Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS16125.roa
File:                     AS16125.roa (raw, json)
Hash identifier:          ed15+W8kLRbOLXw29dJKgUK3wFzlcp54QKeJSMaxi7E=
Subject key identifier:   11:19:01:11:36:27:37:A3:4A:14:D6:2D:FD:10:12:50:E2:B2:9D:E3
Certificate issuer:       /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial:       723843C5F3146550021EF99B3D1E6D17454E0DE0
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS16125.roa
Signing time:             Sun 04 Oct 2026 00:52:43 +0000
ROA not before:           Sun 04 Oct 2026 00:47:43 +0000
ROA not after:            Sun 03 Oct 2027 00:52:43 +0000
asID:                     16125
IP address blocks:        79.183.140.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 05 Oct 2026 08:44:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:38:43:c5:f3:14:65:50:02:1e:f9:9b:3d:1e:6d:17:45:4e:0d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
        Validity
            Not Before: Oct  4 00:47:43 2026 GMT
            Not After : Oct  3 00:52:43 2027 GMT
        Subject: CN=11190111362737A34A14D62DFD101250E2B29DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3c:45:bc:19:15:75:26:14:e2:82:12:56:50:
                    64:a6:35:6f:3f:91:7d:5c:97:f6:a7:4d:cc:f4:7d:
                    67:b4:fd:41:7d:f3:6e:7c:ba:e9:b3:6a:7b:a9:4a:
                    98:39:c6:ba:2e:cb:78:51:a8:8f:c8:4b:48:71:da:
                    df:c0:54:30:69:cc:6e:34:b5:0a:b9:d1:51:88:ba:
                    91:40:52:bf:27:e1:5a:83:bd:39:9c:57:4a:b6:3e:
                    31:4a:98:95:12:09:5f:86:45:bc:43:a7:10:12:e7:
                    ec:85:db:6b:37:f0:98:34:1e:75:be:9d:65:fe:1a:
                    0f:1c:1d:55:50:1f:75:51:5e:a7:1a:1f:b8:66:16:
                    30:14:5e:13:71:5d:df:c4:a7:2a:05:9c:3d:e7:9b:
                    e9:02:ab:7c:9f:b4:99:b5:42:ea:33:8c:56:12:36:
                    a4:ea:5d:2f:f6:44:84:65:bf:03:e3:16:16:4c:75:
                    a6:52:ce:20:6f:5d:24:05:4e:53:f3:5a:01:ee:0b:
                    92:19:2b:f8:e7:03:f9:8b:59:13:59:10:81:8a:68:
                    88:d5:22:fa:36:62:a7:b1:0a:10:22:29:72:85:ff:
                    67:bb:42:a1:52:32:1b:08:c2:1d:a7:e5:88:a6:dc:
                    35:ed:74:42:e7:1b:a5:79:f8:b0:84:84:86:90:f3:
                    a5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:19:01:11:36:27:37:A3:4A:14:D6:2D:FD:10:12:50:E2:B2:9D:E3
            X509v3 Authority Key Identifier:
                keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS16125.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.183.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:ce:74:69:cb:3a:8b:a2:d4:10:87:3a:6c:41:12:57:c3:4e:
         3e:5e:87:f9:a6:a1:27:44:d8:13:1b:88:35:f3:3f:11:9a:75:
         0c:c8:1b:71:ea:56:02:84:ec:b7:fa:f3:90:c1:bf:9d:75:8d:
         bb:a5:45:6f:14:27:5b:98:55:1e:76:0e:d7:8b:8e:ff:96:09:
         1c:37:8e:84:ee:4c:c4:64:2e:b3:47:b0:56:23:d5:be:77:32:
         ec:d6:10:38:bb:50:e9:c5:05:32:19:91:2f:f8:6a:f4:83:79:
         d8:f5:27:0c:56:18:90:0d:f8:41:fc:7e:47:d8:1d:44:27:a1:
         4c:14:ae:5c:23:29:d9:b5:11:cf:92:df:4b:25:82:fa:2c:79:
         c2:50:85:df:c8:cc:29:08:20:83:ac:60:31:e0:64:57:35:c3:
         93:8b:c3:ec:b1:90:ea:42:c7:20:40:7f:14:66:7b:f6:80:22:
         41:d4:15:bd:64:fd:f5:6a:91:68:02:ae:fc:99:09:87:1c:2d:
         37:09:21:72:58:42:f4:f3:5a:37:5d:6c:73:df:4d:84:44:86:
         c3:2e:5c:31:eb:19:fb:6c:0c:5a:12:18:5f:bc:97:ca:50:4a:
         a3:65:9d:a9:5f:36:df:b7:60:3e:16:a9:fb:2b:98:51:e8:20:
         64:2d:9b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:37 2026 by rpki-client