Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS205960.roa
File:                     AS205960.roa (raw, json)
Hash identifier:          ElokKA+YG30nBScy8lCR7LF+4NIvff+WmhZfuG1QuPI=
Subject key identifier:   0D:EE:FB:5F:0E:95:23:E6:49:1B:5A:19:82:E6:EF:BB:D3:74:DC:8B
Certificate issuer:       /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial:       67B328F29961F92E74F2287988459CC2AAF1D129
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS205960.roa
Signing time:             Sun 04 Oct 2026 00:52:44 +0000
ROA not before:           Sun 04 Oct 2026 00:47:44 +0000
ROA not after:            Sun 03 Oct 2027 00:52:44 +0000
asID:                     205960
IP address blocks:        79.183.58.0/24 maxlen: 24
                          79.183.66.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 05 Oct 2026 08:44:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b3:28:f2:99:61:f9:2e:74:f2:28:79:88:45:9c:c2:aa:f1:d1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
        Validity
            Not Before: Oct  4 00:47:44 2026 GMT
            Not After : Oct  3 00:52:44 2027 GMT
        Subject: CN=0DEEFB5F0E9523E6491B5A1982E6EFBBD374DC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:e4:df:fc:4f:da:3c:ef:39:a7:ba:73:a2:
                    eb:7f:6d:10:f7:3a:6b:6d:7f:2d:43:8d:77:c8:0a:
                    eb:f7:01:2a:95:37:36:66:83:77:ba:ab:d1:43:3c:
                    b8:b3:3a:63:fc:ac:39:d3:11:20:8d:14:b4:64:28:
                    35:4c:86:62:49:61:27:7b:ae:7c:09:da:dd:b6:de:
                    d2:8f:0d:29:9c:62:9f:c6:c4:fd:f7:59:7b:a6:88:
                    ed:1c:2a:74:1c:7c:0e:e7:d6:d0:99:d7:d2:ad:a0:
                    7b:8c:77:ba:e0:ba:b0:22:1f:33:b8:d3:9d:8b:f1:
                    d3:12:84:12:ca:e2:ba:b5:be:f6:1d:d1:37:d4:49:
                    9b:62:f7:4d:5b:18:77:82:2a:38:81:6d:4a:54:d5:
                    8a:82:8a:86:d5:01:0c:f7:31:2b:a5:be:25:78:bf:
                    89:59:45:08:81:e1:54:43:98:3b:db:32:a2:8b:71:
                    06:84:97:6c:3b:37:41:f1:a9:e8:1a:04:c9:88:c2:
                    74:02:35:f8:64:ca:11:66:47:b9:6d:62:95:55:8a:
                    e9:60:a4:07:f9:2d:e4:e4:e2:d4:2e:fc:ae:d6:cf:
                    1a:68:4d:9e:b0:64:91:c4:44:1c:44:0a:7d:35:86:
                    ae:14:d6:a9:a2:eb:8b:b6:bc:ef:e1:79:7e:f1:ca:
                    81:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EE:FB:5F:0E:95:23:E6:49:1B:5A:19:82:E6:EF:BB:D3:74:DC:8B
            X509v3 Authority Key Identifier:
                keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS205960.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.183.58.0/24
                  79.183.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:65:54:a1:c2:62:cf:da:eb:c6:0a:32:80:ce:f8:e0:6e:43:
         ad:80:17:93:5e:fa:30:e4:4c:c8:cc:ab:6f:e4:a4:ab:2d:90:
         b2:6b:a0:a2:d8:ca:15:55:1f:10:b6:2c:f2:6c:f4:28:18:3f:
         f2:9a:f6:af:ec:44:a9:40:f9:f5:4c:78:1f:6f:0e:66:cc:45:
         48:ea:dc:e9:17:c1:d0:e8:1e:1f:41:54:ce:97:3f:70:1f:9b:
         be:ed:e6:6e:ae:92:76:a2:79:87:5d:65:69:45:62:87:b5:89:
         f6:ef:4e:43:14:db:15:2c:ae:68:92:d6:ea:97:1b:b1:cd:1f:
         b0:9f:e4:63:be:28:93:d9:f2:60:20:71:c4:25:b3:78:53:a9:
         87:52:06:78:e0:3b:c9:94:6e:cc:d3:ec:0a:2c:b7:2d:a3:13:
         87:59:16:f0:d2:cc:34:2e:3a:1a:d3:c5:39:47:ea:17:02:2e:
         9c:14:b3:6c:4e:65:ea:f4:25:31:f1:7d:93:4b:60:da:53:d3:
         0d:41:53:dc:99:13:ae:be:d1:3e:38:47:c4:20:9e:6d:d1:a3:
         0c:9e:a0:b0:82:f6:76:92:83:15:19:47:00:d5:d5:79:dd:12:
         6a:33:d4:ca:20:cd:17:aa:df:a2:46:81:17:b9:07:71:66:1f:
         7a:98:f6:fe
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUZ7Mo8plh+S508ih5iEWcwqrx0SkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWYwMjNmZGMyYmJhMjgzNTEzYzZhNTg3ZjkwNzc3MGIy
NmVmZjU2OTAeFw0yNjEwMDQwMDQ3NDRaFw0yNzEwMDMwMDUyNDRaMDMxMTAvBgNV
BAMTKDBERUVGQjVGMEU5NTIzRTY0OTFCNUExOTgyRTZFRkJCRDM3NERDOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/guTf/E/aPO85p7pzout/bRD3
Omttfy1DjXfICuv3ASqVNzZmg3e6q9FDPLizOmP8rDnTESCNFLRkKDVMhmJJYSd7
rnwJ2t223tKPDSmcYp/GxP33WXumiO0cKnQcfA7n1tCZ19KtoHuMd7rgurAiHzO4
052L8dMShBLK4rq1vvYd0TfUSZti901bGHeCKjiBbUpU1YqCiobVAQz3MSulviV4
v4lZRQiB4VRDmDvbMqKLcQaEl2w7N0HxqegaBMmIwnQCNfhkyhFmR7ltYpVViulg
pAf5LeTk4tQu/K7WzxpoTZ6wZJHERBxECn01hq4U1qmi64u2vO/heX7xyoH5AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUDe77Xw6VI+ZJG1oZgubvu9N03IswHwYDVR0j
BBgwFoAU7wI/3Cu6KDUTxqWH+Qd3Cybv9WkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDk2ZjIwYTQtMjYwZi00MGZhLWEzODktZDZjYWQyZGMw
ZmJkLzAvRUYwMjNGREMyQkJBMjgzNTEzQzZBNTg3RjkwNzc3MEIyNkVGRjU2OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzd3SV8zQ3U2S0RVVHhxV0gtUWQzQ3li
djlXay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ5NmYyMGE0LTI2MGYt
NDBmYS1hMzg5LWQ2Y2FkMmRjMGZiZC8wL0FTMjA1OTYwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT7c6
AwQAT7dCMA0GCSqGSIb3DQEBCwUAA4IBAQARZVShwmLP2uvGCjKAzvjgbkOtgBeT
Xvow5EzIzKtv5KSrLZCya6Ci2MoVVR8QtizybPQoGD/ymvav7ESpQPn1THgfbw5m
zEVI6tzpF8HQ6B4fQVTOlz9wH5u+7eZurpJ2onmHXWVpRWKHtYn2705DFNsVLK5o
ktbqlxuxzR+wn+RjviiT2fJgIHHEJbN4U6mHUgZ44DvJlG7M0+wKLLctoxOHWRbw
0sw0Ljoa08U5R+oXAi6cFLNsTmXq9CUx8X2TS2DaU9MNQVPcmROuvtE+OEfEIJ5t
0aMMnqCwgvZ2koMVGUcA1dV53RJqM9TKIM0Xqt+iRoEXuQdxZh96mPb+
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:10 2026 by rpki-client