Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS13536.roa
File:                     AS13536.roa (raw, json)
Hash identifier:          Lb4MEk0JNy97qtmllrMV3Cx9Z89XKDW0VlqN0YcjsUo=
Subject key identifier:   F1:2B:F7:DE:4C:D9:4B:D9:5C:0E:FC:39:4B:69:32:4C:82:DF:CE:9A
Certificate issuer:       /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial:       0283B9B94715AFFAEC3AE77F2D52BCE36DDE1F6E
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS13536.roa
Signing time:             Sun 04 Oct 2026 00:52:10 +0000
ROA not before:           Sun 04 Oct 2026 00:47:10 +0000
ROA not after:            Sun 03 Oct 2027 00:52:10 +0000
asID:                     13536
IP address blocks:        79.180.244.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Mon 05 Oct 2026 08:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:83:b9:b9:47:15:af:fa:ec:3a:e7:7f:2d:52:bc:e3:6d:de:1f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
        Validity
            Not Before: Oct  4 00:47:10 2026 GMT
            Not After : Oct  3 00:52:10 2027 GMT
        Subject: CN=F12BF7DE4CD94BD95C0EFC394B69324C82DFCE9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d8:83:f1:0b:17:b4:d7:f1:c3:83:af:58:c1:
                    16:be:4f:92:4f:9f:a0:68:88:82:04:f0:39:82:ba:
                    64:2b:34:bf:88:26:db:5e:6b:68:b1:49:3b:9f:c6:
                    f0:33:09:84:2b:31:07:d8:e5:42:a8:fd:76:02:28:
                    d9:bc:b0:73:32:e4:8e:38:11:d7:be:9a:85:aa:95:
                    bc:96:41:9c:61:61:10:a8:c1:32:ed:8e:19:97:31:
                    d8:2e:f2:03:9c:63:f0:9e:78:bb:71:b6:ba:58:73:
                    72:21:ff:46:fe:e2:ae:66:30:f0:c9:f1:da:27:e2:
                    56:77:92:ff:1f:95:dd:d8:fc:d2:59:32:4d:b0:c1:
                    7b:b5:43:bb:99:2e:96:60:a9:b6:cd:25:25:25:f6:
                    c4:4b:1e:95:14:01:be:e2:bc:be:ec:ec:6a:7d:6a:
                    3d:73:19:ea:d6:cf:0c:0b:a2:3b:35:c0:e7:8f:7c:
                    74:d6:af:ff:26:fc:29:01:0a:a7:1c:bf:0f:ec:30:
                    08:3a:64:9b:0b:5a:b7:93:93:77:6c:da:85:cd:c6:
                    f0:53:55:48:a8:4c:5b:17:b9:68:9d:52:a4:5b:cd:
                    65:c0:e8:01:9d:15:55:88:6c:2a:c7:b4:38:2e:d4:
                    a8:e1:7f:4e:f6:5d:3c:ad:3c:6b:b5:a0:a6:f3:f3:
                    d8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2B:F7:DE:4C:D9:4B:D9:5C:0E:FC:39:4B:69:32:4C:82:DF:CE:9A
            X509v3 Authority Key Identifier:
                keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS13536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.180.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:2b:d5:0c:08:2d:ff:20:10:a1:09:27:f2:99:92:71:a7:31:
         5d:ae:6e:b1:21:82:c0:f8:f9:ab:9f:ef:d5:d3:85:c7:4e:84:
         f9:73:45:63:a3:97:c9:0e:1f:b5:45:86:a9:72:e8:ce:41:97:
         d1:3d:59:79:41:51:a4:88:e4:8f:9a:cc:43:7f:cc:46:b6:16:
         70:ea:70:ff:38:f0:c2:b2:63:1c:a1:c1:f3:fc:8a:17:5d:ea:
         f9:ad:50:5a:77:97:fc:9b:48:1a:27:6c:51:eb:1b:36:4e:47:
         8a:82:be:b3:6d:d4:82:44:8e:27:30:6b:a7:88:62:bf:fe:3f:
         2c:9a:df:08:0b:03:0f:d7:5a:2e:73:2e:c7:65:a3:14:42:6e:
         a5:f8:be:a3:03:03:6f:99:07:55:bc:0d:6c:9d:87:74:36:e3:
         52:34:46:05:86:ee:09:4e:86:d9:b7:e1:a5:3f:f1:7a:b6:71:
         40:41:af:e0:a1:ea:ad:06:b7:24:65:5b:f1:76:57:d8:40:17:
         2d:65:48:0b:09:82:eb:45:70:d4:5b:0a:d9:b3:dc:5a:16:d9:
         b4:75:c1:b6:3d:21:d3:af:19:a1:e6:34:58:33:a0:a6:22:e8:
         95:17:31:2e:35:94:c3:d4:b4:5a:aa:66:c5:b0:9f:81:b7:56:
         a9:91:cb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:23 2026 by rpki-client