Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: UrK7R+8Bmbd11gM4rKTwQzQZ3XD2bSq9oFIF9TUQV/Y=
Subject key identifier: 51:EE:CD:AB:21:7D:AE:92:C3:1C:4F:07:F9:26:95:BA:2D:C4:1B:EF
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 328FB38700751FBC94116CDDC82708F3AD91AD36
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS174.roa
Signing time: Sun 04 Oct 2026 00:51:02 +0000
ROA not before: Sun 04 Oct 2026 00:46:02 +0000
ROA not after: Sun 03 Oct 2027 00:51:02 +0000
asID: 174
IP address blocks: 109.66.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:8f:b3:87:00:75:1f:bc:94:11:6c:dd:c8:27:08:f3:ad:91:ad:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:02 2026 GMT
Not After : Oct 3 00:51:02 2027 GMT
Subject: CN=51EECDAB217DAE92C31C4F07F92695BA2DC41BEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:d5:45:68:cc:65:28:ba:a3:74:52:68:51:
df:ed:a9:7e:87:38:e5:6f:46:e2:d3:d9:b0:2f:13:
41:8f:3b:ed:9d:da:09:fb:6a:1a:bb:e2:c7:10:4c:
bb:f4:be:ea:08:cf:3a:d9:3a:19:43:75:9d:dd:68:
11:4a:eb:9c:04:f0:68:72:b0:d2:a0:b1:38:c1:d6:
61:2b:b7:cb:1c:89:8b:e8:57:df:bd:ae:3a:10:85:
e9:03:09:b4:53:57:24:6b:72:23:26:25:15:07:76:
04:67:b5:65:d0:94:1d:29:39:66:d7:ec:af:3a:67:
a6:07:7a:66:02:c9:c2:ec:82:16:fa:3e:07:99:ad:
7e:a8:23:f5:a3:80:31:36:24:3f:d4:45:6c:f2:d9:
2d:60:6d:b6:dc:c7:93:91:63:29:4f:c0:81:e2:49:
d5:1f:17:ff:89:ab:63:0d:bc:29:03:7d:62:f8:98:
28:27:4c:39:6f:56:bb:e8:32:68:23:6d:bd:ba:ad:
b0:7e:f0:f9:04:22:f9:5d:08:ff:c8:27:57:9d:19:
12:9f:11:16:31:f0:9b:a7:85:b1:d3:64:ab:27:4a:
19:ea:90:e5:1a:8c:97:db:8a:32:32:54:8d:13:f2:
ef:ae:06:d1:fd:b8:be:e6:e7:e6:18:15:da:8a:1f:
eb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EE:CD:AB:21:7D:AE:92:C3:1C:4F:07:F9:26:95:BA:2D:C4:1B:EF
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.32.0/22
Signature Algorithm: sha256WithRSAEncryption
99:0d:de:f7:a3:43:b9:54:7f:5f:92:41:37:29:95:1d:2a:2b:
c2:68:6c:d6:a5:0d:2a:ab:c8:59:12:83:33:2c:f2:74:d3:d7:
17:6d:62:1e:58:e1:36:1d:8a:f3:1d:82:ea:83:73:f0:cf:55:
26:9c:20:55:28:9d:31:f3:f7:25:9e:1b:4a:c8:40:a5:ea:55:
51:48:de:f0:59:68:f4:62:10:7e:ec:5a:3c:5d:5d:49:77:c3:
15:76:c8:cb:ab:89:ad:3b:83:7d:96:cc:9b:29:14:3a:c4:70:
d1:37:5d:a5:67:70:4b:50:86:22:b8:92:07:eb:63:01:45:d0:
68:9a:33:4a:83:da:5d:ea:46:6e:6a:4a:13:9f:41:99:81:6e:
ab:bb:56:a2:e2:f1:39:a6:d2:5b:8a:d3:3f:8d:e4:cd:e7:1f:
39:6f:9f:70:89:50:e7:cf:79:9a:4e:d9:73:d8:0a:3e:81:82:
8d:e2:e2:7c:20:41:7e:96:54:80:8e:4a:46:21:f6:5e:38:97:
a4:c6:14:55:0f:8b:3f:eb:c1:22:c2:6a:1a:54:93:e2:2f:dd:
d6:db:01:a7:dc:89:1e:4d:0e:07:44:12:c1:2d:68:03:01:75:
69:06:d2:b0:fc:ea:12:08:40:22:c9:e7:02:03:83:8a:bd:3e:
67:a8:63:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:36:56 2026 by rpki-client