Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: zu35ded+S3SneFFkX7FqdZgYUMvZtAUOyvpaF06kWbI=
Subject key identifier: D7:8B:C2:63:62:EA:07:D4:38:81:6E:FD:C0:6D:7A:D4:A5:08:77:8C
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 3E7130F719F14D1A58EDDD258383DFF692C90A00
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS214483.roa
Signing time: Sun 04 Oct 2026 00:51:05 +0000
ROA not before: Sun 04 Oct 2026 00:46:05 +0000
ROA not after: Sun 03 Oct 2027 00:51:05 +0000
asID: 214483
IP address blocks: 109.64.10.0/24 maxlen: 24
109.64.25.0/24 maxlen: 24
109.64.100.0/24 maxlen: 24
109.64.116.0/24 maxlen: 24
109.64.124.0/24 maxlen: 24
109.64.126.0/24 maxlen: 24
109.64.135.0/24 maxlen: 24
109.64.160.0/24 maxlen: 24
109.64.165.0/24 maxlen: 24
109.64.166.0/24 maxlen: 24
109.64.188.0/24 maxlen: 24
109.64.208.0/24 maxlen: 24
109.64.228.0/24 maxlen: 24
109.64.232.0/24 maxlen: 24
109.64.250.0/24 maxlen: 24
109.65.105.0/24 maxlen: 24
109.65.144.0/24 maxlen: 24
109.65.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 08:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:71:30:f7:19:f1:4d:1a:58:ed:dd:25:83:83:df:f6:92:c9:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:05 2026 GMT
Not After : Oct 3 00:51:05 2027 GMT
Subject: CN=D78BC26362EA07D438816EFDC06D7AD4A508778C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f1:41:7d:65:80:28:bb:14:0b:2c:b8:1b:be:
92:0a:b2:96:84:87:c8:4c:31:6a:10:ab:35:d4:d4:
bb:11:8a:d8:74:09:2e:52:18:56:9e:fb:0c:da:63:
9f:65:33:42:cb:6f:d9:60:75:b8:37:3c:4d:b2:bb:
5c:c5:76:ac:e9:f9:4e:ec:e3:40:e0:b4:f1:d8:71:
a5:1f:46:aa:8c:de:cf:97:65:3c:2a:f1:83:ac:d5:
8f:b7:be:f5:81:60:5d:55:88:7b:ca:b6:af:60:41:
70:bf:ed:c9:8e:ad:1a:32:03:c5:92:3f:08:91:fb:
b3:bf:87:06:30:4b:22:9d:45:c4:44:5f:7d:bc:8f:
53:64:bc:20:cb:c4:e5:28:16:f8:09:b6:ab:bb:0d:
61:31:e6:b8:82:c8:98:eb:71:23:82:1b:d9:53:e0:
7f:8d:55:51:c2:c9:82:1d:0c:83:be:0d:14:7b:81:
8d:81:91:01:71:bc:c6:ca:11:8d:66:9a:98:fd:98:
a7:14:9d:da:41:2a:a8:bf:f5:3c:92:c2:67:6b:e1:
ca:4b:d8:cc:29:c2:f3:44:c9:61:32:c6:33:d8:db:
ab:10:3a:43:df:6d:cb:1f:50:aa:8d:6f:c7:ad:95:
cc:05:3b:a8:86:ad:3b:4b:5d:61:01:b2:f6:89:af:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8B:C2:63:62:EA:07:D4:38:81:6E:FD:C0:6D:7A:D4:A5:08:77:8C
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.64.10.0/24
109.64.25.0/24
109.64.100.0/24
109.64.116.0/24
109.64.124.0/24
109.64.126.0/24
109.64.135.0/24
109.64.160.0/24
109.64.165.0-109.64.166.255
109.64.188.0/24
109.64.208.0/24
109.64.228.0/24
109.64.232.0/24
109.64.250.0/24
109.65.105.0/24
109.65.144.0/24
109.65.195.0/24
Signature Algorithm: sha256WithRSAEncryption
19:24:af:54:c4:6a:9c:76:15:f6:4c:0c:f2:92:d2:a7:cd:66:
3b:40:6e:c9:50:c9:2a:44:8f:a2:9d:ac:1b:0e:36:05:84:e8:
d1:b8:a2:6e:3d:db:83:39:48:f6:d9:e5:26:2d:bf:4a:ac:b3:
80:9c:3c:4c:43:ec:93:15:a1:a1:62:fa:12:42:0b:42:25:da:
3e:e4:db:5b:e9:a3:b8:bb:d2:e5:79:44:af:68:95:ad:e6:a3:
0e:5d:fb:1c:88:8d:aa:36:c2:b9:b3:d3:ee:b7:5c:06:fb:3f:
cd:49:38:72:24:85:4a:b0:7f:8c:4d:88:97:44:26:66:fa:62:
7c:c9:05:66:c5:29:e5:f0:96:aa:f4:5f:b1:cc:8a:12:e9:4e:
95:ec:43:75:67:0e:f3:d4:ad:fd:e8:69:a8:64:e2:42:2c:d5:
19:01:1f:65:1f:45:89:04:b3:0c:57:d2:dc:79:a2:38:b4:54:
30:f1:70:66:22:1f:07:79:56:ef:3b:91:46:6b:72:c9:2c:d5:
e1:a7:53:b8:7a:b9:55:f5:59:0f:be:bc:db:bb:c8:a3:4b:ee:
60:4d:35:e8:f3:e1:2e:0d:f9:1a:e0:ab:6b:43:7d:89:69:82:
48:c2:4a:c2:b7:b6:8b:e4:a2:96:07:77:fb:8d:66:ea:b4:5f:
3b:87:72:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:36:53 2026 by rpki-client