Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233372e302f32342d3234203d3e20383334.roa
File: 3231332e3232352e3233372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: tyqaqK3YjGwc7xid6SRWRV2+6rRHl55UsWnLXTiTplk=
Subject key identifier: 28:A9:9A:09:03:BB:7F:C4:13:58:C0:FB:04:67:C7:1F:7F:85:C7:12
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 051D02A3CA50E714E90548A1219D038C3135753D
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233372e302f32342d3234203d3e20383334.roa
Signing time: Tue 22 Sep 2026 03:04:40 +0000
ROA not before: Tue 22 Sep 2026 02:59:40 +0000
ROA not after: Tue 21 Sep 2027 03:04:40 +0000
asID: 834
IP address blocks: 213.225.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 09:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:1d:02:a3:ca:50:e7:14:e9:05:48:a1:21:9d:03:8c:31:35:75:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Sep 22 02:59:40 2026 GMT
Not After : Sep 21 03:04:40 2027 GMT
Subject: CN=28A99A0903BB7FC41358C0FB0467C71F7F85C712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:92:8f:e3:67:3e:53:20:0c:b9:9f:47:84:
f9:79:bd:c7:01:04:af:4c:21:77:98:ee:c9:a4:e9:
f1:96:7c:63:16:99:07:33:44:c2:e1:54:bb:d5:ee:
5e:2d:b1:8f:53:f0:34:80:2f:5a:9e:bd:8b:44:64:
44:1b:2f:61:01:ef:c2:71:15:4d:e6:b3:6a:fb:7f:
e9:cc:53:1b:36:6e:cf:bc:5f:98:e8:72:46:e4:4a:
95:d9:dc:bf:ba:a1:23:ee:0c:09:c7:4b:5d:68:37:
00:25:79:9d:1d:91:f6:7f:e8:b6:f3:84:67:48:88:
66:85:8c:62:10:31:04:ed:22:ac:a9:a3:62:85:e3:
47:1a:77:dc:70:f0:fa:3a:65:1a:cb:20:16:02:de:
5d:05:d4:b4:d2:8e:ea:82:0a:d9:e8:ec:ca:9d:51:
4e:c2:fe:5c:cc:b0:81:85:13:38:53:e2:39:70:21:
a5:f6:59:be:b0:1b:c8:38:d7:fb:5a:ff:46:f8:0a:
4c:7c:99:ab:6f:32:87:0f:d1:22:90:36:f8:74:88:
83:a7:00:f6:d1:ba:2f:be:f0:be:99:1f:cb:00:a1:
6f:dd:71:43:8c:b3:23:ce:18:5f:83:c8:9c:d9:16:
7b:23:7b:93:bf:2c:e4:72:8c:c2:65:f1:34:7f:e5:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A9:9A:09:03:BB:7F:C4:13:58:C0:FB:04:67:C7:1F:7F:85:C7:12
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.237.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c7:7a:98:89:d7:db:71:15:83:48:ab:06:0d:76:d3:3e:da:
da:30:39:c7:da:00:33:62:25:79:b8:9c:b9:0f:32:ad:2f:d5:
d9:0b:c6:62:17:c5:34:d4:e9:4a:77:32:21:7d:a0:8f:cc:20:
1e:bd:69:67:59:92:3d:e0:f3:0b:0c:61:4c:7b:67:d5:88:8d:
31:d2:b8:fd:fe:40:27:54:22:a1:ed:33:25:17:b1:40:3e:ed:
7f:db:ec:b7:c7:d6:52:83:e0:55:b5:1c:ce:6a:35:0a:94:69:
35:0a:a8:2c:e8:7a:8c:13:6f:ec:3b:5f:64:fa:83:68:ab:e1:
9b:5f:28:63:b8:be:7f:86:4c:12:31:05:98:cd:8e:b7:a5:e2:
13:09:e1:8e:d6:0a:2f:78:c8:01:f6:e3:59:8c:c2:d7:a3:2b:
85:60:71:9c:2e:f2:2f:89:20:ea:22:ff:95:8b:8b:10:34:be:
3e:64:65:64:eb:56:07:c5:c0:65:28:76:ad:e3:82:40:45:4e:
5f:04:03:9d:34:e3:97:5a:62:ee:e7:2b:77:69:e0:c9:f1:ba:
b0:cd:7c:68:03:e0:be:5d:b3:20:e4:c2:63:b7:78:c0:13:09:
c0:6f:d4:d3:ae:de:ff:5b:2d:6f:d6:0c:4c:42:02:0c:cb:e5:
c6:c2:2c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:14:25 2026 by rpki-client