Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS207083.roa
File: AS207083.roa (raw, json)
Hash identifier: SLA+2/o49ri3SKLWv0rI/aaVbaospkV65y1gaokw1sQ=
Subject key identifier: 3D:07:F7:B0:79:57:D3:81:98:A4:14:2C:23:87:0E:23:23:9A:0A:97
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 57D471DD644027DDE4D70E74BBF9C1FDE397EEA3
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS207083.roa
Signing time: Sun 04 Oct 2026 00:51:02 +0000
ROA not before: Sun 04 Oct 2026 00:46:02 +0000
ROA not after: Sun 03 Oct 2027 00:51:02 +0000
asID: 207083
IP address blocks: 109.66.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:d4:71:dd:64:40:27:dd:e4:d7:0e:74:bb:f9:c1:fd:e3:97:ee:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:02 2026 GMT
Not After : Oct 3 00:51:02 2027 GMT
Subject: CN=3D07F7B07957D38198A4142C23870E23239A0A97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:a7:e1:10:6b:cc:52:51:f3:a2:16:79:97:
78:4c:4e:fc:ba:ef:1f:9c:b7:a8:b1:a0:e8:f6:ba:
92:4c:65:fe:8f:b7:f0:ec:31:0c:26:8e:0a:5d:7f:
b3:24:0b:64:e7:ea:72:b0:d3:8e:e6:db:14:24:e4:
ec:83:8b:d9:ce:04:d2:e9:2a:5c:4f:1d:03:e8:78:
96:4f:43:64:ce:1f:ee:75:72:64:97:45:22:fd:a0:
ef:24:79:b2:53:9f:ae:36:b8:4b:72:8e:65:c2:bf:
9e:c9:43:4d:96:5a:87:b6:59:ab:21:de:ed:0c:5e:
1a:c0:ee:c8:0e:b4:b3:92:57:5d:9b:49:95:3c:e1:
e2:1c:12:25:3e:47:c3:f8:7e:6e:0d:dc:bf:d2:46:
35:74:37:6e:74:03:a3:71:54:af:d7:a9:ff:c1:3c:
aa:69:39:1b:5a:8a:be:79:17:b2:32:ae:f3:e1:22:
71:ec:58:88:a7:fb:85:49:3e:f1:a0:65:25:6e:d9:
05:ed:5c:7f:ee:e6:35:ec:dc:d1:cd:8f:d5:5f:f7:
57:e5:c0:41:c6:2c:0c:5b:c3:8d:ec:72:8d:68:f9:
3a:43:fb:30:d7:0b:06:99:39:c5:0c:4c:59:50:f9:
05:47:e4:71:75:a6:a1:65:bb:b7:e9:33:e9:e0:f7:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:07:F7:B0:79:57:D3:81:98:A4:14:2C:23:87:0E:23:23:9A:0A:97
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS207083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.67.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:a0:b9:37:ae:ee:d1:01:24:14:25:11:ed:9b:88:dd:88:7d:
35:6f:48:f7:d6:8d:2a:06:7b:95:82:d4:81:a4:07:31:97:f6:
63:7e:e7:60:ea:c7:f0:24:cf:84:52:f1:01:ac:8c:2f:3e:0e:
08:3c:4a:72:39:f1:7c:ff:ab:df:23:a2:d9:db:97:f1:ab:ef:
78:8c:18:d4:a7:78:d0:4a:4b:f5:d3:a8:f9:76:ca:66:5c:57:
c3:19:a4:41:27:1a:4e:68:dc:de:7e:18:d1:42:7a:a5:ff:20:
47:86:f3:6b:35:70:08:85:45:de:75:99:75:59:c4:51:fd:e6:
1b:fa:64:07:c4:80:4a:a3:db:84:64:af:b1:cf:d9:4d:88:b7:
ba:e6:d6:25:d5:9b:4e:96:9c:c6:19:14:21:56:c5:64:db:d9:
23:c3:03:aa:0c:c1:3e:54:40:d8:10:7b:9c:75:56:24:ca:04:
02:2e:5b:97:2f:af:2c:c6:e5:55:4e:f1:80:a7:46:fb:9b:d0:
ff:f0:8e:39:06:83:12:55:68:31:3c:e0:25:93:3c:a3:ee:ac:
e8:d8:d4:8c:16:22:8e:48:58:94:6b:76:7d:93:5a:ac:17:15:
71:72:04:02:49:99:ed:41:e9:db:f5:b0:c6:e8:c5:54:ee:b4:
7d:bc:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:30 2026 by rpki-client