Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS211440.roa
File: AS211440.roa (raw, json)
Hash identifier: 0gka6pF7oq1vpmB4hHmBoVBCvWcVtTm/tmD7a6fZM0I=
Subject key identifier: FA:18:BE:33:19:06:90:EB:2A:A6:29:40:97:8A:A0:39:BD:6B:BF:BB
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 36B5ADAC9E5680104DA088B77E1BF60DA2CC986D
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS211440.roa
Signing time: Sun 04 Oct 2026 00:52:44 +0000
ROA not before: Sun 04 Oct 2026 00:47:44 +0000
ROA not after: Sun 03 Oct 2027 00:52:44 +0000
asID: 211440
IP address blocks: 79.182.0.0/24 maxlen: 24
79.182.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b5:ad:ac:9e:56:80:10:4d:a0:88:b7:7e:1b:f6:0d:a2:cc:98:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:44 2026 GMT
Not After : Oct 3 00:52:44 2027 GMT
Subject: CN=FA18BE33190690EB2AA62940978AA039BD6BBFBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:01:cf:33:5e:d4:71:5d:2f:4f:13:38:aa:
47:2c:56:62:93:0c:d2:88:ad:2a:24:4a:64:dd:ca:
20:7d:bd:c4:98:18:f3:15:93:ef:b4:52:8d:20:a1:
d0:e5:63:ba:8c:7f:b3:96:61:68:b6:c0:e4:5b:ba:
90:6c:d0:09:13:d4:af:51:e8:75:d3:a3:1d:cd:ad:
01:99:4e:11:2b:06:69:ad:10:45:90:ed:30:99:37:
08:fe:b2:0e:57:29:41:61:06:15:55:31:a3:5b:58:
ad:fc:ce:38:39:85:d1:a5:73:21:7e:c4:9e:55:69:
8e:95:ed:31:fc:fe:ba:84:1e:1f:21:1d:b4:d1:55:
fc:1b:1c:25:e1:77:8c:7b:df:db:26:e4:01:e4:26:
81:e3:37:71:65:ac:d0:72:b6:ac:08:99:3b:a2:df:
55:f6:3b:5f:59:78:8a:7d:8f:45:9c:01:8f:70:f0:
01:bb:a2:93:c0:20:ee:34:ac:3a:ef:ca:e1:08:14:
62:69:23:85:69:08:2b:34:c6:38:b8:3b:22:86:95:
aa:8d:1f:06:9a:1c:90:a2:36:b1:cc:79:ce:83:da:
f3:5e:7d:ac:eb:15:f2:70:22:b3:66:22:65:93:88:
70:1a:f0:29:a1:1a:60:6e:88:8d:a9:9e:3b:ad:c4:
4e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:18:BE:33:19:06:90:EB:2A:A6:29:40:97:8A:A0:39:BD:6B:BF:BB
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS211440.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.0.0/24
79.182.30.0/24
Signature Algorithm: sha256WithRSAEncryption
41:80:2d:7a:84:14:75:47:b8:64:af:89:da:c0:74:7e:71:7a:
59:d0:07:ca:46:eb:b7:06:19:63:29:8a:87:47:74:3e:9e:00:
f4:29:3f:1c:29:ae:71:e2:28:cc:25:62:5f:7b:47:54:ca:ba:
b7:96:32:f4:5e:69:c1:e4:95:85:e9:d3:f6:2d:f3:5d:de:19:
0a:18:fc:d9:75:36:e5:32:1f:58:b9:21:cd:6f:2d:60:2a:d3:
a3:77:92:14:39:32:bb:b5:fd:37:b9:1c:e0:88:64:b9:e3:a6:
49:75:60:3a:3f:91:7f:39:d5:aa:e7:17:ed:fe:81:ab:c9:07:
18:f9:2b:ff:20:59:59:ba:ef:51:40:cb:5e:c4:08:21:89:ae:
ea:c2:a2:92:9a:e2:24:bd:f3:13:7b:e5:dd:94:00:26:a5:f0:
8f:39:ae:64:32:e4:21:27:a9:50:ab:22:6d:0f:25:c2:14:2b:
7a:61:8f:ed:02:89:e7:e3:51:17:22:d5:c7:fa:3a:06:fc:d0:
fa:f1:a9:01:00:17:d6:ee:da:44:2b:ff:ae:a8:88:0c:01:68:
e8:1d:6a:2b:31:b5:c6:d4:77:e9:01:50:1f:1a:7a:96:28:d7:
6d:0c:39:ed:78:0c:b1:8e:cd:94:35:13:ee:49:a0:a7:71:ee:
d5:a5:4d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:21 2026 by rpki-client