Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198805.roa
File: AS198805.roa (raw, json)
Hash identifier: 7uHfohw3b1oubWlspAWR/W68oh3SeKf2gD1CNYBqoS4=
Subject key identifier: 5F:AE:67:E8:96:4E:4F:6C:E6:FD:B5:7B:23:29:23:07:09:33:01:88
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5DA0F6F441B3D1F72D29ABE1A2BDDBC6C389F9DA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198805.roa
Signing time: Sun 28 Jun 2026 03:22:26 +0000
ROA not before: Sun 28 Jun 2026 03:17:26 +0000
ROA not after: Sun 27 Jun 2027 03:22:26 +0000
asID: 198805
IP address blocks: 162.141.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jul 2026 00:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a0:f6:f4:41:b3:d1:f7:2d:29:ab:e1:a2:bd:db:c6:c3:89:f9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 28 03:17:26 2026 GMT
Not After : Jun 27 03:22:26 2027 GMT
Subject: CN=5FAE67E8964E4F6CE6FDB57B2329230709330188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:d0:31:b1:ce:bd:ac:ee:3d:6c:dd:0a:4e:
71:ec:67:14:26:20:49:ff:b4:64:ea:e0:fc:da:45:
ee:50:d8:76:ce:cd:ba:da:8e:02:9c:a4:27:55:83:
9d:d4:b1:f5:b8:ae:7d:2c:cc:1d:ec:62:30:62:dc:
9e:f0:7f:56:31:ff:81:57:9c:cc:a8:f2:3a:ca:b8:
b0:78:94:83:19:7b:0d:02:4b:90:8c:3e:f6:89:54:
e8:55:f7:82:03:4a:db:57:d5:95:7c:71:5c:2d:f1:
37:b6:59:09:0f:74:00:e7:90:b1:d1:77:30:28:4e:
08:2d:29:9e:85:4c:1f:26:e3:da:f4:88:95:88:82:
3f:8d:07:b1:47:44:f4:14:b5:3a:b0:42:e2:e1:43:
bd:8e:6c:f6:38:71:79:ce:19:b1:a5:bf:98:a7:79:
7a:43:5a:72:a2:b3:5b:f3:5c:aa:09:d6:89:d0:8d:
f9:aa:e7:18:7c:b2:b9:d8:32:61:22:c3:cf:91:4b:
78:39:60:2e:20:c3:bf:23:4e:23:c0:8e:98:df:d9:
5d:00:b9:de:83:fe:e6:97:4c:42:03:8a:17:c0:f9:
90:ce:8e:e6:ba:3c:54:5e:ec:06:5e:37:a9:55:52:
46:a2:bd:80:1b:e7:e7:0f:44:dd:4d:c3:8f:ad:52:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AE:67:E8:96:4E:4F:6C:E6:FD:B5:7B:23:29:23:07:09:33:01:88
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198805.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.80.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d7:6e:2b:8e:e9:96:cc:aa:32:88:1d:b2:22:e1:00:57:30:
e8:ff:a2:11:08:ef:e0:e4:22:78:e6:f6:f2:32:19:91:65:cb:
f3:d8:73:17:d6:9e:f1:d8:c1:0b:5b:45:e7:19:dc:90:48:1b:
6a:36:b8:93:c2:88:e4:2c:05:19:1f:ab:d2:90:06:6e:b8:16:
dd:be:37:4f:45:39:ca:3a:eb:a7:8c:e5:96:bd:50:b2:24:56:
4f:60:71:35:40:47:f2:d4:94:4b:62:19:f9:53:4a:14:2c:c8:
3b:c2:63:26:4c:51:39:ed:1f:9f:b8:13:d3:3f:21:69:2e:c6:
2c:f3:35:74:81:b9:d9:d2:42:6d:d6:83:67:a7:5f:7e:03:fa:
de:1f:d6:a4:94:3f:47:b5:8c:56:1b:8d:10:e8:1d:b7:f8:bb:
a7:af:a2:76:bb:23:f9:f8:7f:ae:d7:73:13:ce:15:d9:46:f2:
82:44:5a:c3:67:97:c6:d3:8c:53:f9:49:6f:b4:2a:22:59:f0:
7f:89:93:37:25:63:b7:9b:7b:3d:52:f4:b1:5c:db:27:0a:3c:
a1:2e:91:f4:67:af:9a:cc:11:e5:91:f7:4a:93:d0:cc:46:af:
93:57:df:52:87:bd:c3:57:64:37:f3:c5:a4:b6:79:a9:f0:7c:
ea:c1:74:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUXaD29EGz0fctKavhor3bxsOJ+dowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA2MjgwMzE3MjZaFw0yNzA2MjcwMzIyMjZaMDMxMTAvBgNV
BAMTKDVGQUU2N0U4OTY0RTRGNkNFNkZEQjU3QjIzMjkyMzA3MDkzMzAxODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ANAxsc69rO49bN0KTnHsZxQm
IEn/tGTq4PzaRe5Q2HbOzbrajgKcpCdVg53UsfW4rn0szB3sYjBi3J7wf1Yx/4FX
nMyo8jrKuLB4lIMZew0CS5CMPvaJVOhV94IDSttX1ZV8cVwt8Te2WQkPdADnkLHR
dzAoTggtKZ6FTB8m49r0iJWIgj+NB7FHRPQUtTqwQuLhQ72ObPY4cXnOGbGlv5in
eXpDWnKis1vzXKoJ1onQjfmq5xh8srnYMmEiw8+RS3g5YC4gw78jTiPAjpjf2V0A
ud6D/uaXTEIDihfA+ZDOjua6PFRe7AZeN6lVUkaivYAb5+cPRN1Nw4+tUlB5AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUX65n6JZOT2zm/bV7IykjBwkzAYgwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTk4ODA1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoo1Q
MA0GCSqGSIb3DQEBCwUAA4IBAQB0124rjumWzKoyiB2yIuEAVzDo/6IRCO/g5CJ4
5vbyMhmRZcvz2HMX1p7x2MELW0XnGdyQSBtqNriTwojkLAUZH6vSkAZuuBbdvjdP
RTnKOuunjOWWvVCyJFZPYHE1QEfy1JRLYhn5U0oULMg7wmMmTFE57R+fuBPTPyFp
LsYs8zV0gbnZ0kJt1oNnp19+A/reH9aklD9HtYxWG40Q6B23+Lunr6J2uyP5+H+u
13MTzhXZRvKCRFrDZ5fG04xT+UlvtCoiWfB/iZM3JWO3m3s9UvSxXNsnCjyhLpH0
Z6+azBHlkfdKk9DMRq+TV99Sh73DV2Q388Wktnmp8HzqwXQe
-----END CERTIFICATE-----
Generated at Mon Jul 20 18:36:41 2026 by rpki-client