Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS215283.roa
File: AS215283.roa (raw, json)
Hash identifier: gn4GwcjBPM95Kb6igpQ6bZ4SvQ42wv5/BCegZSmZRXo=
Subject key identifier: 89:9A:48:67:AF:8B:DC:97:D9:AC:88:33:6E:C6:8D:0C:7C:6F:D0:FC
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 44FA3DA9BD25712561EA38A1B08A2EA6C1BE4E7A
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS215283.roa
Signing time: Sun 04 Oct 2026 00:51:06 +0000
ROA not before: Sun 04 Oct 2026 00:46:06 +0000
ROA not after: Sun 03 Oct 2027 00:51:06 +0000
asID: 215283
IP address blocks: 109.66.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:fa:3d:a9:bd:25:71:25:61:ea:38:a1:b0:8a:2e:a6:c1:be:4e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:06 2026 GMT
Not After : Oct 3 00:51:06 2027 GMT
Subject: CN=899A4867AF8BDC97D9AC88336EC68D0C7C6FD0FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:80:bb:9e:c0:bd:3c:4e:ee:a1:5f:9d:07:
61:20:72:60:2e:43:8a:20:56:06:79:22:b9:b6:49:
14:0f:4f:f2:12:d7:cd:3f:2b:4d:31:95:c2:db:e4:
f6:11:06:c0:ad:78:83:59:8e:97:f2:50:b0:71:0c:
9f:ce:36:9b:44:a5:97:92:75:5a:ce:00:e4:58:e0:
48:07:f0:2c:44:e6:e2:0b:20:6d:aa:e3:12:26:b8:
b6:5f:a2:73:0b:0a:dc:0e:e3:c3:33:cd:b4:c6:ed:
c1:76:e8:cf:a3:eb:28:96:25:03:43:f0:0c:fe:73:
5c:4c:fa:e9:a9:fc:be:36:ed:10:5e:36:dd:62:b2:
f3:e0:a9:47:10:56:1a:65:72:e3:de:e9:d3:be:fe:
25:72:1b:a0:7b:54:1e:37:61:2f:dd:b1:c0:98:23:
95:f6:ce:3e:b7:b6:3c:bc:06:c0:aa:18:df:3d:1f:
d4:b0:9b:f0:c8:05:d3:4a:3c:7e:12:0f:99:f3:fd:
0f:a5:5e:01:53:08:47:3a:4d:e5:81:c6:29:d1:5d:
73:13:aa:57:e9:61:18:60:c7:3e:cb:1f:9e:08:f9:
28:ce:d2:90:3f:e9:90:9f:e3:65:62:de:f8:b6:4a:
b8:1e:b4:19:13:28:d3:c8:0f:61:39:d0:d6:8d:4b:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9A:48:67:AF:8B:DC:97:D9:AC:88:33:6E:C6:8D:0C:7C:6F:D0:FC
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS215283.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.146.0/23
Signature Algorithm: sha256WithRSAEncryption
38:b1:a6:f8:c8:14:f8:07:27:ca:4e:dd:47:b2:f1:84:a6:df:
e3:20:06:90:2e:c8:85:99:13:30:23:8b:47:da:96:ce:32:76:
50:d3:2b:ae:e7:54:12:40:d3:eb:87:27:af:2c:b6:c3:8c:2c:
ae:8c:c9:ff:d0:3a:00:bc:ce:1e:57:1c:cb:7b:c7:9b:bb:6c:
91:f8:fb:04:e9:0b:e5:33:23:98:ec:46:2c:59:1c:94:53:a0:
2c:3d:c7:55:a3:90:6d:4e:cd:0f:c3:ff:d0:5c:96:59:ba:aa:
ff:c1:91:a2:d0:59:81:36:06:4e:72:2e:fb:12:bc:35:c3:08:
5a:26:4e:b1:5c:d3:f4:9d:27:f8:9f:a0:82:6b:ed:b0:67:fb:
52:57:ac:76:dd:80:bd:58:84:35:a9:e7:83:ef:b7:b3:04:43:
cc:e6:f2:c5:61:54:70:74:78:28:9e:1c:31:e1:78:c0:34:79:
c6:d9:30:b5:a2:ad:45:9f:ff:60:ff:bd:e9:9d:3e:c0:03:f6:
7f:a3:f2:c2:1d:cf:4b:0e:3c:ab:21:87:54:49:fa:cb:01:12:
59:1e:f3:f8:cc:7a:f1:06:e3:be:79:b7:5e:dc:28:6a:1a:e8:
97:4f:2d:b0:54:1f:45:b0:c6:96:0c:6e:c3:54:2d:e7:30:d3:
d5:3d:cf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:49:08 2026 by rpki-client