Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS199417.roa
File: AS199417.roa (raw, json)
Hash identifier: +b8CANq1GqdAtOSEIxG5baN2fMSk1MVRzGrhdxvfMfw=
Subject key identifier: CF:40:C2:3B:9C:DD:8E:D2:71:0B:10:4F:DB:CB:51:B0:13:10:3C:46
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 2BD53F0A71B647B083B50CA858F44A2C2FC6698D
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS199417.roa
Signing time: Sun 04 Oct 2026 12:19:02 +0000
ROA not before: Sun 04 Oct 2026 12:14:02 +0000
ROA not after: Sun 03 Oct 2027 12:19:02 +0000
asID: 199417
IP address blocks: 79.182.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d5:3f:0a:71:b6:47:b0:83:b5:0c:a8:58:f4:4a:2c:2f:c6:69:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 12:14:02 2026 GMT
Not After : Oct 3 12:19:02 2027 GMT
Subject: CN=CF40C23B9CDD8ED2710B104FDBCB51B013103C46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:2f:2e:17:45:e1:d0:06:32:89:c5:57:91:
e2:b2:cd:4a:d2:f3:f2:3a:19:2d:97:33:be:85:68:
e7:6a:cf:46:bd:b4:45:26:a6:cb:33:96:aa:92:18:
e6:19:a9:40:83:a1:cf:2a:a5:dc:60:dc:9a:02:c3:
0f:e2:d6:d2:e7:8e:24:00:1e:bd:78:1f:b4:38:d3:
46:27:af:8e:d8:5a:7a:34:f5:34:d5:6a:48:17:63:
d5:b7:59:16:f8:a1:bc:72:fc:32:e2:6d:8c:10:47:
bf:e8:86:4e:fe:88:71:48:a7:f2:5b:06:3b:85:3d:
94:22:35:91:59:0a:a1:91:aa:f3:ba:df:4d:7f:e9:
b5:fe:51:f6:26:3c:96:f1:7d:65:c2:99:48:82:9a:
17:e9:74:b4:e8:5e:57:b0:83:20:c7:07:db:4c:60:
db:f6:45:19:66:4a:6a:9a:fc:09:1b:62:bf:58:52:
e1:d7:12:4f:c2:e7:4e:e2:2e:d2:ef:ef:46:e0:c6:
7c:38:c9:e1:36:55:46:10:30:61:38:c7:48:f4:74:
1c:a4:ea:27:57:81:8a:de:d4:1c:a4:e0:75:17:ec:
56:18:e9:cf:a1:58:44:1c:b8:a0:f1:3c:15:9b:e5:
0b:d0:ae:d4:b1:0a:5b:b2:1d:2f:bb:53:8e:4a:38:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:40:C2:3B:9C:DD:8E:D2:71:0B:10:4F:DB:CB:51:B0:13:10:3C:46
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS199417.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.12.0/24
Signature Algorithm: sha256WithRSAEncryption
60:04:ac:94:03:af:d4:c8:99:1a:70:42:79:b0:25:d4:f0:b8:
cc:d0:c2:63:a0:fe:44:b0:7d:74:6f:59:e7:34:2d:ec:a5:a8:
94:7b:73:d4:99:32:25:60:c4:97:66:68:90:37:a3:68:a3:43:
f1:f4:8c:cf:63:ce:41:59:e9:ad:fe:c2:cd:bc:76:14:33:d0:
52:90:9b:69:e3:2f:ae:a6:07:db:fc:16:cb:b8:f8:e4:ee:9b:
c6:ef:8c:1d:6a:48:69:38:3e:f3:d0:56:5b:9c:6a:b7:df:6f:
57:3a:59:94:b7:17:4f:de:50:35:ff:3b:e5:cc:3e:ae:cd:d2:
37:80:57:bf:31:72:76:a5:6c:66:a9:e2:2c:98:e6:5c:a3:8a:
72:d0:25:43:fa:2c:32:88:77:78:1b:1e:2e:f9:9d:06:41:a7:
99:dc:fe:fc:a8:56:f5:62:98:99:4c:b9:85:b3:60:4c:ec:88:
e0:6f:76:a1:1e:d7:dc:b5:0e:b4:25:bb:13:60:35:a5:2b:61:
ea:e3:2a:12:78:19:c0:09:ce:06:76:e2:43:d6:ed:c9:a3:73:
79:d0:a8:d9:f3:6a:0b:bf:c8:55:6e:85:c7:9a:41:eb:59:30:
ac:61:30:61:04:be:49:b2:77:46:cf:9e:b6:1d:57:3c:b9:4f:
1c:94:d4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:32 2026 by rpki-client