Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: sUBuyzzML8Up8s52JKmYyyxjy3tNe/SLP5mSEAq7FwI=
Subject key identifier: 02:23:D4:9A:8F:CA:48:D1:75:8D:41:AC:6A:B4:D2:EC:B1:99:64:7D
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 38E3E488BFD72538BAE4DCC742F42618196A880F
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS14618.roa
Signing time: Sun 04 Oct 2026 00:52:44 +0000
ROA not before: Sun 04 Oct 2026 00:47:44 +0000
ROA not after: Sun 03 Oct 2027 00:52:44 +0000
asID: 14618
IP address blocks: 79.182.9.0/24 maxlen: 24
109.66.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e3:e4:88:bf:d7:25:38:ba:e4:dc:c7:42:f4:26:18:19:6a:88:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:44 2026 GMT
Not After : Oct 3 00:52:44 2027 GMT
Subject: CN=0223D49A8FCA48D1758D41AC6AB4D2ECB199647D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:cc:ea:8b:06:f7:e2:f1:f0:d5:6a:14:c2:
2a:78:13:8e:4d:1f:c1:e9:0b:b5:2b:98:6f:e2:7b:
de:e1:4e:e2:5b:a2:86:b0:ef:4a:aa:0e:f7:9f:90:
f3:f0:b3:5e:b5:e5:48:93:75:d2:90:3d:ed:73:c1:
3c:4e:24:fc:da:ba:6f:69:36:2f:50:62:d9:d9:81:
31:cf:da:c8:b4:21:2c:49:2e:16:0d:3c:e8:25:f7:
ba:c3:6e:fc:73:d8:3a:c7:b1:ea:80:66:b0:87:da:
4c:1e:e2:bc:0a:3c:8a:be:ab:38:62:0b:a6:c7:0f:
53:07:33:49:9e:bf:15:8b:e5:e0:f7:9d:b3:67:16:
c1:d1:b8:78:1b:1d:13:07:72:d7:05:b6:37:a5:ce:
f9:c2:83:ab:9f:01:be:f0:5b:d1:7c:e0:29:a1:bd:
55:45:e1:c8:1d:dc:a3:44:7e:b6:66:a0:f9:12:59:
ba:5e:e4:50:9b:b8:8a:28:48:0f:a3:8b:30:b6:3b:
3f:72:02:a9:92:cb:98:5f:5d:eb:c4:c8:26:90:78:
14:99:d4:0d:a4:98:ec:e1:ed:e0:02:15:03:62:a8:
d1:ef:4b:70:1f:70:fb:b2:85:f4:77:fa:5b:26:8a:
30:9c:ea:59:d9:4e:fc:be:ab:e2:b3:10:6b:05:93:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:23:D4:9A:8F:CA:48:D1:75:8D:41:AC:6A:B4:D2:EC:B1:99:64:7D
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.9.0/24
109.66.18.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:4e:8a:8c:27:66:c8:e4:f1:d5:29:8c:6c:b1:d6:4d:70:f5:
80:d7:e1:b2:59:4d:e3:79:67:96:d9:53:62:41:9e:ce:0c:18:
e6:45:4c:de:a9:b2:2c:be:10:47:6f:68:f5:70:23:d7:7a:6e:
09:59:47:2f:4d:d8:23:43:1b:3c:6a:3b:1a:b6:87:02:83:ef:
58:a4:1e:84:d8:df:d6:fa:d4:6a:90:1c:bc:85:d5:62:fd:9c:
0f:24:f1:41:bc:4a:02:b2:a9:c1:65:04:88:4b:d7:2d:f2:5d:
ce:0d:08:e1:b6:25:d5:9c:56:dd:13:50:8f:0d:f1:52:33:c7:
78:11:41:7e:72:8b:e9:3b:f4:66:0f:25:f7:3c:f7:09:56:b0:
4a:f1:d2:e8:0a:f9:6f:9b:b6:1c:9d:ad:5f:65:9c:da:0e:a9:
80:43:b7:ad:d5:9d:0a:a2:c5:54:18:f1:dc:32:7a:b0:48:c7:
7d:aa:57:dd:fb:c4:34:ee:55:3c:36:38:bb:a0:b4:e2:f7:26:
b7:bb:ce:49:0a:72:b3:74:8b:78:38:86:27:cd:16:80:03:a4:
03:ec:3b:1b:a7:70:b1:8b:aa:48:05:87:c2:43:2f:20:9a:06:
a1:3d:81:6f:0d:ec:61:1b:b6:d4:e3:31:c7:c7:72:b1:fd:9b:
f0:e6:b4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:25 2026 by rpki-client