Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS13537.roa
File: AS13537.roa (raw, json)
Hash identifier: gl5dSlBkikEnZLpVBBkvRBvkWsWN7eWw6NZpdUlphEs=
Subject key identifier: 29:F2:9F:B9:6D:A7:32:E1:06:4A:36:15:DF:5E:B3:3D:94:F4:DB:35
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 4499AC4C7C92EC4ED31E420D39ACA5715F7F38F7
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS13537.roa
Signing time: Sun 04 Oct 2026 00:51:06 +0000
ROA not before: Sun 04 Oct 2026 00:46:06 +0000
ROA not after: Sun 03 Oct 2027 00:51:06 +0000
asID: 13537
IP address blocks: 109.66.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:99:ac:4c:7c:92:ec:4e:d3:1e:42:0d:39:ac:a5:71:5f:7f:38:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:06 2026 GMT
Not After : Oct 3 00:51:06 2027 GMT
Subject: CN=29F29FB96DA732E1064A3615DF5EB33D94F4DB35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e6:a3:51:b7:82:55:96:d2:0b:6a:b2:7d:6e:
0f:82:ab:5d:9b:cb:b8:4d:e4:a7:2d:2f:98:fd:30:
08:4d:9f:a9:cf:da:02:f6:26:73:aa:f3:97:f2:0c:
f7:6d:83:4f:3d:73:9c:83:2e:a5:68:51:a7:28:55:
da:90:c9:ac:8c:c1:d5:02:8b:35:36:44:e6:73:ee:
0b:8d:31:fd:0a:29:cd:fa:14:8d:01:d4:90:5c:db:
cf:b8:49:ae:ff:74:6b:10:99:43:0c:a7:e1:0a:9f:
f7:25:b2:7f:7e:db:84:6c:4e:45:67:2e:1c:45:a6:
1d:44:9d:a8:b4:6f:e5:5a:f6:0a:1d:69:17:94:76:
3f:a0:1b:79:46:40:83:39:28:09:68:ea:ef:90:9c:
b6:8d:89:54:72:4d:63:6c:75:fb:64:fe:df:2f:f5:
1d:08:c1:9b:d2:50:15:6f:26:18:f2:d0:d4:36:fb:
ae:7e:e5:a0:fe:7b:32:0c:52:67:56:92:e1:a3:3e:
f3:ca:f7:47:55:7e:42:2f:eb:dc:90:58:27:a6:93:
17:cc:71:cf:a7:d0:a8:45:10:cd:bc:1d:13:e7:d1:
b8:58:97:c9:30:e9:5a:79:86:71:16:f7:41:62:b3:
93:34:af:ca:94:d2:14:da:ea:bb:aa:e4:33:1d:c6:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F2:9F:B9:6D:A7:32:E1:06:4A:36:15:DF:5E:B3:3D:94:F4:DB:35
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS13537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.160.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d8:74:18:a9:e6:c0:f8:9a:88:5f:40:9a:3e:91:b2:1d:e1:
3d:0c:c3:e8:6e:29:a2:e5:37:f4:a3:c6:b4:5e:5b:51:eb:eb:
43:e9:2c:af:4f:c1:2a:a2:17:c6:92:57:a1:c6:65:65:20:12:
d1:1d:dc:3f:47:03:bb:e6:41:1b:8d:f7:79:2f:78:68:05:33:
fa:cd:1d:97:48:7b:59:b4:41:4f:2a:c7:4d:df:72:8e:62:21:
6f:12:f0:97:01:1e:be:42:3c:ce:da:54:45:15:e9:62:da:6b:
ff:a1:04:53:48:78:8c:be:71:c4:c2:5c:01:dd:e4:a9:d0:7d:
37:91:e6:54:0f:6d:99:70:f0:0d:05:3c:d8:da:a0:f1:d9:4d:
06:2a:cf:e2:9d:87:75:a3:64:82:80:70:9d:83:fb:5b:b9:07:
ce:e3:7c:0d:dd:61:e3:44:01:a1:0f:42:3d:cd:21:6f:5d:b1:
5c:8b:2e:a0:04:37:30:38:47:69:56:f5:ab:2f:df:2d:5a:29:
d2:54:75:92:f5:74:f3:38:af:c5:4e:b2:02:01:a8:a3:30:a7:
17:03:84:e1:d7:72:57:90:e4:14:73:00:07:3f:7d:f7:30:b5:
53:39:ed:93:5b:6e:41:77:17:bd:1a:16:a8:73:5c:69:93:12:
77:52:82:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:26 2026 by rpki-client