Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS198486.roa
File: AS198486.roa (raw, json)
Hash identifier: wVY6UBZ4rMvo8HN9XkVPkG495IpeNMFfItjVHwe2uC0=
Subject key identifier: 91:84:D7:B0:DA:B8:54:B8:D9:15:E6:31:22:F1:4B:F8:C3:8B:EC:5F
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 0785696F380CDA49C9DDBC7C738A1504F2FA592F
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS198486.roa
Signing time: Sun 04 Oct 2026 00:51:06 +0000
ROA not before: Sun 04 Oct 2026 00:46:06 +0000
ROA not after: Sun 03 Oct 2027 00:51:06 +0000
asID: 198486
IP address blocks: 109.66.226.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:85:69:6f:38:0c:da:49:c9:dd:bc:7c:73:8a:15:04:f2:fa:59:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:06 2026 GMT
Not After : Oct 3 00:51:06 2027 GMT
Subject: CN=9184D7B0DAB854B8D915E63122F14BF8C38BEC5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:3b:e7:4b:b2:a0:08:09:b1:f8:4c:13:b5:
61:6d:ec:42:19:7a:40:8f:71:76:91:c0:8a:df:7b:
9c:cb:be:d2:7f:86:a1:25:4d:59:5d:ca:80:e7:a5:
a8:48:3e:6c:ef:e7:c4:e5:92:40:29:92:af:c9:a5:
16:18:e9:9d:42:0b:e8:59:9a:48:98:e2:6d:f3:b4:
13:f6:b5:b8:94:f6:95:91:5e:7e:1a:29:46:db:ca:
4b:5a:cb:d8:52:d9:65:e8:d9:07:fb:e9:51:53:d4:
02:5a:6b:85:24:30:31:05:20:aa:39:bd:10:c3:d1:
7e:93:65:23:c8:ce:10:a9:c1:5f:75:e4:c5:c8:a1:
0a:f8:0d:f2:53:18:e5:17:1f:2a:01:78:a2:f5:be:
90:f9:1f:45:1d:6e:38:00:57:96:f4:f0:c7:2e:80:
d9:ed:e0:b6:f8:4d:5d:87:45:23:b4:cb:7b:7f:25:
b4:af:06:53:60:67:fe:36:00:8c:a7:60:fc:58:5e:
dc:a4:57:f1:9e:54:f9:00:1e:52:2c:6e:4a:65:15:
a1:ea:be:0c:89:92:cf:39:36:a0:16:f5:78:e7:f7:
42:fe:5f:fe:1d:a6:88:b8:68:43:92:ef:c0:ab:eb:
2a:c8:27:08:ad:51:c5:2d:22:4f:c9:4f:58:44:d1:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:84:D7:B0:DA:B8:54:B8:D9:15:E6:31:22:F1:4B:F8:C3:8B:EC:5F
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS198486.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.226.0/23
Signature Algorithm: sha256WithRSAEncryption
40:9b:35:02:17:a4:75:22:d4:e2:2c:fd:ba:84:49:ef:60:01:
f0:72:fd:3a:9c:64:89:58:39:bf:b0:b0:00:58:50:eb:ba:44:
82:6d:ac:e8:89:12:61:83:41:38:36:a4:a4:4e:17:c9:8d:a2:
84:df:63:a8:b7:d3:41:2f:65:23:09:5c:99:f7:98:db:56:ca:
3c:bd:56:a1:db:99:56:8e:1b:d9:91:a1:25:32:32:76:ab:1c:
5f:ca:8c:b8:e1:6e:15:33:46:f0:dd:c6:91:87:4e:4b:a1:7f:
9f:11:9a:2f:e3:38:bb:e7:af:b8:82:46:0c:a5:cf:ac:cc:c7:
1f:3a:3e:95:17:81:f7:55:8e:4b:a1:21:7c:36:86:35:d2:a0:
f8:a2:04:ca:cf:6d:84:31:49:b7:6c:3c:b3:85:4f:39:6a:a1:
da:77:b9:9f:72:20:e8:7a:8e:33:93:f3:47:6d:04:75:4b:19:
f4:36:af:f6:51:0c:aa:aa:f9:ff:95:94:eb:07:7d:e1:0f:12:
04:f4:c0:a1:21:3e:6b:75:93:df:b9:a0:89:ab:a4:dc:fb:c2:
6c:19:e4:7a:e3:0a:5e:b0:77:b8:69:54:f4:87:12:aa:1f:22:
3a:45:aa:e9:4f:56:db:d3:7c:01:f1:3f:03:fe:b8:a7:08:01:
da:80:c3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:23 2026 by rpki-client