Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: GS6yZeIkwv15KsIpLQbP5yB0PYumoTsYjJf1fiICZtk=
Subject key identifier: 39:3A:6E:B0:C8:09:53:4D:5E:22:DF:21:21:39:B2:E2:2E:3A:DE:A2
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 3870CAC745810A36639EB90BB97747E2AA05A76F
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS152179.roa
Signing time: Mon 05 Oct 2026 08:20:17 +0000
ROA not before: Mon 05 Oct 2026 08:15:17 +0000
ROA not after: Mon 04 Oct 2027 08:20:17 +0000
asID: 152179
IP address blocks: 109.66.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:70:ca:c7:45:81:0a:36:63:9e:b9:0b:b9:77:47:e2:aa:05:a7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:15:17 2026 GMT
Not After : Oct 4 08:20:17 2027 GMT
Subject: CN=393A6EB0C809534D5E22DF212139B2E22E3ADEA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f5:08:18:d4:38:8c:81:e7:3b:66:4d:9f:2f:
dd:7e:22:80:36:b4:99:52:36:47:cc:73:a1:a7:8f:
7b:89:c9:61:89:aa:32:dc:27:eb:11:78:76:24:0d:
92:91:4d:28:ce:26:7a:e1:ea:aa:96:a2:bf:98:c3:
80:b5:88:ea:ac:f5:ff:dc:cc:a5:b6:69:93:57:15:
02:9b:dc:ae:1e:2a:5f:04:49:df:f1:db:92:60:6d:
86:f0:37:39:da:3f:b3:67:79:22:ea:3a:c7:ea:03:
8a:ab:5a:e7:e7:0d:17:40:de:5e:ce:bd:e6:94:33:
4e:9e:c7:75:fc:8d:fd:12:aa:bc:8b:ab:bc:a4:31:
65:18:70:a0:2c:1f:2c:3e:b3:5e:31:44:64:77:cf:
fc:be:6d:0c:49:04:e5:b7:0d:14:79:c7:2b:ae:3b:
11:fe:a6:5f:5d:9b:50:f3:57:b1:24:1b:5e:8d:5f:
71:2f:0b:57:5c:27:92:b5:83:7e:94:16:5b:df:24:
e6:b1:4a:4f:55:3d:93:4b:cc:56:a2:ce:e9:67:56:
57:4e:f3:81:77:38:89:6f:7f:9c:04:30:dc:a7:9c:
38:40:66:ac:32:c7:75:29:d6:1d:17:62:f4:af:e5:
44:f8:e3:4b:56:5e:eb:0f:53:e7:4d:66:eb:d0:98:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3A:6E:B0:C8:09:53:4D:5E:22:DF:21:21:39:B2:E2:2E:3A:DE:A2
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.70.0/24
Signature Algorithm: sha256WithRSAEncryption
50:eb:54:d9:1e:3b:0c:c7:1f:12:ae:4f:f6:10:88:fe:37:79:
bf:29:4e:68:8e:89:91:f5:65:e9:1b:4b:aa:17:82:00:ab:32:
df:a2:7b:b1:19:96:95:19:6e:57:c2:08:46:0e:9b:f2:40:8f:
bd:2f:6e:4d:98:22:67:8d:ef:94:b3:2a:ab:e2:db:86:4d:6f:
7d:59:5e:9c:3f:3c:c9:bf:2c:24:c1:0a:1b:35:3c:8f:99:77:
0b:6d:65:98:e2:0f:21:db:65:e3:0e:d1:90:13:f7:17:4c:69:
ea:6b:4b:a0:a0:2f:d0:b3:de:6f:93:c3:5f:bc:56:13:dd:ba:
30:d8:7f:e2:11:42:96:16:17:05:cf:16:05:11:e4:22:00:5e:
b3:9a:2a:27:05:ce:ae:f3:29:1d:c0:bf:6b:c9:96:b4:6f:bf:
a1:f7:75:76:42:9d:b7:1f:e8:b6:c5:96:02:ce:db:89:a1:5f:
1e:7a:d5:05:58:a6:90:c6:ab:f2:8f:56:1f:bc:d8:fc:00:4b:
dd:2a:07:b8:eb:eb:e8:8d:ad:c1:4b:64:cb:cc:90:c2:dc:f9:
94:91:81:a7:98:86:c4:10:5e:1f:f5:09:9c:1a:07:97:36:27:
ab:bb:6c:1c:ac:19:51:31:73:f5:0a:ff:c5:f1:6e:1e:b0:f5:
92:b5:df:58
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUOHDKx0WBCjZjnrkLuXdH4qoFp28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWYwMjNmZGMyYmJhMjgzNTEzYzZhNTg3ZjkwNzc3MGIy
NmVmZjU2OTAeFw0yNjEwMDUwODE1MTdaFw0yNzEwMDQwODIwMTdaMDMxMTAvBgNV
BAMTKDM5M0E2RUIwQzgwOTUzNEQ1RTIyREYyMTIxMzlCMkUyMkUzQURFQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm9QgY1DiMgec7Zk2fL91+IoA2
tJlSNkfMc6Gnj3uJyWGJqjLcJ+sReHYkDZKRTSjOJnrh6qqWor+Yw4C1iOqs9f/c
zKW2aZNXFQKb3K4eKl8ESd/x25JgbYbwNznaP7NneSLqOsfqA4qrWufnDRdA3l7O
veaUM06ex3X8jf0SqryLq7ykMWUYcKAsHyw+s14xRGR3z/y+bQxJBOW3DRR5xyuu
OxH+pl9dm1DzV7EkG16NX3EvC1dcJ5K1g36UFlvfJOaxSk9VPZNLzFaizulnVldO
84F3OIlvf5wEMNynnDhAZqwyx3Up1h0XYvSv5UT440tWXusPU+dNZuvQmEQZAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUOTpusMgJU01eIt8hITmy4i463qIwHwYDVR0j
BBgwFoAU7wI/3Cu6KDUTxqWH+Qd3Cybv9WkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDk2ZjIwYTQtMjYwZi00MGZhLWEzODktZDZjYWQyZGMw
ZmJkLzAvRUYwMjNGREMyQkJBMjgzNTEzQzZBNTg3RjkwNzc3MEIyNkVGRjU2OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzd3SV8zQ3U2S0RVVHhxV0gtUWQzQ3li
djlXay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ5NmYyMGE0LTI2MGYt
NDBmYS1hMzg5LWQ2Y2FkMmRjMGZiZC8wL0FTMTUyMTc5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUJG
MA0GCSqGSIb3DQEBCwUAA4IBAQBQ61TZHjsMxx8Srk/2EIj+N3m/KU5ojomR9WXp
G0uqF4IAqzLfonuxGZaVGW5XwghGDpvyQI+9L25NmCJnje+Usyqr4tuGTW99WV6c
PzzJvywkwQobNTyPmXcLbWWY4g8h22XjDtGQE/cXTGnqa0ugoC/Qs95vk8NfvFYT
3bow2H/iEUKWFhcFzxYFEeQiAF6zmionBc6u8ykdwL9ryZa0b7+h93V2Qp23H+i2
xZYCztuJoV8eetUFWKaQxqvyj1YfvNj8AEvdKge46+voja3BS2TLzJDC3PmUkYGn
mIbEEF4f9QmcGgeXNieru2wcrBlRMXP1Cv/F8W4esPWStd9Y
-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:36 2026 by rpki-client