Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS139874.roa
File: AS139874.roa (raw, json)
Hash identifier: VUrMSNsPszbBC9tF5EZLaZvubw1COYuofh+mIsTU5qQ=
Subject key identifier: FF:5E:D4:9F:9D:4B:F9:2C:DB:A7:41:A4:17:82:A7:25:75:A3:B4:61
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 2C5C05D09B3DC00BEF3B65D2DA9CE23189DAFDA5
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS139874.roa
Signing time: Sun 04 Oct 2026 00:51:04 +0000
ROA not before: Sun 04 Oct 2026 00:46:04 +0000
ROA not after: Sun 03 Oct 2027 00:51:04 +0000
asID: 139874
IP address blocks: 109.66.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:5c:05:d0:9b:3d:c0:0b:ef:3b:65:d2:da:9c:e2:31:89:da:fd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:04 2026 GMT
Not After : Oct 3 00:51:04 2027 GMT
Subject: CN=FF5ED49F9D4BF92CDBA741A41782A72575A3B461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:60:d1:bf:b7:3e:59:00:ba:7d:67:79:cb:
1a:50:19:f4:fa:92:d0:ba:da:e1:c9:07:b9:a2:b8:
ee:b9:f3:5d:29:5c:d1:bd:f7:69:bf:57:d9:b6:c2:
33:6b:81:e4:b3:82:8f:e9:7f:11:01:66:06:c2:5f:
df:b6:60:30:9d:34:19:c6:31:96:bb:13:bd:87:ea:
75:bb:f5:24:8d:f9:a9:15:cb:32:9a:b9:bf:5f:d2:
e5:69:20:2e:c6:e4:d4:80:a2:a5:00:9f:74:b5:37:
28:9b:40:e1:67:60:99:a8:a4:d4:51:83:46:93:c2:
47:e5:fe:fd:b1:76:f6:03:4a:91:f5:93:94:63:c6:
12:0b:83:29:d2:8b:c4:28:b6:2c:26:c4:fd:86:d1:
7f:2e:19:22:bb:7a:e2:06:73:92:96:13:58:b1:c6:
a5:61:c2:48:c3:9b:d1:ff:a5:ed:3a:06:cb:08:5c:
99:65:33:68:a2:c1:7d:b7:ad:a9:bf:98:0b:75:c3:
76:e8:0b:a8:ad:0f:66:b6:cb:f1:9b:d3:84:e9:cd:
e6:fa:0b:e5:c0:6b:06:5a:b0:f3:8f:07:bd:82:22:
d4:8c:de:91:56:a1:bc:48:6d:c9:82:9f:d3:56:87:
21:64:b6:5c:c6:3e:34:06:56:ea:bf:f4:da:f7:89:
ab:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5E:D4:9F:9D:4B:F9:2C:DB:A7:41:A4:17:82:A7:25:75:A3:B4:61
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS139874.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.22.0/23
Signature Algorithm: sha256WithRSAEncryption
76:6a:47:4a:88:5d:30:3f:c5:f0:e9:27:97:67:06:e8:82:ad:
04:68:2d:d5:d6:7d:3a:68:f0:c0:7b:ed:8b:6b:30:f9:02:fc:
4e:02:d7:90:88:bf:57:9b:36:86:04:74:29:d1:7d:62:da:c2:
49:9c:63:8b:0b:37:f5:02:79:f9:30:58:ce:d7:03:dd:a3:0b:
f5:3d:5b:db:de:b5:97:4d:ec:9c:38:59:7c:aa:d6:f5:87:0e:
70:74:27:d5:ed:30:25:51:45:21:21:bc:c7:c2:97:0c:97:9c:
6d:ca:0d:ee:37:77:6f:38:4d:d7:c1:14:7c:ef:88:ea:72:5d:
90:f2:96:6d:b8:c7:c8:92:2b:ca:27:7c:54:84:76:86:59:80:
13:79:ff:ea:60:55:71:79:53:34:38:c6:46:c3:b4:2a:74:d4:
a3:b7:fc:0d:de:06:2c:29:6f:e3:01:38:61:52:68:b1:98:95:
10:6e:59:10:cf:b2:27:4c:32:a3:a6:60:75:cb:05:d1:e3:26:
37:12:4f:e2:27:db:8e:bd:52:23:58:1d:17:cf:03:b9:71:fa:
36:97:a6:c4:49:21:7d:88:65:92:97:82:db:bc:6c:3d:9f:71:
43:2f:9d:da:82:8a:47:ec:b7:17:28:d0:46:3f:35:36:37:14:
86:a8:9e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:34 2026 by rpki-client