Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS198510.roa
File: AS198510.roa (raw, json)
Hash identifier: k6pF8GW8rNgXVyVL0pIN0coRIs+yQ7xrptrWxAC2sH4=
Subject key identifier: 17:8E:CB:44:F7:E3:48:BD:E0:8D:D1:98:2C:26:39:94:2E:2C:42:22
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 2E0D725C259AB2EAEDBB3D24E9C0F11CC0C6A23C
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS198510.roa
Signing time: Sun 04 Oct 2026 00:51:38 +0000
ROA not before: Sun 04 Oct 2026 00:46:38 +0000
ROA not after: Sun 03 Oct 2027 00:51:38 +0000
asID: 198510
IP address blocks: 79.176.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 10:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:0d:72:5c:25:9a:b2:ea:ed:bb:3d:24:e9:c0:f1:1c:c0:c6:a2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:38 2026 GMT
Not After : Oct 3 00:51:38 2027 GMT
Subject: CN=178ECB44F7E348BDE08DD1982C2639942E2C4222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:28:97:b3:e8:f0:ed:32:ee:fa:c3:d8:e1:
49:04:bb:c4:74:0d:70:98:b0:31:aa:ad:7f:c1:fa:
0e:96:c4:17:42:19:9b:a1:29:00:85:1d:5d:ed:24:
86:54:ca:95:75:50:5d:99:b3:b5:16:72:1f:83:6e:
c0:5c:3a:d1:6b:39:62:59:89:d5:81:4f:dd:2e:fc:
8b:e9:7c:14:d7:a5:e0:ff:d9:cd:ac:d4:22:6c:5a:
c1:17:6f:fd:61:26:64:13:df:40:33:b8:9c:13:02:
77:d7:eb:0c:3f:1a:4c:48:d2:ad:b6:4d:8e:58:cd:
a0:58:14:97:00:1d:9f:93:f9:71:6e:7f:a4:1e:c2:
03:e4:15:65:ab:a9:db:b5:94:c0:b7:af:b0:c2:32:
2e:f5:b7:e6:5e:a9:59:f8:50:ec:38:42:31:04:3f:
40:2d:ee:75:c0:1e:57:7e:78:71:3d:41:d2:b3:50:
b7:12:57:6c:07:de:8a:48:3d:6f:39:66:df:8f:fe:
68:0d:99:94:24:99:4f:df:de:5d:40:59:e4:0e:77:
c1:bc:2e:86:12:d5:26:03:09:23:3d:a2:cc:d0:bb:
f8:fb:db:66:25:4e:4c:b0:b6:7d:94:49:da:ff:a1:
2c:da:10:74:30:e9:aa:93:2f:e2:20:94:79:d7:32:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8E:CB:44:F7:E3:48:BD:E0:8D:D1:98:2C:26:39:94:2E:2C:42:22
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS198510.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e0:f6:b1:27:34:ed:ef:6e:fa:73:6f:75:83:a4:3b:74:22:
a8:42:32:c0:a9:60:17:bb:e1:ef:9f:bc:b2:e7:15:1d:11:be:
d3:b5:08:29:74:92:7d:2d:ad:ad:e8:1a:40:fd:3e:24:f2:02:
9f:93:9e:80:f5:c8:eb:61:88:95:bd:32:8e:82:bf:7b:17:44:
d9:34:71:38:0d:f8:51:23:eb:09:5e:b2:08:43:a2:17:10:07:
9d:fb:4f:84:d0:a1:c3:b8:1c:2c:63:ca:f1:35:d6:e6:fa:c2:
44:d1:09:b8:42:df:48:c1:e0:5f:4c:20:17:9d:a9:fd:1c:e0:
26:8b:ad:48:54:09:95:d3:34:19:d6:4c:70:94:4c:c4:21:89:
cf:fe:61:e0:b1:89:43:52:9f:f1:2d:54:75:f7:c2:33:61:00:
8d:be:fc:31:a2:62:56:eb:d6:c8:30:fb:36:9a:5e:56:20:f1:
2d:7e:ae:ee:cc:55:9b:d8:bd:7f:9e:90:58:e8:fb:ac:af:a6:
fa:f3:8e:01:5e:cb:7b:83:45:e8:65:77:7c:b3:84:94:b4:28:
8a:f6:ae:87:35:a3:1e:fc:cd:f5:7c:f3:fc:61:74:94:16:2e:
6f:83:77:fc:b6:7d:af:04:25:7d:ec:d7:25:a3:fd:fe:ce:63:
61:dc:18:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:21 2026 by rpki-client