Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: xAxwhlJ7uiQhwHU2HsVr9SpxL1fL3Ts4uSwNjaftaI4=
Subject key identifier: 1D:7C:FE:61:F7:14:B6:F9:95:96:09:86:8F:84:AE:E2:AC:05:49:3B
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 451AF055924E0697B3E7745FE197D5179BE33F85
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS215294.roa
Signing time: Mon 05 Oct 2026 08:44:25 +0000
ROA not before: Mon 05 Oct 2026 08:39:25 +0000
ROA not after: Mon 04 Oct 2027 08:44:25 +0000
asID: 215294
IP address blocks: 79.176.65.0/24 maxlen: 24
79.176.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 10:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:1a:f0:55:92:4e:06:97:b3:e7:74:5f:e1:97:d5:17:9b:e3:3f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:39:25 2026 GMT
Not After : Oct 4 08:44:25 2027 GMT
Subject: CN=1D7CFE61F714B6F9959609868F84AEE2AC05493B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:b9:0f:cd:99:28:88:e5:68:f3:e8:62:94:
df:56:4f:91:dc:e3:0b:65:39:07:fc:5b:b1:44:48:
aa:5c:57:60:a7:59:2f:36:69:0c:6b:73:3c:c0:fd:
92:4f:49:8d:68:2a:97:58:54:75:4b:5c:4b:60:43:
87:a0:57:f6:d8:55:fd:d9:5c:9c:9c:ee:d1:80:c8:
7f:1f:90:95:26:5d:a0:27:02:79:d1:9d:54:94:bf:
e1:0c:20:7d:ee:58:50:8a:bf:49:59:cd:95:92:88:
37:4c:9e:a3:d7:9d:31:c8:f9:9d:0a:ad:85:f7:25:
e5:51:54:ff:d3:a1:9e:3b:14:ee:51:60:b3:7b:4f:
cb:59:2f:69:c7:c6:17:34:8a:a4:1f:4a:4a:0b:9f:
8e:0f:b1:58:9e:09:e6:cf:79:60:96:9c:13:63:12:
95:53:c4:79:ce:d6:97:a3:82:23:ae:e3:09:e5:fb:
32:ea:ba:37:1e:6d:9b:86:ad:98:03:58:79:06:3c:
14:9b:ab:55:2a:c8:fc:97:7e:76:ff:47:b2:2f:c5:
9d:5f:a9:50:2e:ba:24:c5:01:5f:fe:01:f7:40:8b:
e4:75:44:b1:fe:d8:2b:b3:10:e0:2b:21:06:d3:2e:
f4:fe:54:d6:82:a8:20:09:58:39:28:15:8f:5b:db:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7C:FE:61:F7:14:B6:F9:95:96:09:86:8F:84:AE:E2:AC:05:49:3B
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.65.0/24
79.176.205.0/24
Signature Algorithm: sha256WithRSAEncryption
28:25:3f:80:c7:21:45:94:f9:60:32:e2:4e:55:9d:76:c7:cd:
e6:e0:69:1b:3b:e3:8a:e7:da:a8:24:67:3a:85:bf:bd:ef:48:
99:11:4d:d1:c5:25:45:bf:67:df:c7:fb:2e:dc:08:b7:46:52:
e2:ee:9f:70:5e:2c:bc:00:30:0f:cd:c5:92:2a:26:98:51:73:
97:4d:38:30:a2:45:d1:ea:aa:23:ee:1a:80:68:ee:10:00:fa:
84:77:0c:16:e0:0b:ec:8d:c4:97:7e:f6:3a:c8:11:bb:3c:90:
b8:bd:ca:39:09:3a:a7:1b:23:3f:52:46:8f:ba:e2:61:27:27:
68:9c:9f:6e:dd:3f:11:9f:e1:36:8b:11:9d:0b:79:77:ba:39:
8c:20:87:09:72:3b:70:68:a2:a8:2a:c0:7f:7c:f5:2f:3d:5d:
1d:35:e7:eb:7d:21:c9:2b:0e:3d:1d:d3:89:62:88:fb:15:f2:
81:29:78:4a:ff:f0:3f:69:a4:f1:f4:a7:fb:db:fe:4f:9d:c1:
87:f3:0e:72:e9:8f:d8:be:67:5a:40:f2:32:25:a2:f0:44:fd:
6a:d9:40:d6:f7:90:6a:52:68:c8:81:f5:95:a7:b3:e9:6b:56:
b8:05:2d:02:b6:00:fe:9b:32:72:ce:9b:be:43:9b:69:34:33:
c7:20:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:03 2026 by rpki-client