Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS151407.roa
File: AS151407.roa (raw, json)
Hash identifier: r4sBa/rKYc2yjcpLbB0ToTJNWhR974t+MnJocSREYho=
Subject key identifier: EB:25:20:D4:1F:C7:2E:75:EE:6B:DB:75:5A:26:42:1D:33:06:35:EE
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 126B7E0B26FD7C70CDA42097CEC56ED6FD84CE27
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS151407.roa
Signing time: Sun 04 Oct 2026 00:51:03 +0000
ROA not before: Sun 04 Oct 2026 00:46:03 +0000
ROA not after: Sun 03 Oct 2027 00:51:03 +0000
asID: 151407
IP address blocks: 109.66.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6b:7e:0b:26:fd:7c:70:cd:a4:20:97:ce:c5:6e:d6:fd:84:ce:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:03 2026 GMT
Not After : Oct 3 00:51:03 2027 GMT
Subject: CN=EB2520D41FC72E75EE6BDB755A26421D330635EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:f2:a2:4a:82:5d:aa:51:3e:ed:ef:14:61:
eb:4b:40:c5:b3:38:32:8d:84:ce:51:d1:40:dd:63:
b8:2a:8e:04:c5:e8:1e:89:9f:65:9c:e5:de:98:bc:
81:3f:4c:a5:55:14:1b:68:56:8e:17:ee:92:5b:89:
5c:9c:52:bb:8d:60:c0:ca:67:84:83:62:03:0e:d3:
15:c8:6e:f7:45:d9:59:73:19:d5:cd:ff:99:5d:c5:
d6:a2:ee:88:e8:7e:fb:02:d4:67:e1:05:96:74:dd:
fb:c0:f8:8e:f4:b9:5d:c2:89:11:d1:49:90:1f:4e:
82:ac:b2:30:3c:f9:70:6f:6a:61:8d:5d:29:5e:15:
52:e5:1f:38:00:66:4d:7a:48:a2:9c:06:18:68:e1:
59:60:95:f3:0f:d8:4e:5c:2d:ad:23:c9:a3:51:5e:
01:7e:45:a0:13:be:40:33:4c:ae:f7:f2:84:11:b0:
8f:ec:15:bd:d5:9f:15:02:49:ec:f9:a7:ff:75:41:
8a:41:e8:d9:c3:24:0e:59:6a:c9:a4:84:1d:f2:99:
da:ca:84:84:57:ff:e1:c7:6c:69:6f:c9:d1:f6:35:
6b:d9:5d:24:9c:bd:c7:de:db:0d:0c:6a:41:f6:bf:
36:a6:8c:79:00:e5:03:1e:2e:d2:01:00:b5:f6:be:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:25:20:D4:1F:C7:2E:75:EE:6B:DB:75:5A:26:42:1D:33:06:35:EE
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS151407.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.99.0/24
Signature Algorithm: sha256WithRSAEncryption
26:db:72:31:67:42:ca:3e:9a:88:e5:3a:5d:6b:4f:7e:c2:da:
c8:3a:e1:22:be:0b:09:bb:93:01:4f:db:11:77:75:1a:5f:ba:
c9:23:94:24:42:5c:88:94:6e:3e:12:d0:91:c4:3b:bf:83:b7:
75:9d:6f:81:50:6f:db:40:94:86:92:fb:ba:49:66:7b:bd:5d:
22:54:ba:3c:15:c8:62:ff:58:46:62:de:d3:c6:c2:8b:de:71:
8a:c4:80:87:c9:c1:4a:68:86:48:3d:0e:fb:02:da:89:c9:91:
5b:62:d5:7b:20:ed:72:69:3f:19:fe:82:32:ae:25:0a:42:cb:
92:a6:6a:1c:94:3f:4d:02:21:5f:c0:f6:42:c2:e4:12:8a:9a:
58:a2:8f:70:4f:b3:cc:3b:20:e8:84:74:e8:8e:22:c2:01:5d:
bd:00:9c:bd:a0:97:d7:96:6c:fa:03:dc:71:6d:6d:0d:28:b8:
13:c0:07:6e:fe:bf:90:a3:d2:0b:bb:ae:a8:b8:07:0b:09:cd:
a4:bb:be:75:fc:b5:b4:e7:f0:36:f0:c9:59:6b:b0:e5:2e:b3:
d2:d5:88:8e:b6:41:9d:68:97:37:43:64:bb:75:a1:bf:10:aa:
01:9c:ba:2a:b1:e7:7a:dd:ae:49:73:7d:cd:9b:93:c0:1a:3a:
4f:ab:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:01 2026 by rpki-client