Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS19318.roa
File:                     AS19318.roa (raw, json)
Hash identifier:          earAXkF6T54AvYHmJvQDAVViAcXkoehk21JnOG5V/qk=
Subject key identifier:   4D:66:03:DC:E5:5F:33:C8:DE:E1:A7:C3:25:A6:41:3D:54:4A:60:25
Certificate issuer:       /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial:       77DE0B4B1C93681A9FC8C8FFDFC26A222607E891
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS19318.roa
Signing time:             Sun 04 Oct 2026 00:52:43 +0000
ROA not before:           Sun 04 Oct 2026 00:47:43 +0000
ROA not after:            Sun 03 Oct 2027 00:52:43 +0000
asID:                     19318
IP address blocks:        79.182.20.0/24 maxlen: 24
                          79.182.57.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 05 Oct 2026 09:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:de:0b:4b:1c:93:68:1a:9f:c8:c8:ff:df:c2:6a:22:26:07:e8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
        Validity
            Not Before: Oct  4 00:47:43 2026 GMT
            Not After : Oct  3 00:52:43 2027 GMT
        Subject: CN=4D6603DCE55F33C8DEE1A7C325A6413D544A6025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4d:91:1a:57:10:29:54:fa:4e:7e:b2:70:93:
                    34:ff:52:a5:b0:f0:b1:eb:a9:b5:83:2f:08:04:34:
                    17:cc:76:87:b8:f4:e8:89:8b:d7:e4:96:f1:7d:be:
                    8f:87:4d:fb:51:30:4e:15:7e:98:52:3b:0f:e3:6d:
                    21:d4:2c:8e:d2:2b:ca:d6:25:e3:78:f5:ee:60:07:
                    8d:df:e8:18:f4:13:0e:21:c9:8d:40:1e:20:9a:53:
                    1a:b2:f5:4d:3b:c3:77:73:e4:42:0d:33:69:bd:62:
                    b5:90:d7:bd:67:70:63:01:43:8f:b2:84:12:58:21:
                    6c:f9:82:ad:61:d6:fe:71:c5:ec:2d:bc:5c:06:90:
                    d8:f0:1f:44:f1:4a:16:8a:7a:b9:98:64:7a:c1:c7:
                    7e:45:bd:01:d1:ae:87:1c:c3:b5:9e:2c:16:4e:b8:
                    c8:78:d8:f1:cf:85:6c:3b:74:76:9b:ab:45:7c:c7:
                    e8:0c:40:f4:64:3f:d3:ac:1d:26:63:78:06:0b:6e:
                    2e:92:7c:1d:2f:57:b5:dd:36:03:b5:bd:13:b3:cc:
                    a5:86:6b:00:89:df:39:c8:a9:9c:f6:76:5b:bb:3c:
                    ae:61:4b:3b:64:33:a9:83:aa:86:51:34:c4:7d:26:
                    04:e0:b8:05:0c:7e:3a:d2:67:32:07:9f:2e:4c:8c:
                    00:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:66:03:DC:E5:5F:33:C8:DE:E1:A7:C3:25:A6:41:3D:54:4A:60:25
            X509v3 Authority Key Identifier:
                keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS19318.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.20.0/24
                  79.182.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:93:e4:00:fc:cf:6b:2e:22:0f:72:17:6e:5b:88:df:b6:95:
         54:67:3f:aa:96:d8:55:39:81:49:93:ce:e9:7d:6f:c6:fc:bf:
         19:5b:04:cc:49:d5:ae:93:e6:ec:75:19:e3:10:25:1b:6d:b8:
         88:ac:38:51:85:51:b2:e5:e9:cf:e9:9e:97:46:b0:22:f1:09:
         77:21:9c:9f:98:94:94:7c:d2:00:21:02:e8:c2:f5:e0:01:ea:
         b4:49:db:bd:bb:b5:95:93:be:1a:70:e4:ec:b4:69:72:9a:32:
         d6:c4:2a:e0:d1:b7:70:e0:b5:90:e8:38:90:be:50:6a:59:52:
         e7:10:e2:ef:6c:c3:b8:95:8e:ba:a1:09:09:89:38:80:a8:e6:
         6f:fd:8b:49:3d:ac:35:8d:6f:b1:64:7c:ef:54:d7:21:5f:1c:
         64:3a:05:f3:1d:16:a9:ae:60:7c:7c:e4:74:84:c7:e0:6f:19:
         4e:d1:6d:34:cd:1f:5e:a5:3a:ee:91:a5:a6:c7:a8:48:1c:cc:
         c4:bd:ca:67:a4:a1:6a:ca:7c:d2:b6:44:31:7f:c9:a2:37:c5:
         27:5e:05:3b:9a:47:1f:3e:f9:6f:30:73:98:94:26:54:41:52:
         f4:ea:76:b5:62:7e:92:18:bb:3a:bf:43:11:4f:3e:e5:5a:68:
         74:79:86:be
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUd94LSxyTaBqfyMj/38JqIiYH6JEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWYwMjNmZGMyYmJhMjgzNTEzYzZhNTg3ZjkwNzc3MGIy
NmVmZjU2OTAeFw0yNjEwMDQwMDQ3NDNaFw0yNzEwMDMwMDUyNDNaMDMxMTAvBgNV
BAMTKDRENjYwM0RDRTU1RjMzQzhERUUxQTdDMzI1QTY0MTNENTQ0QTYwMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjTZEaVxApVPpOfrJwkzT/UqWw
8LHrqbWDLwgENBfMdoe49OiJi9fklvF9vo+HTftRME4VfphSOw/jbSHULI7SK8rW
JeN49e5gB43f6Bj0Ew4hyY1AHiCaUxqy9U07w3dz5EINM2m9YrWQ171ncGMBQ4+y
hBJYIWz5gq1h1v5xxewtvFwGkNjwH0TxShaKermYZHrBx35FvQHRroccw7WeLBZO
uMh42PHPhWw7dHabq0V8x+gMQPRkP9OsHSZjeAYLbi6SfB0vV7XdNgO1vROzzKWG
awCJ3znIqZz2dlu7PK5hSztkM6mDqoZRNMR9JgTguAUMfjrSZzIHny5MjABjAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUTWYD3OVfM8je4afDJaZBPVRKYCUwHwYDVR0j
BBgwFoAU7wI/3Cu6KDUTxqWH+Qd3Cybv9WkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDk2ZjIwYTQtMjYwZi00MGZhLWEzODktZDZjYWQyZGMw
ZmJkLzAvRUYwMjNGREMyQkJBMjgzNTEzQzZBNTg3RjkwNzc3MEIyNkVGRjU2OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzd3SV8zQ3U2S0RVVHhxV0gtUWQzQ3li
djlXay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ5NmYyMGE0LTI2MGYt
NDBmYS1hMzg5LWQ2Y2FkMmRjMGZiZC8wL0FTMTkzMTgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABPthQD
BABPtjkwDQYJKoZIhvcNAQELBQADggEBAMmT5AD8z2suIg9yF25biN+2lVRnP6qW
2FU5gUmTzul9b8b8vxlbBMxJ1a6T5ux1GeMQJRttuIisOFGFUbLl6c/pnpdGsCLx
CXchnJ+YlJR80gAhAujC9eAB6rRJ2727tZWTvhpw5Oy0aXKaMtbEKuDRt3DgtZDo
OJC+UGpZUucQ4u9sw7iVjrqhCQmJOICo5m/9i0k9rDWNb7FkfO9U1yFfHGQ6BfMd
FqmuYHx85HSEx+BvGU7RbTTNH16lOu6RpabHqEgczMS9ymekoWrKfNK2RDF/yaI3
xSdeBTuaRx8++W8wc5iUJlRBUvTqdrVifpIYuzq/QxFPPuVaaHR5hr4=
-----END CERTIFICATE-----
Generated at Wed Oct 7 23:07:21 2026 by rpki-client