Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS214120.roa
File: AS214120.roa (raw, json)
Hash identifier: IZKXyB/bhhj9lUq6UDo4vwPQbKdFyEYHzLyVkuiwyHs=
Subject key identifier: C5:0B:33:61:30:22:8E:CA:DD:20:43:88:B4:56:75:DC:D6:A1:A1:19
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 7BAB99BFC8E9C4BE687101D6A9F9083C5AFE3968
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS214120.roa
Signing time: Sun 04 Oct 2026 00:51:05 +0000
ROA not before: Sun 04 Oct 2026 00:46:05 +0000
ROA not after: Sun 03 Oct 2027 00:51:05 +0000
asID: 214120
IP address blocks: 109.66.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ab:99:bf:c8:e9:c4:be:68:71:01:d6:a9:f9:08:3c:5a:fe:39:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:05 2026 GMT
Not After : Oct 3 00:51:05 2027 GMT
Subject: CN=C50B336130228ECADD204388B45675DCD6A1A119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:7a:e7:99:46:67:ce:80:ee:e1:96:bc:7d:
3a:2f:04:22:03:13:1f:e3:eb:08:fc:1e:88:97:83:
90:72:dc:26:62:72:84:c1:b4:06:ed:42:06:54:fc:
82:77:62:15:4c:05:6e:91:72:b8:7e:89:38:4d:af:
3c:c5:61:f6:4d:3b:9d:e6:59:28:f3:a0:b1:cc:45:
59:44:b8:74:67:be:d5:a3:4e:a7:07:26:a4:72:3c:
2c:25:92:52:09:b6:19:02:e5:c4:b3:98:26:f8:dd:
39:33:bb:5e:fe:e2:31:dc:91:ba:31:54:b2:a4:5f:
73:9f:fa:e6:92:f5:f5:b6:6a:60:58:5a:f8:59:2b:
d7:45:da:b0:53:1a:6f:9d:e0:c5:84:48:46:2e:3b:
84:0f:24:20:25:17:e5:71:eb:3c:59:bc:1b:68:8c:
97:17:15:3b:03:e8:6e:35:01:a4:f1:b2:6f:4a:0e:
27:39:2f:41:bd:42:7d:8a:0f:7f:ea:63:22:8f:2f:
80:17:55:b4:03:aa:99:07:0a:ae:d1:d1:ff:2d:ff:
f7:01:cf:ce:b7:a5:b0:4c:99:41:c6:b4:c9:3c:0b:
bc:b0:5e:b9:91:ca:02:ea:f5:43:c1:22:5b:f8:58:
c7:33:c3:f4:00:9c:81:9c:8f:7a:34:cf:7a:88:b3:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0B:33:61:30:22:8E:CA:DD:20:43:88:B4:56:75:DC:D6:A1:A1:19
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS214120.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.52.0/24
Signature Algorithm: sha256WithRSAEncryption
81:3f:df:98:23:f8:9e:d0:87:b9:1d:63:7f:98:43:c2:52:3f:
d9:cf:0d:cd:5b:8b:5c:1b:25:20:12:38:12:79:48:5e:3d:ec:
73:08:60:f7:87:f7:b2:6a:61:b6:5b:7d:55:3d:6f:b4:6f:e0:
3a:02:e2:65:0e:33:73:69:02:3e:66:5b:5e:1b:72:b6:17:f6:
21:c1:e5:e7:be:92:b7:44:03:23:a3:ff:c9:51:aa:b7:e1:61:
f8:c8:59:97:50:d2:f3:91:a3:3d:5e:c1:4a:87:4b:ea:5b:0c:
e8:ac:a1:72:57:67:22:6e:ce:de:3a:6e:56:5b:76:2f:11:93:
4a:9d:ab:4c:86:e5:24:f1:3b:1e:3c:68:30:bf:68:df:e9:47:
9b:e8:6b:75:44:47:19:94:40:46:a6:d5:5a:71:ac:b7:59:e8:
84:93:c7:37:da:cf:cc:e7:bb:fd:90:93:a0:98:55:33:30:dd:
04:74:7d:d0:98:03:c1:8d:d5:c2:a5:9e:2f:b8:74:b7:b7:3c:
32:ba:c1:b1:f0:68:cb:11:ba:54:02:93:ec:02:a0:92:35:4c:
93:52:92:3f:c2:ba:02:f2:9e:68:89:72:1b:52:64:f4:03:c5:
a8:0f:d8:db:91:e0:ec:49:1d:45:49:2c:c3:e3:a7:8d:a9:af:
34:70:eb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:24:14 2026 by rpki-client