Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS215817.roa
File: AS215817.roa (raw, json)
Hash identifier: MOUN8gm2iwNAy8gJWKlS9HYxW5IHolZHKjbJyn9cPqI=
Subject key identifier: F8:C0:0E:CA:EB:86:73:75:21:C9:35:D6:D7:1A:4A:0F:4B:0E:AB:89
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 2DF784E5E842BDF89E37CDB2C9D644E5D889B466
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS215817.roa
Signing time: Sun 04 Oct 2026 00:52:44 +0000
ROA not before: Sun 04 Oct 2026 00:47:44 +0000
ROA not after: Sun 03 Oct 2027 00:52:44 +0000
asID: 215817
IP address blocks: 79.183.1.0/24 maxlen: 24
79.183.4.0/24 maxlen: 24
79.183.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 08:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f7:84:e5:e8:42:bd:f8:9e:37:cd:b2:c9:d6:44:e5:d8:89:b4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:44 2026 GMT
Not After : Oct 3 00:52:44 2027 GMT
Subject: CN=F8C00ECAEB86737521C935D6D71A4A0F4B0EAB89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:6c:c8:e0:d4:7a:d7:6c:e7:d3:50:7a:75:
78:7b:9e:6c:85:8e:7d:02:d9:d7:cb:99:16:f1:f9:
aa:3a:ea:fa:38:63:8c:5d:ab:6a:c6:32:e3:28:b3:
f5:01:43:d2:4f:d8:65:a0:9b:53:f3:6d:6f:c6:da:
b3:e6:14:85:91:a9:71:fd:69:d9:fe:57:c8:80:a1:
40:9c:31:4a:d2:cc:9d:d3:02:4a:fa:87:93:15:49:
d7:ea:39:0d:2f:31:5e:cd:b2:33:ac:82:0d:87:ae:
56:cc:89:0f:26:77:9e:e6:6c:28:99:6a:43:66:e5:
88:e8:1c:c0:bc:49:a6:5e:8b:4f:31:5c:2e:5b:47:
8c:21:c2:26:b8:9c:79:35:d4:fc:8c:04:4b:de:30:
6d:85:2e:ed:3f:3b:79:1f:0a:0d:4d:18:55:3d:22:
1a:0e:f6:a4:ec:45:83:5f:d0:a7:c7:48:f6:e6:2b:
8f:48:ce:dc:28:1d:1d:d8:2f:f9:c8:f0:3f:03:68:
0f:89:4b:96:65:3f:58:71:28:4a:db:3b:2f:d7:82:
1b:b9:25:b7:ad:fd:eb:6b:4b:8e:50:18:4d:d8:2d:
d6:fd:49:a9:23:32:94:70:1f:d3:90:18:30:8e:8d:
b7:1e:ab:5e:40:6d:07:20:1f:e3:dd:38:db:a0:11:
7f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C0:0E:CA:EB:86:73:75:21:C9:35:D6:D7:1A:4A:0F:4B:0E:AB:89
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS215817.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.183.1.0/24
79.183.4.0/24
79.183.118.0/24
Signature Algorithm: sha256WithRSAEncryption
89:15:5d:f3:5c:35:c1:d9:71:29:88:0c:35:cd:d5:a4:b1:31:
15:76:d6:8e:84:f0:c7:c0:c3:80:d8:5a:77:c4:cf:61:79:3e:
02:6d:6b:90:3d:6e:c9:cb:cb:2b:fb:17:84:d7:57:2e:11:d8:
7d:6d:c3:9e:d9:49:71:f2:ad:c0:94:0b:cf:89:bb:76:0a:b3:
a5:1f:27:b1:49:3f:4a:cf:0e:0a:48:da:29:76:98:cb:2b:26:
b0:ef:b4:74:d8:54:e5:b5:8a:91:05:50:ba:b6:b7:68:86:07:
21:69:89:83:29:05:f4:f4:5b:de:2d:73:70:ac:69:c2:a9:9d:
bf:c4:76:e9:e5:2d:a4:d2:c3:a6:5f:11:57:b8:2b:93:0f:f6:
04:8f:7d:a4:0b:b5:64:ce:be:cb:4b:12:0a:ed:99:a4:e3:a0:
77:32:a3:ea:b7:f8:2a:94:17:af:18:fa:ed:32:11:54:a6:c9:
f6:fc:14:82:45:45:92:76:08:02:09:7b:57:47:7a:61:ee:96:
22:d3:8b:08:7b:0f:59:c4:dd:44:30:e2:cf:76:02:38:62:b0:
42:52:9f:68:fb:45:87:eb:cc:9b:77:ac:bd:5d:17:c9:fc:79:
8b:90:81:16:77:82:19:b1:22:7c:1a:06:52:a7:96:4c:d0:68:
44:78:4f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:08 2026 by rpki-client