Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3230302e302f32342d3234203d3e20383334.roa
File: 3139342e3131302e3230302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: TaxAEk24sTsFBZ9kY4BbvVN907z08I7dlW+9hpMhHtw=
Subject key identifier: 5C:F4:35:8E:50:F0:C1:1B:4D:26:52:5E:C6:F3:92:2F:06:2E:4E:64
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4FE29D999304303D30EA047E2EAC2FE5F839E69A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3230302e302f32342d3234203d3e20383334.roa
Signing time: Mon 09 Nov 2026 16:17:48 +0000
ROA not before: Mon 09 Nov 2026 16:12:48 +0000
ROA not after: Mon 08 Nov 2027 16:17:48 +0000
asID: 834
IP address blocks: 194.110.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Nov 2026 18:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e2:9d:99:93:04:30:3d:30:ea:04:7e:2e:ac:2f:e5:f8:39:e6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 9 16:12:48 2026 GMT
Not After : Nov 8 16:17:48 2027 GMT
Subject: CN=5CF4358E50F0C11B4D26525EC6F3922F062E4E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:ec:7f:96:b0:c5:19:66:51:c7:07:ec:a3:
85:e3:5a:05:7a:47:cc:0f:0a:2a:2d:e0:93:5a:17:
1d:56:c6:8f:d1:25:0d:af:20:50:96:e8:b7:af:bf:
30:4e:78:c2:8e:c1:93:d3:26:db:3a:e4:cc:a0:37:
d0:54:6e:bd:6a:d0:9f:4c:a7:8d:b6:f3:ae:78:8b:
e2:93:93:6e:6e:5d:91:ef:22:fe:e0:0f:7a:8c:95:
65:13:aa:be:41:7c:f4:8c:b6:3b:e5:1e:03:07:b1:
63:94:58:6c:ec:8e:2b:e5:e0:eb:b4:bf:a0:bc:52:
3a:b6:12:75:75:14:48:49:00:27:11:97:bf:84:6a:
e6:5a:98:3c:c7:e7:e8:9e:23:68:f6:b4:88:32:84:
64:59:f3:68:1c:0f:d9:7f:ce:7a:24:da:b2:76:1a:
06:3f:a4:db:0f:fd:9b:13:e2:59:14:20:3d:19:d7:
5b:78:cb:5b:f0:c7:ea:91:0d:0b:6b:5f:3d:91:c5:
27:22:53:9d:0b:58:2c:9c:5c:1c:3c:2f:79:f8:8d:
ff:84:98:02:d4:eb:13:17:64:5a:1d:cd:a1:61:9c:
07:f2:a1:6f:7f:64:92:32:d9:3e:c7:2b:62:5b:77:
fe:20:a8:1b:20:49:18:cf:6a:48:3a:db:3d:5b:5d:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F4:35:8E:50:F0:C1:1B:4D:26:52:5E:C6:F3:92:2F:06:2E:4E:64
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3230302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.200.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:26:f4:c6:ea:05:d8:4d:26:89:03:35:71:54:fc:4c:65:1f:
f0:d3:90:14:49:42:39:f2:f9:a8:f3:cb:54:b8:49:7d:4b:48:
f2:4b:58:89:70:34:65:c0:c4:68:0a:9f:d2:6f:9c:ed:42:68:
0d:9e:dc:da:78:71:a8:2a:c6:b1:c8:74:86:36:40:b4:2e:f2:
22:cd:94:3d:cb:a5:fe:14:bf:5a:95:aa:41:de:55:32:ec:e5:
d1:7f:70:50:78:ac:72:59:f1:8e:69:6e:5c:80:1a:5c:b1:d0:
93:5c:26:f3:ec:9c:80:5c:63:7c:32:f5:c4:6b:98:fc:3b:d1:
db:93:d1:d2:9a:4f:f4:aa:c4:a0:d2:e6:87:1f:e8:5d:f3:62:
c5:43:8a:cb:a2:30:69:62:01:81:91:2a:bc:a1:0b:4b:19:d4:
78:0f:1e:bb:59:b4:15:95:da:4f:ee:33:49:5a:e2:49:ec:8a:
e8:35:01:00:b7:1e:d5:3c:41:21:f3:12:98:1f:58:79:a7:b1:
4b:73:d5:fb:cb:21:ac:75:dd:79:d2:b8:ec:16:bd:1b:e3:a5:
5d:4c:97:26:d9:64:63:9f:37:1c:c7:0f:15:05:67:4a:8e:28:
eb:a5:1a:48:6f:17:27:9b:90:2f:88:7c:58:02:59:95:43:ca:
92:42:d1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:39:41 2026 by rpki-client