Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS198566.roa
File: AS198566.roa (raw, json)
Hash identifier: o0I2n54+QCH7XQqQorp4ODozSlFWAWndUzKMHWoT4xw=
Subject key identifier: 30:CF:84:CD:34:E2:BF:48:54:9C:DF:43:C2:91:DF:4A:71:53:40:EE
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 29B73C664E6E0D879DC0917ED1AC5F9F25B44694
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS198566.roa
Signing time: Mon 05 Oct 2026 08:44:25 +0000
ROA not before: Mon 05 Oct 2026 08:39:25 +0000
ROA not after: Mon 04 Oct 2027 08:44:25 +0000
asID: 198566
IP address blocks: 79.182.68.0/24 maxlen: 24
79.182.237.0/24 maxlen: 24
109.66.36.0/24 maxlen: 24
109.66.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b7:3c:66:4e:6e:0d:87:9d:c0:91:7e:d1:ac:5f:9f:25:b4:46:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:39:25 2026 GMT
Not After : Oct 4 08:44:25 2027 GMT
Subject: CN=30CF84CD34E2BF48549CDF43C291DF4A715340EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:26:c5:17:71:e2:52:e2:e7:76:8f:ad:35:
5f:87:57:b4:d8:1e:ab:e2:8d:cf:d8:e9:6f:09:02:
7f:b3:5b:d0:56:a7:9d:70:77:4e:cf:1c:43:ee:f4:
e6:f5:76:17:ef:6f:45:5c:8f:72:58:8c:ab:4b:6d:
67:5c:0a:7f:60:c4:55:76:6a:c5:46:cb:2b:dd:50:
90:98:b0:fd:44:81:99:9e:85:79:b4:ee:9a:29:a1:
7b:83:da:b4:5c:3e:90:60:99:32:9b:17:ff:d7:e3:
8e:0c:4e:f7:6a:d5:12:a0:2d:51:e2:cd:f7:31:98:
c7:0f:fe:44:cd:0d:b1:47:8a:fa:36:1f:b9:fa:f8:
46:ba:c3:52:1c:ec:aa:57:6e:f3:66:1b:10:76:d1:
81:bb:e9:42:ba:a7:c7:19:52:cd:71:1d:3a:57:3a:
3d:70:61:a3:9c:25:3c:65:ee:ae:b7:6d:f0:7b:e1:
84:5c:af:30:3d:29:26:c0:51:60:53:f5:12:24:17:
48:7a:a4:48:d3:b5:5c:b4:01:f2:45:0e:1f:be:70:
86:ae:b9:39:d2:62:52:ad:3a:1d:4b:b1:ff:2d:fb:
c8:b3:98:87:2a:51:66:16:f6:9e:1a:36:07:62:ae:
c5:4a:00:d3:30:e9:b1:83:4d:a9:30:e8:ef:19:a3:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CF:84:CD:34:E2:BF:48:54:9C:DF:43:C2:91:DF:4A:71:53:40:EE
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS198566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.68.0/24
79.182.237.0/24
109.66.36.0/24
109.66.206.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:c6:f9:08:a9:5a:fc:6b:4f:cb:15:4f:4e:13:c7:da:be:76:
71:2e:84:2d:44:e4:7b:b5:3c:a0:7c:59:ab:ad:dd:3b:62:00:
f5:74:10:be:af:9d:54:4a:ea:1a:94:40:f9:82:ac:22:74:44:
bc:cb:b7:22:d4:84:5a:5a:59:2f:f7:df:a8:13:5e:01:d4:ce:
74:c6:cc:6e:f6:6c:4d:f7:63:c8:29:1e:8c:eb:14:fc:7f:31:
e2:bf:63:2c:c6:84:20:6d:f6:e5:19:e6:a2:b2:42:ff:21:ce:
96:9b:69:01:d4:57:65:b1:89:aa:c1:05:00:c2:be:86:99:26:
72:c9:07:d7:70:61:a4:43:bf:7d:3f:50:f5:f4:16:6f:b8:7b:
7e:ec:8a:23:f5:f1:8f:7a:4e:19:5e:a9:6e:8f:08:01:32:b3:
fc:59:a1:eb:4a:85:a8:9c:33:0b:84:c0:42:8f:78:9b:11:39:
50:c0:c8:93:37:06:8e:89:8d:37:c7:17:d8:90:d4:9e:c3:91:
2a:61:54:3a:7a:57:37:86:26:c2:d0:76:f7:5f:37:19:10:ac:
29:fa:99:cd:cb:c6:43:e9:f7:1a:82:e3:2e:0b:82:55:75:5d:
9d:2f:cc:3a:f6:81:9d:9c:28:6f:6c:e7:fb:f6:4c:9f:26:9d:
e3:5e:54:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:21 2026 by rpki-client