Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31332e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e31332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: SR9GvdunBwvQS02ZEDVB+zcsj9YXbC2g8phhPPqvchc=
Subject key identifier: F3:5C:83:E2:2A:DE:B7:36:10:77:14:E7:C2:B4:E1:92:27:84:DF:A4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28859ADFB8BBF419B271254841D89F547B0A71D6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31332e302f32342d3234203d3e20383334.roa
Signing time: Wed 11 Nov 2026 09:12:34 +0000
ROA not before: Wed 11 Nov 2026 09:07:34 +0000
ROA not after: Wed 10 Nov 2027 09:12:34 +0000
asID: 834
IP address blocks: 217.217.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Nov 2026 18:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:85:9a:df:b8:bb:f4:19:b2:71:25:48:41:d8:9f:54:7b:0a:71:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 11 09:07:34 2026 GMT
Not After : Nov 10 09:12:34 2027 GMT
Subject: CN=F35C83E22ADEB736107714E7C2B4E1922784DFA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:19:63:fb:1e:ef:7c:08:21:32:86:5e:0a:ba:
43:7f:f6:b2:f4:3d:7d:40:1e:9f:62:3d:31:24:94:
bb:17:52:d1:10:7e:8e:eb:9d:6a:7b:79:c8:20:8a:
34:2e:54:c8:c2:1f:b8:de:c2:74:86:49:a3:4a:30:
bf:14:e4:c9:61:f5:47:9e:61:e1:af:1d:d0:84:2c:
3b:9a:70:8e:04:e1:87:d7:4e:77:c1:a1:f7:75:bb:
24:31:ab:9b:ef:c3:c6:63:d3:d2:71:c3:e0:93:99:
b2:d9:e6:c2:1d:d5:ed:88:ad:4b:ef:5b:54:c5:70:
c3:62:82:25:21:6a:0c:5f:81:ef:c3:20:20:ec:c5:
6b:d5:56:54:a5:28:ad:11:6f:39:87:7e:98:0f:2f:
7b:68:9c:41:50:8b:2e:8c:a6:67:88:9c:31:a6:30:
13:22:c8:0a:fe:82:f3:ae:ae:7d:24:6f:3d:6c:6b:
db:52:09:09:48:eb:a6:b0:dc:14:1b:fd:55:83:14:
f0:84:8f:2a:42:91:37:78:a9:7a:e3:04:df:9c:19:
5a:4f:df:8a:8e:c4:de:d8:21:f8:cb:6a:15:65:e2:
4f:aa:af:35:af:c1:b6:c3:ab:9f:02:1d:d9:9b:9b:
a5:64:9d:27:23:ba:be:09:e3:30:92:f5:e2:d5:5c:
9d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:83:E2:2A:DE:B7:36:10:77:14:E7:C2:B4:E1:92:27:84:DF:A4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:5c:81:2f:70:e1:a2:21:29:33:cf:32:05:1a:0e:31:e7:8d:
fe:36:35:37:bd:a1:17:79:a5:df:14:7b:ec:8f:e3:f1:7b:93:
61:28:d9:37:72:1a:5c:a3:ee:16:de:25:8c:35:fd:c8:76:af:
d4:f5:b8:cd:ad:07:44:a7:af:1e:a8:e4:5d:d7:0f:ad:b9:7a:
cc:35:8b:94:f6:0f:8f:dc:c2:c7:52:8c:08:81:03:9b:ce:b0:
da:7d:49:21:70:d9:84:93:30:04:d0:b9:29:27:58:b7:f2:c3:
df:06:ed:73:0d:15:db:8b:29:9c:e2:11:c9:63:aa:cd:63:c6:
3d:c1:80:9c:21:9e:1c:d8:c5:39:1e:5b:4b:0b:c6:25:4c:f5:
f2:5d:05:6c:5b:a5:40:f7:38:03:60:55:b4:22:df:f5:83:13:
e3:f2:65:fe:aa:bb:e6:c2:f7:95:3a:2e:18:f6:2f:95:ce:81:
55:9d:89:3f:47:88:2b:6a:79:67:12:12:75:c4:36:6d:c8:77:
01:97:3b:fe:dc:e4:57:a4:9f:18:03:88:73:44:3a:f1:a0:3a:
45:df:4c:a4:8e:7d:7e:06:fd:86:b4:d0:f0:b2:cb:ce:12:d5:
d9:51:80:47:e5:41:d7:10:98:fb:42:51:09:88:02:33:2e:d6:
d2:13:d5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:28 2026 by rpki-client