Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS142561.roa
File: AS142561.roa (raw, json)
Hash identifier: h7VT9HEhMGwtSBal72FBUYIvUXTODmOhparbdQO4Ryw=
Subject key identifier: 4D:05:43:27:EE:27:AD:33:56:2F:B1:05:31:24:5D:79:2E:66:DD:E5
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 2F3E8AB713F9B1FBFD1DAF27801BCD3C8D317D36
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS142561.roa
Signing time: Sun 04 Oct 2026 00:51:04 +0000
ROA not before: Sun 04 Oct 2026 00:46:04 +0000
ROA not after: Sun 03 Oct 2027 00:51:04 +0000
asID: 142561
IP address blocks: 109.66.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:3e:8a:b7:13:f9:b1:fb:fd:1d:af:27:80:1b:cd:3c:8d:31:7d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:04 2026 GMT
Not After : Oct 3 00:51:04 2027 GMT
Subject: CN=4D054327EE27AD33562FB10531245D792E66DDE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d8:f1:10:22:6c:f9:42:ba:aa:ff:2e:58:1f:
da:f1:81:02:92:b9:ad:34:c3:e5:8b:6a:ac:f8:32:
45:37:32:3f:be:9b:f5:78:ff:1d:13:a5:2a:b5:ae:
c5:a0:95:b9:0f:b7:58:ff:32:eb:8d:42:35:d0:43:
e9:90:65:1d:38:ed:92:14:00:1c:12:12:e4:fa:5f:
37:37:91:4e:3d:ab:2f:11:5e:7c:3a:7b:2a:69:e0:
40:2f:2e:b5:11:96:56:93:19:c4:38:5b:8f:55:81:
be:dd:f3:99:94:f7:97:4d:c1:b5:6b:92:48:0e:30:
2d:26:3b:dc:b8:47:3a:12:29:cd:ba:1e:37:3c:c2:
8f:82:fd:32:20:19:3f:da:42:30:a2:19:25:5e:64:
db:0a:89:86:a1:75:e2:34:02:75:33:3e:d4:a2:f1:
d1:20:d8:8c:8e:13:b6:5e:f4:dc:f1:0a:85:dd:4c:
80:a6:5f:eb:fa:2e:46:9c:be:cb:93:09:b0:76:04:
8c:e3:a3:b8:d6:bb:23:8a:02:f2:74:fc:47:ee:2c:
cc:04:e8:2b:0c:75:e3:1a:b8:77:1c:6b:93:1e:e0:
f1:69:7b:5f:9d:87:80:b2:22:29:5e:a3:ac:6d:6a:
3f:fd:70:07:3e:af:64:37:41:05:1d:a0:60:a1:be:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:05:43:27:EE:27:AD:33:56:2F:B1:05:31:24:5D:79:2E:66:DD:E5
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS142561.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.71.0/24
Signature Algorithm: sha256WithRSAEncryption
29:5f:e3:2d:f3:7a:7f:c9:be:07:83:09:23:05:eb:c2:f9:38:
6b:64:8c:a6:c0:f8:c2:67:27:7d:04:cd:99:5d:e0:26:db:b3:
61:6e:04:9d:07:0b:69:96:9b:f9:0c:8f:7c:21:72:69:68:31:
f2:7a:36:69:f6:96:92:b5:fb:28:4f:2c:ee:dc:de:c3:46:21:
00:48:81:d2:61:2a:04:6d:ed:17:4f:49:11:66:ce:9e:43:fb:
2c:51:c6:e8:fc:95:29:da:1f:eb:b3:b5:45:04:df:8a:32:a6:
b6:69:67:1e:05:ed:ec:7f:44:4d:5b:36:d4:6e:aa:70:38:8d:
c1:98:56:a0:6f:c7:84:29:8d:44:9a:30:4e:2f:6a:d4:fb:e7:
e3:e8:ac:06:6f:22:ab:09:af:a6:a1:51:75:ef:c2:2b:77:12:
e5:24:48:ff:06:2e:08:68:39:56:24:0d:20:87:39:23:61:ea:
c5:06:0e:7f:54:41:4e:1f:f6:ff:10:af:5c:38:09:ec:8b:fe:
12:9e:fa:2a:ff:c0:7f:fa:e2:f2:ed:7f:90:2b:28:c9:f5:e9:
9d:51:61:7d:83:c3:08:dd:4a:e3:42:23:f7:86:e0:df:92:4c:
12:92:83:24:77:dc:cd:8e:ef:5a:c6:8b:64:7d:cd:7c:04:1d:
bf:3c:ea:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:49:09 2026 by rpki-client