Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS215133.roa
File: AS215133.roa (raw, json)
Hash identifier: Kc0eN58WQA1ba2IqmHHxoJSnQYzdRFNffBFDpHM2uOU=
Subject key identifier: 8B:4D:61:7F:4B:A8:FA:66:F6:AC:6C:34:4C:71:4C:E9:AB:75:BA:EE
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 58356F0806F9786A62C655426A8EEE05FEF58CBA
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS215133.roa
Signing time: Sun 04 Oct 2026 00:52:43 +0000
ROA not before: Sun 04 Oct 2026 00:47:43 +0000
ROA not after: Sun 03 Oct 2027 00:52:43 +0000
asID: 215133
IP address blocks: 79.182.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:35:6f:08:06:f9:78:6a:62:c6:55:42:6a:8e:ee:05:fe:f5:8c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:43 2026 GMT
Not After : Oct 3 00:52:43 2027 GMT
Subject: CN=8B4D617F4BA8FA66F6AC6C344C714CE9AB75BAEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7b:0f:81:5f:a6:ce:1a:07:2e:76:c4:a2:a2:
db:f1:93:13:e0:a0:79:e9:60:93:62:63:b6:c0:8d:
ad:46:1a:65:ee:ae:b0:ce:52:49:15:a7:30:12:b4:
c8:f5:d3:9c:2d:8a:5e:0e:bb:b3:36:41:58:f0:5c:
d0:dc:87:68:54:c8:28:a4:94:ed:cc:63:05:71:21:
9c:7d:49:31:33:ad:ab:14:29:04:e2:45:a6:82:eb:
ce:f1:17:b3:8c:71:92:bd:9f:8f:70:ce:d4:1a:d4:
bb:6d:32:28:f8:bb:7c:4b:88:e0:f5:59:4c:8f:38:
49:64:8e:82:e9:ac:2b:3b:2b:5c:22:7a:52:d2:98:
89:c5:b9:b6:77:ad:b5:7d:a2:06:1f:86:a9:d7:ee:
10:cc:28:38:1e:49:9a:be:24:48:6a:fa:d1:47:66:
55:40:41:b8:30:57:2e:bc:0f:6c:f4:26:7a:d3:ea:
59:a6:0a:d5:f3:fa:89:4e:30:18:ec:74:fd:9c:fa:
f9:93:de:21:33:f7:6d:b0:9b:c8:09:f6:c1:fd:84:
8f:1c:e9:d0:34:91:c8:5d:ca:b4:38:00:df:f8:23:
94:3c:6b:02:69:94:20:fc:dc:ff:de:16:f3:bc:5e:
53:9a:12:31:4e:d4:96:98:dd:6f:15:f1:af:5f:ec:
44:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4D:61:7F:4B:A8:FA:66:F6:AC:6C:34:4C:71:4C:E9:AB:75:BA:EE
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS215133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.27.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:1e:13:58:91:3b:b5:bc:0c:38:1e:b9:ff:99:dc:64:a6:70:
90:d6:1a:8d:53:6b:48:de:e0:92:51:37:40:dc:08:9d:bc:3e:
92:c7:d4:cc:17:59:3a:b3:9e:15:d1:4b:e7:6a:09:14:4f:32:
df:60:5b:4c:9d:7b:af:d7:ef:5a:ab:a8:ce:c9:ea:b6:30:c4:
eb:37:f8:15:17:79:68:5f:0e:bf:de:a6:70:6f:75:ab:49:bc:
66:c5:75:83:35:d4:2a:db:8c:79:ce:1d:bc:7e:bc:0b:52:fb:
82:c2:82:2e:a9:76:c7:cd:0b:9e:1e:8a:cf:c0:43:bb:4f:f8:
36:d4:44:5a:3e:07:e7:97:e5:32:be:c0:06:c7:93:4a:fe:29:
e9:47:6f:2a:5b:d7:14:26:7a:29:89:17:46:e8:ab:a8:57:d1:
97:c9:c4:0b:f6:50:e5:7e:be:88:66:1f:8f:cd:dc:d3:1f:01:
44:a7:4e:cd:78:78:af:9a:d7:ca:ef:47:d6:01:73:2e:0c:71:
57:48:fb:1e:fd:d9:c2:b7:91:82:0a:e3:0b:1c:b3:03:37:f6:
e0:19:54:93:98:03:30:72:e0:cb:78:ad:3e:34:51:a7:ba:d1:
b7:03:c5:c7:05:64:bd:f3:50:6d:00:56:73:37:f0:9c:51:01:
2e:5a:e7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:40 2026 by rpki-client