Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: u+OahpyLgmlGXYs0BQGMLZUE0gTnE+OSCCQTx8lKASI=
Subject key identifier: BE:CD:89:75:76:C8:41:58:A3:F3:9B:90:DC:7F:BF:B7:24:7F:91:A3
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 592AE78098C76B8FA6CC273E3083EDF4603C7D55
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS214432.roa
Signing time: Sun 04 Oct 2026 00:51:06 +0000
ROA not before: Sun 04 Oct 2026 00:46:06 +0000
ROA not after: Sun 03 Oct 2027 00:51:06 +0000
asID: 214432
IP address blocks: 109.66.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2a:e7:80:98:c7:6b:8f:a6:cc:27:3e:30:83:ed:f4:60:3c:7d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:06 2026 GMT
Not After : Oct 3 00:51:06 2027 GMT
Subject: CN=BECD897576C84158A3F39B90DC7FBFB7247F91A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:a9:b6:15:90:6c:4b:4c:83:fb:69:77:95:
9e:80:ef:4d:37:a9:3c:b0:13:32:ed:48:d4:21:23:
97:4f:36:20:4c:f6:ac:12:e0:c3:e0:3d:2a:3c:d5:
bd:8d:38:2d:67:6c:ad:02:06:47:47:41:85:ba:30:
74:72:62:95:81:12:a4:a9:09:90:3a:13:5a:97:eb:
87:ba:a0:74:08:82:6b:14:e9:49:1f:1c:a8:73:b2:
96:62:88:45:be:bb:94:0d:97:3b:40:0f:9c:1a:59:
85:ca:04:bc:d8:72:15:3a:da:c7:84:59:f8:a1:f9:
e4:26:c5:d2:fd:41:53:1a:91:a1:53:6d:d2:da:13:
3e:9f:c7:5a:ac:42:cd:6b:85:9e:ee:a3:26:5c:87:
3d:24:0f:fe:46:32:07:2d:31:a7:6e:66:59:b3:50:
b8:e0:5f:27:df:2b:99:10:db:e6:5d:28:6e:45:0a:
ef:e3:17:6a:f8:d9:a3:71:2a:82:0b:5a:f2:1d:2e:
1f:b9:6a:94:ea:36:2e:48:63:ec:be:99:78:06:f4:
7c:3d:2c:da:c1:b1:a9:a0:0b:70:f1:a8:33:f1:e8:
2e:76:4a:98:97:30:ab:1e:ca:bf:b0:89:a8:ab:d2:
1d:ba:1e:37:39:14:f9:6b:a3:5c:51:4b:06:57:69:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CD:89:75:76:C8:41:58:A3:F3:9B:90:DC:7F:BF:B7:24:7F:91:A3
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.81.0/24
Signature Algorithm: sha256WithRSAEncryption
38:09:50:15:92:b2:90:22:08:30:a9:bc:91:55:f8:76:28:e4:
c0:f6:37:ab:cc:d5:98:a3:84:a2:3b:54:36:5c:80:27:99:77:
0b:6e:85:2a:3e:e1:b8:23:80:01:de:ee:e4:04:34:eb:d6:0b:
25:34:91:06:b8:75:8b:c3:3e:a2:0c:e7:2d:ea:64:1c:ce:35:
04:d1:9a:7f:af:a1:dd:87:3e:03:bb:bf:13:80:bd:bc:7f:20:
4b:48:9b:97:e6:8c:5a:92:e0:95:2a:4e:f4:de:75:73:6a:17:
21:12:bc:dd:b5:0f:cd:80:b0:8c:44:d3:4b:c0:9e:17:cb:b2:
c6:cc:8b:df:03:42:38:bd:cd:a1:79:2c:38:3d:2c:4a:57:3e:
bc:c1:fb:d9:b8:96:ff:aa:43:19:75:82:f5:93:78:e6:60:84:
ff:9c:84:af:00:08:8d:81:5c:a7:82:b9:36:74:70:c0:fe:7d:
ad:5e:e6:22:d9:1c:93:b6:f3:ee:b2:27:ba:d8:90:f4:63:db:
47:ef:bb:7f:6d:67:ab:b4:06:cc:5c:91:cd:3e:59:a6:85:b7:
1c:e4:49:e1:14:ec:e0:a6:04:d4:ba:49:01:e9:fd:95:26:4f:
14:5b:c1:dc:5c:41:9b:8b:7c:51:57:ea:58:99:d7:d5:31:52:
6b:fd:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:36:54 2026 by rpki-client