Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: Ib8uOYo2aJh/EX/SfdxBfqHGM+55mtmPAhCHP53dm9c=
Subject key identifier: 9A:FC:21:83:0E:3F:3A:87:ED:EC:EB:D4:2C:08:3B:A7:86:CE:D9:A0
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 598ABDF712187D21D5F0E127A5DBD0B917D28F55
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS152868.roa
Signing time: Sun 04 Oct 2026 00:52:10 +0000
ROA not before: Sun 04 Oct 2026 00:47:10 +0000
ROA not after: Sun 03 Oct 2027 00:52:10 +0000
asID: 152868
IP address blocks: 79.180.100.0/24 maxlen: 24
79.180.102.0/24 maxlen: 24
109.64.229.0/24 maxlen: 24
109.66.16.0/24 maxlen: 24
109.66.19.0/24 maxlen: 24
109.66.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 08:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:8a:bd:f7:12:18:7d:21:d5:f0:e1:27:a5:db:d0:b9:17:d2:8f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:10 2026 GMT
Not After : Oct 3 00:52:10 2027 GMT
Subject: CN=9AFC21830E3F3A87EDECEBD42C083BA786CED9A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:b3:1e:71:17:10:9a:55:5e:07:ca:cc:d4:
4e:e8:c2:6a:0d:1e:5a:be:e4:8e:d3:79:33:8e:7c:
87:0a:cc:ae:2e:69:87:b0:b6:9c:ff:77:4f:28:d5:
e8:ff:ed:08:7d:6f:3d:90:77:d5:4f:42:8a:14:fc:
ae:20:8a:7b:15:e9:51:95:fe:45:99:da:98:4a:d1:
80:e7:06:b8:75:08:b4:6b:81:92:de:83:20:5c:61:
5e:1b:a1:e1:f3:e9:11:5f:15:f7:ba:af:f3:34:d2:
dc:94:5d:8e:e1:92:5e:0c:97:57:34:ee:87:39:93:
f3:6a:98:d7:4d:e3:30:87:cc:14:f4:15:e1:43:0e:
72:cc:36:21:5d:2d:5d:72:d1:36:3b:a6:d9:e3:51:
bc:4c:b3:7e:0b:fd:4b:9d:2a:67:01:1a:0a:c2:72:
94:e2:07:e1:3e:1f:fe:67:f0:48:6e:2c:58:ae:ef:
df:71:36:3a:2c:57:cf:10:a9:aa:df:17:53:83:e7:
d0:58:10:66:79:ec:7b:5d:d5:3d:e3:40:27:32:f6:
c7:dc:a3:fe:70:42:16:68:a0:67:9f:73:63:8b:88:
fa:57:e2:a8:06:ab:61:75:e9:7b:ee:02:e9:c8:39:
29:5b:40:c5:09:ab:09:f3:e1:a2:ae:db:09:55:e5:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FC:21:83:0E:3F:3A:87:ED:EC:EB:D4:2C:08:3B:A7:86:CE:D9:A0
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.180.100.0/24
79.180.102.0/24
109.64.229.0/24
109.66.16.0/24
109.66.19.0/24
109.66.69.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:29:4a:ac:00:c3:13:17:c9:6e:9c:8c:84:1f:f5:0d:8d:92:
8f:dd:92:aa:41:db:df:08:4e:c0:96:c8:98:c2:ca:41:76:f6:
96:09:9f:34:f6:0a:29:6d:98:59:61:51:7a:27:7a:dd:e6:bf:
23:29:ab:1f:ee:df:3f:76:4e:b4:cc:54:68:ae:a5:3e:07:fa:
ad:ce:2e:68:99:ef:d0:f6:d1:fc:1c:cd:96:b8:f0:bd:bb:0a:
ce:ba:8e:fa:92:c6:8e:03:0c:56:bf:02:7b:9d:b3:2f:dc:77:
a0:80:a3:6d:26:27:3a:76:fd:5f:2f:36:82:a0:88:28:f3:44:
cb:fe:ed:5b:95:33:38:5f:69:82:98:46:ff:6e:32:c1:73:84:
29:6c:1b:de:73:99:36:57:59:63:a8:5d:fb:56:4c:c7:eb:08:
c4:80:ab:0a:71:90:44:ea:42:16:10:48:a3:07:ec:57:3c:67:
64:7e:89:a8:dd:6d:07:20:f0:d6:e7:17:69:5b:b1:93:2e:99:
3f:81:2e:a4:28:0f:50:29:99:c7:45:4e:58:14:bd:14:cf:58:
ff:b9:01:66:fe:80:78:d5:b3:18:08:b5:bf:93:58:4d:89:da:
2c:52:4b:e1:6b:9c:26:50:7f:46:43:e8:c9:56:1e:e5:e7:9e:
cb:db:76:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:25 2026 by rpki-client