Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS212477.roa
File: AS212477.roa (raw, json)
Hash identifier: mbkVmINik7SaTAES2ePbs+FotI5FEI+soiNbDdsRY3s=
Subject key identifier: 8F:4F:C4:6E:A5:8C:A0:64:4C:70:AF:F8:8A:70:DE:C8:16:13:70:ED
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 61B3CB8ACBE08E0E1CCA6F148DE25ACF18CF1574
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS212477.roa
Signing time: Sun 04 Oct 2026 00:51:05 +0000
ROA not before: Sun 04 Oct 2026 00:46:05 +0000
ROA not after: Sun 03 Oct 2027 00:51:05 +0000
asID: 212477
IP address blocks: 109.64.148.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 08:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b3:cb:8a:cb:e0:8e:0e:1c:ca:6f:14:8d:e2:5a:cf:18:cf:15:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:05 2026 GMT
Not After : Oct 3 00:51:05 2027 GMT
Subject: CN=8F4FC46EA58CA0644C70AFF88A70DEC8161370ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:4c:5f:0a:f7:be:71:bd:f2:ca:b8:b0:75:
99:f7:8a:80:60:92:8f:d8:2b:e7:88:8c:35:3f:57:
1b:12:bd:d7:cf:23:8d:df:38:9b:4a:dc:fa:a1:38:
18:15:ef:66:b3:b0:68:ba:3e:71:c9:27:69:64:08:
06:97:d9:56:91:ee:13:a1:17:57:6f:d2:6e:6e:d9:
af:54:21:66:48:83:ee:7a:24:2b:fc:4d:bc:4d:7a:
ff:57:43:04:f0:43:f0:32:8d:ab:9a:72:15:6d:c0:
1e:a0:b3:60:e0:0c:47:47:f6:4c:d9:25:28:10:16:
55:cc:bf:68:44:55:ac:1c:7a:fa:d1:ff:36:6b:ed:
a4:9a:55:9e:5a:ec:99:eb:be:b5:ee:00:32:17:18:
3e:14:f8:e6:be:09:85:57:db:51:94:18:8c:0c:35:
c3:48:a8:94:10:cf:96:f2:1f:f9:d5:ee:46:f9:63:
dc:59:99:c6:4a:05:49:68:43:e2:1e:5e:07:a5:1b:
84:22:b8:50:3d:5f:f0:60:dc:2d:bd:67:e2:79:6e:
56:23:a3:06:2e:1c:ca:07:1a:ce:a7:70:e7:66:85:
c6:5b:fb:20:34:16:06:44:2d:6f:65:40:fa:b8:88:
c8:86:ea:ca:06:e2:71:2c:10:dc:f2:fd:34:a9:21:
20:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4F:C4:6E:A5:8C:A0:64:4C:70:AF:F8:8A:70:DE:C8:16:13:70:ED
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS212477.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.64.148.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:5c:38:0d:92:9d:91:d7:2d:cc:3d:26:67:4e:8c:b1:4a:f1:
6a:7f:15:f5:af:6f:6d:85:90:f9:77:c9:ab:fa:05:18:6f:03:
20:a8:b9:63:fc:29:1d:e8:9f:22:4a:d3:d6:f2:b0:0b:66:36:
a8:01:e1:2f:ca:06:28:c9:5e:e9:75:04:2b:50:de:1b:66:79:
b7:c2:52:34:23:6b:ea:c6:7c:75:0d:e1:18:9d:fb:ab:a9:e9:
5a:56:ab:e8:ae:30:33:72:51:13:7a:b3:a2:f5:5e:eb:31:55:
6f:10:71:5d:8f:14:7a:03:59:1e:cc:1c:62:7c:67:a8:ef:db:
8b:04:6d:00:a7:86:21:93:66:b1:50:03:42:2b:f1:26:67:18:
f4:9d:05:45:05:ac:1a:7d:4a:21:ad:22:e6:20:b9:57:a0:21:
7b:23:45:22:df:4f:e2:82:23:e3:75:2a:04:73:74:43:3f:d6:
96:64:af:ba:b9:98:56:eb:a0:93:88:3f:3a:a4:4b:46:38:bd:
7e:0b:fb:f7:5b:ed:e7:7d:d1:d3:8e:a3:00:75:74:ef:86:37:
b5:b5:98:fb:ab:20:17:98:6b:0e:23:07:7c:2e:80:92:f8:a9:
b6:3b:6b:df:0f:2d:dd:e1:bf:c3:5d:52:48:3f:98:b4:fa:d6:
11:1c:e1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:37 2026 by rpki-client