Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200221.roa
File: AS200221.roa (raw, json)
Hash identifier: i7CCKsbnkPFEZ7BuqyFNG07km5bH+gtrViBjbjBvKT8=
Subject key identifier: AF:93:43:20:3F:8F:8B:1A:E7:8A:A9:3E:B7:9D:38:8E:53:04:FA:18
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6839D7B5ED2C807D2C8EDC82E1166E361D966C6B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200221.roa
Signing time: Sat 06 Jun 2026 15:40:28 +0000
ROA not before: Sat 06 Jun 2026 15:35:28 +0000
ROA not after: Sat 05 Jun 2027 15:40:28 +0000
asID: 200221
IP address blocks: 168.222.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jun 2026 12:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:39:d7:b5:ed:2c:80:7d:2c:8e:dc:82:e1:16:6e:36:1d:96:6c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 6 15:35:28 2026 GMT
Not After : Jun 5 15:40:28 2027 GMT
Subject: CN=AF9343203F8F8B1AE78AA93EB79D388E5304FA18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:23:51:d3:2a:1e:b3:e9:ca:51:43:0f:ef:
d3:d5:51:60:40:a8:c0:ec:32:16:b6:a6:41:40:d6:
8b:36:a9:45:f2:82:99:d6:dd:0e:bb:90:f8:b4:7d:
fc:a2:d9:af:52:f9:67:25:e9:4d:71:8d:f8:62:4f:
5b:0a:ab:bc:c2:06:ff:1a:6a:da:7a:94:74:be:3d:
1b:bd:bd:86:81:ac:3a:14:c8:0f:df:64:9d:47:3c:
e1:a8:bf:a8:44:67:a9:f0:ab:dd:2e:3d:f3:3a:8a:
28:26:70:2b:75:05:fa:b5:f8:46:37:52:b7:65:32:
33:44:b4:a9:a0:1f:a9:6b:7c:b7:78:8f:aa:ac:d1:
10:78:79:67:6b:fb:57:59:78:d7:dc:df:13:23:7b:
99:1a:e4:dd:ae:1d:de:80:77:64:7f:bb:64:98:60:
8a:f0:f6:4a:8a:52:92:a5:67:6e:bb:fd:5f:16:f2:
2a:0d:bc:5d:05:1c:88:18:9d:02:fd:27:ec:79:1e:
80:d7:41:86:ed:34:b9:4a:3b:5c:15:9c:0c:21:49:
0c:f5:24:81:6d:c4:c2:f6:79:56:5b:22:11:b0:cf:
62:8a:97:c7:e9:31:56:16:0c:91:a0:15:5c:9e:16:
78:24:8f:73:36:29:ce:5e:5d:a5:32:03:d0:db:b5:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:93:43:20:3F:8F:8B:1A:E7:8A:A9:3E:B7:9D:38:8E:53:04:FA:18
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200221.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.71.0/24
Signature Algorithm: sha256WithRSAEncryption
58:bf:2b:42:41:5b:59:00:54:ce:e4:14:5d:41:3b:1f:bd:11:
cd:d0:5e:26:40:fc:71:9c:4f:89:93:2d:12:a1:f0:4e:fe:79:
8a:65:78:aa:63:1a:19:2d:09:d2:9d:eb:d1:4f:7d:8e:93:2a:
07:a2:12:7b:4d:9c:34:10:b0:e2:08:ab:5e:4e:69:91:80:53:
0a:56:40:54:b5:40:91:9b:1f:50:75:11:95:98:03:76:7c:1d:
6d:c1:94:4d:b8:25:b2:6f:a3:13:90:96:fd:e1:21:ed:c6:3b:
0f:44:7d:a9:1f:2f:a2:81:bc:63:85:79:d2:b6:af:7a:80:c3:
3a:9e:0e:c2:df:2d:bb:b4:64:f9:26:27:4f:84:85:5a:09:af:
12:e8:de:59:7e:57:84:64:c6:2e:8b:34:da:e7:11:30:0e:a2:
c7:75:16:a9:5a:dc:4d:5f:1b:7c:44:81:35:3e:ce:95:de:31:
80:c9:ff:21:ef:0a:28:f8:02:72:78:c1:3e:48:b6:fb:1a:ff:
1f:e4:89:68:9c:a1:bb:22:06:8d:6e:eb:51:91:30:c0:75:ec:
66:81:27:1f:2c:46:d5:88:aa:81:0f:4f:8d:b6:9c:5b:f2:36:
7a:af:95:9d:8a:5c:e0:58:b3:ba:32:db:8c:bb:f1:75:1c:9c:
a1:5b:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 00:02:10 2026 by rpki-client