Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS137409.roa
File: AS137409.roa (raw, json)
Hash identifier: /wXcWa5bGZXCYpKqTy0jMPlK8Rjje2B/NgKLnnu6ZG8=
Subject key identifier: 82:E1:D5:C9:FC:CE:36:0E:55:F3:E8:C7:51:2A:B0:39:8F:DB:5A:DC
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 5BDBECB87157CE0594D7B2246C9FEEEA3972DDF5
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS137409.roa
Signing time: Sun 04 Oct 2026 00:51:05 +0000
ROA not before: Sun 04 Oct 2026 00:46:05 +0000
ROA not after: Sun 03 Oct 2027 00:51:05 +0000
asID: 137409
IP address blocks: 109.66.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:db:ec:b8:71:57:ce:05:94:d7:b2:24:6c:9f:ee:ea:39:72:dd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:05 2026 GMT
Not After : Oct 3 00:51:05 2027 GMT
Subject: CN=82E1D5C9FCCE360E55F3E8C7512AB0398FDB5ADC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:05:46:4e:e8:3f:71:88:4b:78:fb:0c:aa:
78:02:10:3b:c2:7f:a9:40:74:b3:ad:f8:43:9a:e9:
12:21:dc:1b:cf:e0:59:2c:d3:2e:34:95:cc:cd:63:
01:40:1b:65:43:01:b9:a6:dd:e9:af:aa:5d:89:fa:
54:9e:18:19:d3:5f:29:11:54:b2:22:a2:90:7a:63:
26:af:ea:bf:73:75:b6:56:b4:2f:8d:a4:ea:61:3c:
51:a7:a0:5d:36:db:d8:70:86:e7:f4:45:f0:a7:06:
d2:33:2b:0c:9a:fa:dc:7b:25:a4:cb:a1:0a:63:1b:
ce:29:0f:44:0b:2b:84:5f:ad:bd:2e:57:4a:10:38:
54:1f:79:89:ce:69:f9:51:d6:79:93:be:19:cb:ee:
cd:e9:c0:c3:d0:b5:93:c5:bb:57:0f:6d:a5:7c:c5:
3b:b2:03:78:46:60:07:30:1d:fd:1b:bc:21:20:00:
bf:5f:ab:98:53:9b:49:02:35:f3:27:ea:38:c3:f5:
3a:9e:c1:29:61:64:a7:30:d9:b4:10:31:96:9d:87:
b7:0c:ed:c1:95:95:b6:05:98:9d:c8:84:b2:c5:d0:
60:d3:2a:79:8a:79:ff:94:07:dd:d9:d3:03:11:d3:
eb:25:01:a7:a9:6a:02:63:70:5d:02:86:4b:d1:bf:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E1:D5:C9:FC:CE:36:0E:55:F3:E8:C7:51:2A:B0:39:8F:DB:5A:DC
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS137409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.138.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:64:88:11:3d:13:f6:25:01:47:84:6e:db:ee:b6:e4:56:82:
cd:cb:20:30:2a:e7:69:0b:66:74:48:18:4d:c4:8b:73:e4:05:
d2:59:33:8e:94:fa:02:e1:73:f3:ee:68:23:ea:7f:90:a0:16:
f8:16:dd:32:f6:0d:03:ef:6a:45:bd:b9:2f:e3:17:af:5a:93:
a9:aa:63:c8:f1:4d:45:e3:86:7a:fb:fb:fd:43:f2:35:86:92:
d9:74:61:89:99:2b:7d:94:d0:ae:5a:73:99:ff:33:1a:34:15:
4e:c7:35:4d:5e:18:4a:4b:ef:79:a6:0d:c7:8f:44:96:d4:97:
79:bc:5d:7f:32:9e:66:c5:27:3a:d0:57:04:e7:a6:cf:09:76:
de:17:56:3d:60:a6:10:5a:e9:e5:bd:4e:8c:eb:d2:ab:b4:43:
2b:c5:ad:40:59:94:d8:04:32:3a:67:8a:c3:13:03:e2:aa:ff:
48:e8:47:7e:23:11:90:90:68:c4:cb:70:3a:68:2e:ff:d5:5c:
86:3d:61:3e:c7:cb:25:cc:a4:b9:c4:ba:de:54:ac:00:c6:cf:
96:72:d0:fd:24:ae:54:d5:98:9e:80:61:58:ea:41:ff:eb:b2:
63:e4:8f:58:9c:06:68:d9:3e:2d:4a:20:d6:c9:5e:36:49:12:
8e:d2:04:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:00 2026 by rpki-client