Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS142146.roa
File: AS142146.roa (raw, json)
Hash identifier: 2Q4z64L0G6kbdOqHcq+ohymjHI8ULDzvgz692ywMvrw=
Subject key identifier: 01:0E:3E:DC:5C:2D:1F:5F:95:69:CD:B1:A6:A9:61:32:EA:B0:90:E5
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 6B8599F2B15C4FBEADBBD0EC659323B153D488D1
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS142146.roa
Signing time: Sun 04 Oct 2026 00:51:05 +0000
ROA not before: Sun 04 Oct 2026 00:46:05 +0000
ROA not after: Sun 03 Oct 2027 00:51:05 +0000
asID: 142146
IP address blocks: 109.66.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:85:99:f2:b1:5c:4f:be:ad:bb:d0:ec:65:93:23:b1:53:d4:88:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:05 2026 GMT
Not After : Oct 3 00:51:05 2027 GMT
Subject: CN=010E3EDC5C2D1F5F9569CDB1A6A96132EAB090E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d4:06:db:4a:31:ef:6d:60:9b:22:48:65:7a:
a6:d7:56:43:81:bc:15:68:ae:38:4a:dd:b8:69:92:
cd:b2:ab:b9:38:31:35:cd:4c:74:25:7c:86:0d:bb:
13:08:a7:19:f6:bf:98:02:13:3f:86:d0:8b:33:2b:
6f:c9:fd:85:94:cc:d2:eb:24:95:68:d6:19:bb:3a:
0d:e9:b6:26:6a:5f:dd:1e:f7:2e:4f:49:8d:84:63:
af:56:f1:22:63:41:22:c2:66:db:62:71:00:94:26:
45:c3:08:76:5c:85:e6:bc:e4:35:d2:6f:19:20:6f:
f4:55:c8:00:72:87:8a:d9:53:58:3d:21:f4:0e:7f:
f9:cb:97:4b:2e:b4:c9:52:47:ff:fa:bc:83:cf:2b:
a8:91:bf:df:1c:16:5f:38:0e:f6:0e:64:5f:b9:32:
17:35:2b:64:b4:4d:1a:7a:a6:5a:27:af:6d:19:58:
85:75:ad:92:54:8e:e4:14:e9:f5:ec:c4:4e:f3:3c:
ca:29:30:87:c6:fd:42:8e:d3:f8:0a:16:61:d2:06:
90:b8:b8:8e:8a:85:e5:76:18:46:82:98:61:e5:c2:
57:57:ba:ec:65:5a:60:c0:af:6a:58:f2:94:a3:cc:
8d:66:9c:68:30:a9:a4:46:46:c5:4a:36:13:e1:9d:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0E:3E:DC:5C:2D:1F:5F:95:69:CD:B1:A6:A9:61:32:EA:B0:90:E5
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS142146.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.25.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c7:7a:51:be:42:14:e9:0c:da:b6:a3:de:df:07:21:fc:17:
75:fa:7c:ad:73:ee:ff:b9:de:a9:4a:ce:e5:5e:15:20:00:59:
74:05:c2:5e:ea:42:8a:ce:90:bd:c2:97:07:e5:1f:07:82:c4:
84:7e:b3:09:d2:a9:03:cb:e0:e7:64:7c:60:6e:c9:24:f3:94:
48:5e:4b:32:36:e0:17:84:f7:d2:13:8b:fa:f1:cc:26:a6:47:
29:ed:20:fd:23:a7:02:89:fa:13:db:a0:22:c5:9a:66:d2:4b:
b6:46:55:50:84:b2:9f:52:2f:1f:1d:45:98:42:19:fc:04:47:
c0:2b:c4:35:14:49:6c:64:6c:e3:da:81:36:32:7f:ee:e5:4d:
2c:36:85:41:b2:ea:50:c6:30:48:76:4c:ee:5b:44:43:2d:69:
0a:19:b0:1a:b4:59:7a:f6:19:96:36:03:53:5a:ec:6e:51:62:
a5:1f:36:de:2e:cc:63:84:bd:0e:b6:ce:55:dc:35:6a:2d:78:
5e:6e:7e:bb:7c:20:9c:cf:e1:ea:41:d0:03:af:d6:52:9c:11:
c9:eb:2f:d0:51:25:2f:bd:cb:85:30:1d:c6:d7:00:1c:9d:91:
57:54:88:d9:81:a0:24:f0:f4:ec:b4:c7:a2:e6:cd:1c:31:08:
71:02:5b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:07 2026 by rpki-client