Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402487.roa
File: AS402487.roa (raw, json)
Hash identifier: yOCVDpEpJ6r5KhDwiB5K1MRPKaeoTeb+fAzZ/zLOodg=
Subject key identifier: 4C:80:88:97:B5:18:4D:C7:45:4C:DE:03:18:3C:E7:3A:EF:5E:1C:D7
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 5F5159B3EEC89D43669495287766DBBA6AEF884D
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402487.roa
Signing time: Wed 13 May 2026 06:07:58 +0000
ROA not before: Wed 13 May 2026 06:02:58 +0000
ROA not after: Wed 12 May 2027 06:07:58 +0000
asID: 402487
IP address blocks: 82.139.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jun 2026 05:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:51:59:b3:ee:c8:9d:43:66:94:95:28:77:66:db:ba:6a:ef:88:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: May 13 06:02:58 2026 GMT
Not After : May 12 06:07:58 2027 GMT
Subject: CN=4C808897B5184DC7454CDE03183CE73AEF5E1CD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:3a:c8:8b:00:db:f6:2c:22:7c:db:d3:4f:
2d:17:75:c1:29:78:07:1e:73:64:51:5d:40:3b:5b:
9a:fb:8d:75:d2:24:da:2b:14:2a:7d:88:44:40:4a:
16:43:ac:af:ea:2c:66:0a:df:94:a9:25:bd:7a:97:
b9:f4:77:86:86:f5:ef:2d:34:ac:cc:c9:90:cb:89:
0e:0c:e0:53:a3:93:98:d5:76:c8:98:71:36:e7:b5:
54:58:a0:29:fe:96:b9:f3:eb:2c:7f:0b:3d:93:ee:
45:28:72:43:40:b1:1f:ce:94:eb:e1:48:a7:4f:a3:
f6:e2:1a:18:e4:e0:0b:64:95:d0:e8:65:e9:6d:38:
bb:58:cf:85:d7:bd:9a:43:8c:3a:47:f1:64:e0:44:
d6:42:8d:02:61:b4:7b:2a:fc:33:55:c0:d0:4e:6f:
9b:4b:bb:40:41:b5:ea:27:aa:76:0b:cc:3f:84:96:
15:c4:ac:e3:e1:37:3c:cb:15:14:f1:10:39:7b:57:
4c:60:2a:70:13:7e:ff:02:96:e4:05:8d:08:f0:30:
f6:48:33:a5:13:36:b7:86:46:e7:60:13:6e:b0:f1:
15:48:97:24:47:3c:9b:d1:ad:f4:7c:92:2a:b9:5c:
70:7b:38:1e:07:b9:f5:2a:ef:be:b0:53:81:a7:82:
01:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:80:88:97:B5:18:4D:C7:45:4C:DE:03:18:3C:E7:3A:EF:5E:1C:D7
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.224.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:3d:21:d3:4b:1e:a2:17:13:6d:ee:30:43:02:a8:5f:9a:15:
da:11:8d:ba:c8:d6:dc:d0:a4:96:f1:82:ac:c3:4a:d4:e3:0c:
c8:c2:e4:94:cf:c5:f4:8c:23:8d:d6:c3:d9:0b:7f:d9:49:e2:
a7:24:6d:6e:dd:67:b8:25:53:d3:65:7f:92:2e:07:12:6e:6b:
7a:68:cf:cc:3c:b6:af:cc:ae:fa:41:94:6f:8c:0c:42:61:56:
32:9b:93:28:8e:01:b0:31:c6:ea:95:f7:e3:e7:d9:e8:d7:57:
2f:bc:da:5d:e1:bb:3f:6b:a0:1e:6f:1b:e3:94:2d:e4:7f:90:
22:89:18:52:36:21:92:5a:d1:8b:ba:cd:8b:54:1c:77:1e:b7:
6a:9a:fc:cc:ce:97:59:0b:a2:6c:21:7b:53:28:92:bb:af:d7:
ac:f7:a2:5d:f3:37:f6:63:07:48:12:9f:86:c1:06:31:40:20:
9f:93:da:8d:34:d5:2c:56:96:ab:2a:26:03:a5:8b:49:2d:46:
df:11:6b:00:48:ae:03:d2:e4:e4:4e:86:7a:a5:de:7c:8e:3f:
c1:77:2e:05:b7:e8:5a:a8:84:d0:a3:4a:a8:88:ee:63:43:d6:
69:80:91:5a:d2:41:88:c2:82:ea:dc:8e:5c:2b:5e:82:60:02:
12:06:a7:78
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUX1FZs+7InUNmlJUod2bbumrviE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA1MTMwNjAyNThaFw0yNzA1MTIwNjA3NThaMDMxMTAvBgNV
BAMTKDRDODA4ODk3QjUxODREQzc0NTRDREUwMzE4M0NFNzNBRUY1RTFDRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhTrIiwDb9iwifNvTTy0XdcEp
eAcec2RRXUA7W5r7jXXSJNorFCp9iERAShZDrK/qLGYK35SpJb16l7n0d4aG9e8t
NKzMyZDLiQ4M4FOjk5jVdsiYcTbntVRYoCn+lrnz6yx/Cz2T7kUockNAsR/OlOvh
SKdPo/biGhjk4AtkldDoZeltOLtYz4XXvZpDjDpH8WTgRNZCjQJhtHsq/DNVwNBO
b5tLu0BBteonqnYLzD+ElhXErOPhNzzLFRTxEDl7V0xgKnATfv8CluQFjQjwMPZI
M6UTNreGRudgE26w8RVIlyRHPJvRrfR8kiq5XHB7OB4HufUq776wU4GnggFrAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUTICIl7UYTcdFTN4DGDznOu9eHNcwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTNDAyNDg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUovg
MA0GCSqGSIb3DQEBCwUAA4IBAQAbPSHTSx6iFxNt7jBDAqhfmhXaEY26yNbc0KSW
8YKsw0rU4wzIwuSUz8X0jCON1sPZC3/ZSeKnJG1u3We4JVPTZX+SLgcSbmt6aM/M
PLavzK76QZRvjAxCYVYym5MojgGwMcbqlffj59no11cvvNpd4bs/a6AebxvjlC3k
f5AiiRhSNiGSWtGLus2LVBx3HrdqmvzMzpdZC6JsIXtTKJK7r9es96Jd8zf2YwdI
Ep+GwQYxQCCfk9qNNNUsVparKiYDpYtJLUbfEWsASK4D0uTkToZ6pd58jj/Bdy4F
t+haqITQo0qoiO5jQ9ZpgJFa0kGIwoLq3I5cK16CYAISBqd4
-----END CERTIFICATE-----
Generated at Wed Jun 10 06:21:40 2026 by rpki-client