:49:45:07:9e:48:ec:71:e0:da:5e:43:
0d:b8:ff:a0:32:f5:7e:ea:22:b7:8c:ab:f5:1a:ee:
4c:29:ab:12:18:14:2d:d8:27:ad:b6:be:76:21:6a:
7b:a5:ed:a1:08:23:b9:03:5b:30:df:f2:1a:7f:a8:
7d:56:d1:41:1d:b2:66:ff:bb:1f:92:c0:dc:f1:20:
54:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:03:C0:1B:3C:08:21:6E:22:0B:0E:7D:B9:28:EC:FB:B8:46:6C:25
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/23
Signature Algorithm: sha256WithRSAEncryption
77:63:02:20:ff:f5:fe:49:c3:d4:b3:e8:0f:4a:35:0a:78:c1:
86:46:82:f6:4f:a9:01:c3:c0:0f:8a:1b:39:ef:df:35:23:a2:
51:d4:c2:3e:b1:41:f0:0c:76:cb:3a:c2:a0:b2:d3:c5:c0:d1:
24:d3:78:67:17:56:ed:31:17:28:71:f0:8b:7b:fa:97:8d:be:
c6:f0:e3:96:9d:e7:2e:6e:c5:f9:3e:fc:ea:2a:c3:97:10:85:
3e:bc:46:28:3d:7b:ac:16:e1:05:63:bc:3a:92:3a:8b:3b:ae:
16:fd:f3:b4:7e:cc:ac:fe:5f:3a:f9:36:c3:ae:ed:1b:fa:e4:
5e:f0:95:ac:a0:4e:1f:75:78:84:02:76:3a:e3:60:82:4a:c1:
b9:1c:1d:05:f8:ad:79:15:b4:da:ab:85:99:5e:fe:66:6e:67:
0c:f9:fa:1c:1f:18:e6:89:2a:83:88:7e:dd:61:db:9e:fe:f4:
f7:0a:51:a7:87:ce:fb:a9:84:9d:00:78:96:86:4d:bd:c1:f5:
7c:b1:3e:78:3f:ab:23:7d:72:bb:e1:a1:c1:97:83:3a:08:56:
aa:0b:41:f2:5f:82:c6:d8:e2:9b:3a:49:d0:54:b4:19:14:60:
9c:75:1b:1c:8d:37:af:89:03:ec:40:5c:c3:23:b9:73:59:a1:
cb:58:13:72
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUHOR4a875sUV8UMFza7XbCL1chK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm
ZjZkNjQ1YjAeFw0yNjExMDMwMDA0NTdaFw0yNzExMDIwMDA5NTdaMDMxMTAvBgNV
BAMTKEZCMDNDMDFCM0MwODIxNkUyMjBCMEU3REI5MjhFQ0ZCQjg0NjZDMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX3HUEiyOhLphv4imDgauXqYxJ
AzWjcSPEPVk4irSviSAPWdHn4bSHZHK+BJuX0cp5lwQ85kKsZ1fNqI1lMimzV6oK
j+CRQiO2Mu6DTU4rP5lOupL3jGRbrlT7MItMMmb4yAwaNV0MOUdS7AWK/NHzbLYN
8VnqQUcyimKhCAax1bUie83pa4S/fqC7Emjj8xbK3+KJaERzaGzmbcQw0C26ezfM
mue45Ycg+bJrOFmnGwKGofXGj89JRQeeSOxx4NpeQw24/6Ay9X7qIreMq/Ua7kwp
qxIYFC3YJ622vnYhanul7aEII7kDWzDf8hp/qH1W0UEdsmb/ux+SwNzxIFQLAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU+wPAGzwIIW4iCw59uSjs+7hGbCUwHwYDVR0j
BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz
NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5
dFpGcy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt
MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDM5MmUzNjMy
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZU+MA0G
CSqGSIb3DQEBCwUAA4IBAQB3YwIg//X+ScPUs+gPSjUKeMGGRoL2T6kBw8APihs5
7981I6JR1MI+sUHwDHbLOsKgstPFwNEk03hnF1btMRcocfCLe/qXjb7G8OOWnecu
bsX5PvzqKsOXEIU+vEYoPXusFuEFY7w6kjqLO64W/fO0fsys/l86+TbDru0b+uRe
8JWsoE4fdXiEAnY642CCSsG5HB0F+K15FbTaq4WZXv5mbmcM+focHxjmiSqDiH7d
Ydue/vT3ClGnh877qYSdAHiWhk29wfV8sT54P6sjfXK74aHBl4M6CFaqC0HyX4LG
2OKbOknQVLQZFGCcdRscjTeviQPsQFzDI7lzWaHLWBNy
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:45:12 2026 by rpki-client