Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31332e302f32342d3234203d3e20383334.roa
File: 39322e3131392e31332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 8JfYFEEBUE0ls/mUlT/4Rj465tx2EgZ/6E7gXWGo1mE=
Subject key identifier: B3:C5:72:C5:76:F8:9B:93:EE:A9:0D:31:1E:BB:B6:BD:6D:B0:B1:9C
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 7124DE42A87E04834D8973D8350840172CFDE45E
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31332e302f32342d3234203d3e20383334.roa
Signing time: Fri 30 Oct 2026 00:14:58 +0000
ROA not before: Fri 30 Oct 2026 00:09:58 +0000
ROA not after: Fri 29 Oct 2027 00:14:58 +0000
asID: 834
IP address blocks: 92.119.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Nov 2026 18:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:24:de:42:a8:7e:04:83:4d:89:73:d8:35:08:40:17:2c:fd:e4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Oct 30 00:09:58 2026 GMT
Not After : Oct 29 00:14:58 2027 GMT
Subject: CN=B3C572C576F89B93EEA90D311EBBB6BD6DB0B19C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:20:83:6a:b3:de:60:c3:a5:76:49:7a:c3:be:
76:b1:43:c7:8d:6b:ab:f3:14:f6:9d:e9:0a:b7:22:
43:a8:15:30:d4:e7:ab:28:62:06:7d:8d:e6:13:12:
51:cb:b4:92:cb:b9:67:58:0a:46:f1:c6:bb:86:2b:
67:9c:dc:75:05:ff:44:9b:16:43:da:71:bd:ee:96:
bb:2a:d5:a3:d4:94:28:86:18:13:3d:0c:e3:08:0a:
b8:51:62:4e:ad:bf:e3:25:57:d3:a0:4b:ef:2f:48:
d1:6d:87:38:00:ea:c6:3e:0f:34:75:19:6c:a4:cd:
63:1e:d9:c1:99:ee:be:3d:9b:20:39:96:67:9d:26:
18:67:eb:4d:62:95:a5:78:6a:b9:ce:3c:81:b1:39:
c7:76:58:6f:3f:12:7a:a7:57:8f:50:69:32:de:7b:
ec:08:1d:fc:b0:cc:8b:23:4b:af:2e:3e:ee:b1:1e:
f2:1c:3b:7f:a3:60:ba:f4:ef:44:b4:a3:8e:78:db:
18:81:58:90:df:c4:fa:89:6c:27:f3:89:67:16:4c:
9d:df:cb:f7:c7:94:72:e3:bf:65:8f:5b:3f:4e:40:
e9:e0:60:90:08:f1:b6:bc:bf:ba:c4:93:61:73:75:
e3:c6:38:7e:a9:64:38:a1:a4:b9:e0:c6:b6:26:ce:
7b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C5:72:C5:76:F8:9B:93:EE:A9:0D:31:1E:BB:B6:BD:6D:B0:B1:9C
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.13.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a2:c8:c6:0c:6b:d6:00:de:c6:10:6d:4d:ff:78:f1:ba:22:
5c:f2:34:89:b6:8b:da:04:15:b8:f5:f1:fb:3f:99:3c:0e:e6:
a6:2e:19:9c:03:1b:4e:fe:21:87:b0:6d:3e:33:de:85:0c:c7:
cc:0a:b5:94:72:60:36:db:0b:cd:0a:66:fe:1c:22:c5:cd:d7:
16:6e:8a:71:f5:25:2e:a5:e6:62:b5:21:b1:41:00:0a:c6:9a:
16:e1:1b:09:fb:1b:88:e8:5d:68:f6:91:3a:54:38:75:0d:7e:
f9:e2:8d:58:7d:7b:9b:f0:a5:c3:2e:6b:ee:cc:10:87:c6:ea:
a0:40:19:dc:d8:74:6d:2a:b5:a6:32:ed:8d:6e:3f:e4:75:bb:
03:b8:20:5c:96:f2:1c:86:fb:5d:bf:8a:9d:00:62:aa:88:1b:
76:27:40:28:e7:b9:d1:af:df:53:04:5c:34:0a:e6:32:43:6a:
a2:9a:f3:d9:90:a1:f1:96:7a:4c:5a:73:f4:0a:24:19:e2:99:
e9:4f:23:0a:15:6e:f1:a5:d0:e9:e4:8b:45:1d:bb:87:04:68:
75:98:34:a9:57:16:db:ab:81:6c:0e:0c:90:41:ee:ff:3b:bf:
9a:ea:fb:aa:77:e2:ff:f3:22:da:71:18:b7:dc:2f:2b:f4:fd:
75:8e:27:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:44:25 2026 by rpki-client