Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS135392.roa
File: AS135392.roa (raw, json)
Hash identifier: JE9OudtxpO5paeZkuxNnQ2LEciRAVM8C3eEhFkg/vCQ=
Subject key identifier: E6:B1:46:43:FC:82:3E:DA:32:DE:EB:84:E6:2E:D5:AE:9D:29:C9:BF
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 4B2F08420F5229A54793F6C7CDCEEE23DBD2E197
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS135392.roa
Signing time: Mon 05 Oct 2026 09:00:26 +0000
ROA not before: Mon 05 Oct 2026 08:55:26 +0000
ROA not after: Mon 04 Oct 2027 09:00:26 +0000
asID: 135392
IP address blocks: 79.182.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:2f:08:42:0f:52:29:a5:47:93:f6:c7:cd:ce:ee:23:db:d2:e1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:55:26 2026 GMT
Not After : Oct 4 09:00:26 2027 GMT
Subject: CN=E6B14643FC823EDA32DEEB84E62ED5AE9D29C9BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:e5:8a:4b:e6:cf:7b:43:c7:95:cc:d9:d3:
f2:8d:a6:e7:5c:9c:ef:35:1d:36:7b:c3:95:63:ff:
12:d5:f1:af:a4:92:2f:0b:7f:8b:73:40:ee:87:6a:
d3:1f:41:35:a2:a3:5d:4a:28:69:23:88:67:1a:50:
b5:f5:5d:29:3b:a1:8b:32:a1:6f:18:1b:fb:a2:25:
96:71:24:58:e2:b7:d2:b6:49:6f:2c:d5:b9:f3:00:
ff:36:c8:49:8f:27:85:48:69:92:57:dc:64:7e:5a:
ee:38:f6:46:65:ec:b9:1d:20:47:93:37:2c:15:2b:
73:f4:22:91:84:85:6e:f9:7b:98:d1:3b:7f:e4:42:
a5:2f:f9:2f:64:a7:c1:c6:a8:59:07:c0:60:74:94:
20:5f:f4:e1:15:76:12:04:92:00:8a:cc:35:15:a7:
5f:34:d6:d8:ed:ce:66:13:3b:2c:b4:da:6d:95:09:
27:32:e0:54:c6:23:c8:51:c6:90:9e:04:cd:83:b9:
c4:c6:48:90:98:c6:3e:ca:9e:e8:74:75:dc:c6:67:
c9:d6:bf:cc:b2:16:e6:3d:4f:c3:cd:4c:86:1d:83:
be:1a:ad:94:dc:d5:c0:83:cb:26:b2:d8:dd:a9:a1:
9e:60:38:4e:53:1b:01:1d:fe:49:b2:3c:de:c1:08:
48:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B1:46:43:FC:82:3E:DA:32:DE:EB:84:E6:2E:D5:AE:9D:29:C9:BF
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS135392.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.16.0/24
Signature Algorithm: sha256WithRSAEncryption
00:82:3c:df:d7:c4:4e:e1:04:ae:e8:c5:63:7e:8b:9c:2e:0b:
c9:b2:ee:17:dd:00:90:84:b8:ec:2c:1c:2a:8a:e6:ba:84:97:
ab:cf:0b:0f:43:c7:6f:2c:53:46:f4:96:82:f2:be:1b:f6:45:
f2:98:6e:61:18:b9:9c:d4:7d:f0:c5:35:66:ef:c7:91:23:f5:
b7:3f:19:7b:59:17:50:f5:7d:b2:06:45:f1:ce:17:d3:f6:d0:
60:b2:61:85:69:b5:05:f3:8f:54:4f:27:df:8f:e8:a9:03:dc:
f8:99:10:92:24:42:02:60:b5:e6:5f:75:7c:05:af:2d:60:1a:
d6:f2:f9:1a:14:19:54:86:c6:24:bc:c8:9a:5f:cf:d6:ce:b0:
0a:42:0e:db:ea:e1:e7:20:e9:02:24:ca:85:1d:ea:7c:49:89:
c3:6d:8b:b6:6d:7a:8d:21:58:c2:9c:93:5e:3e:6a:72:9f:1b:
43:f3:1b:ea:cc:62:c4:7b:6b:a8:e1:06:c7:8c:61:e0:2c:f3:
52:3d:d5:34:6b:37:01:f8:7e:02:38:e5:af:f8:03:49:2c:03:
9c:90:19:61:e4:e3:65:6b:fe:e4:ff:36:b2:6e:c8:90:38:65:
bf:ae:67:8a:50:7d:6a:a6:ae:d4:58:be:8c:28:e3:ab:96:1f:
09:86:bd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:39 2026 by rpki-client