Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: eabBGwq/xRQ5W7bbW4W4l1DuOdQlbMeqxUxXI4VXGV4=
Subject key identifier: 13:BB:5B:E7:34:02:86:6E:6D:8A:83:0F:87:48:6B:09:3E:8F:C3:E8
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 08A8CAFE8B09A370F19E0BE364994F765B9CA0E2
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS147281.roa
Signing time: Mon 05 Oct 2026 08:44:25 +0000
ROA not before: Mon 05 Oct 2026 08:39:25 +0000
ROA not after: Mon 04 Oct 2027 08:44:25 +0000
asID: 147281
IP address blocks: 79.176.4.0/24 maxlen: 24
79.182.10.0/24 maxlen: 24
79.182.11.0/24 maxlen: 24
109.66.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a8:ca:fe:8b:09:a3:70:f1:9e:0b:e3:64:99:4f:76:5b:9c:a0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:39:25 2026 GMT
Not After : Oct 4 08:44:25 2027 GMT
Subject: CN=13BB5BE73402866E6D8A830F87486B093E8FC3E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:9c:3b:4f:ed:81:f3:1c:86:70:4d:b1:d5:
89:04:d8:f0:0f:82:76:a5:46:04:1a:48:be:89:8d:
19:5e:63:f7:ee:92:1f:e4:04:6a:d7:0d:c5:e6:4b:
e7:4e:fc:36:69:96:9a:a9:ae:15:15:08:57:94:31:
33:20:14:1f:65:20:b3:dd:45:de:64:0e:4a:3d:03:
a6:48:3e:87:e7:58:22:9f:ef:67:9b:4e:68:b3:83:
17:d4:ab:99:20:2c:b4:25:3b:61:3e:5b:01:70:4a:
64:a0:20:42:61:79:49:c3:01:3f:70:af:ae:a0:99:
ce:a5:da:d3:c7:ec:54:48:84:93:b5:4c:7f:35:54:
02:0a:63:23:ce:f5:a9:bc:8b:ea:23:47:f9:a8:40:
04:0b:fc:93:43:9e:3a:a9:90:9a:ea:64:d8:a9:b6:
4e:99:e2:ec:64:39:5f:3b:28:61:df:ef:10:5e:6b:
a4:dc:61:bb:90:6a:c2:97:98:63:7c:24:34:6b:22:
c9:26:46:cc:50:96:53:11:0e:2f:e9:e3:36:66:de:
5d:b6:b5:d1:75:9c:d4:e5:0b:87:d9:74:90:7e:75:
65:73:f4:29:a5:b6:a0:c7:7e:de:b6:a3:71:a8:51:
dc:e1:9d:f3:3f:6e:93:02:a3:b1:d1:90:c7:71:f5:
0a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BB:5B:E7:34:02:86:6E:6D:8A:83:0F:87:48:6B:09:3E:8F:C3:E8
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.4.0/24
79.182.10.0/23
109.66.42.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e7:35:ba:3a:64:c1:35:a1:2a:07:2e:59:b4:c0:3d:4a:8f:
1e:ef:39:f7:a6:63:23:a2:1e:69:df:e9:fe:bb:cf:71:13:20:
26:39:03:7e:81:c1:4a:e4:4f:80:c3:d1:27:d0:c6:73:8f:20:
67:46:b0:e4:8b:bf:f0:89:71:bf:98:d3:ab:a5:f2:ac:46:35:
99:33:66:8a:de:b3:45:e0:33:ea:51:66:b0:1a:b8:33:d8:7e:
a5:59:95:60:23:ae:22:b9:b8:3d:5a:06:a0:21:a1:fa:8c:bc:
1a:4b:3a:e6:4a:43:79:12:25:67:9a:a1:22:3b:d3:05:e3:41:
d0:80:88:83:ac:0b:d3:39:2c:80:2b:52:d7:92:75:e2:8c:aa:
f1:b5:29:e9:64:d1:16:ac:1e:0a:10:ac:22:aa:6a:7a:1b:a9:
56:0b:28:fb:9e:dd:5b:5c:87:17:b2:7a:d8:79:50:44:57:b9:
63:e3:88:02:6e:3f:fb:bc:70:60:9a:26:c2:c8:5a:6a:bf:7f:
f5:0d:b2:df:ff:ef:db:99:42:6a:fc:f5:f2:f9:90:d9:8e:b8:
e6:12:e6:b4:79:da:91:44:2a:83:92:6f:d5:40:68:88:2e:e7:
a5:64:51:fc:d5:2f:44:4f:22:c5:4b:fb:c6:56:7b:ac:bb:20:
6b:3f:6b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:15 2026 by rpki-client