Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS218797.roa
File: AS218797.roa (raw, json)
Hash identifier: /9t15Z6sIxy5eI06Ot35jNf4T7NWtsDKy+GBNfbaUvs=
Subject key identifier: CB:58:C3:03:CA:94:12:41:6D:B2:4B:D7:9D:66:C5:21:E1:4A:06:F0
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 156913D84B9E906CFCCDE5F0B9D11DEE38570618
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS218797.roa
Signing time: Sun 04 Oct 2026 00:51:03 +0000
ROA not before: Sun 04 Oct 2026 00:46:03 +0000
ROA not after: Sun 03 Oct 2027 00:51:03 +0000
asID: 218797
IP address blocks: 109.66.28.0/24 maxlen: 24
109.66.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:69:13:d8:4b:9e:90:6c:fc:cd:e5:f0:b9:d1:1d:ee:38:57:06:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:03 2026 GMT
Not After : Oct 3 00:51:03 2027 GMT
Subject: CN=CB58C303CA9412416DB24BD79D66C521E14A06F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:6c:7a:fd:42:50:75:9d:56:3a:02:7a:1e:
eb:f0:f0:af:7f:86:7d:f3:0a:be:26:bd:f7:b0:dd:
4d:28:f4:a2:98:9b:a6:d1:80:51:90:ee:e8:53:70:
aa:d1:ff:b7:83:63:5d:4d:c4:5a:68:65:8f:2c:5a:
c9:18:33:f2:b5:36:ee:8a:76:d2:7b:c9:df:ee:fc:
7c:12:6b:0e:a1:a8:00:57:53:15:7b:44:6b:b2:3a:
c3:8c:fb:13:ab:9b:8f:80:b7:cf:da:dd:7e:1b:71:
76:04:1a:d1:3c:78:3c:a9:f6:60:2a:c5:b5:07:ce:
26:a6:07:4a:9d:4d:c6:e0:42:25:c9:67:f3:29:2c:
af:a3:72:78:c2:c4:ac:da:67:89:a2:8f:55:4e:04:
c4:df:79:93:7d:e2:82:e0:f9:3d:03:14:f8:ab:7a:
2a:79:3a:51:56:5f:cf:ae:17:ae:38:03:26:74:45:
22:03:05:e1:24:aa:47:9f:c1:b3:cc:9f:1a:70:f5:
be:6e:6c:fc:15:c4:13:4c:f1:f7:31:54:84:4a:a6:
58:ec:a4:d5:f8:01:09:43:f2:81:1c:d1:53:75:28:
5b:ca:3a:2c:9e:21:06:f6:41:cb:91:8b:78:e8:89:
de:f5:f5:8b:03:54:1f:25:19:58:94:95:f1:bb:92:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:58:C3:03:CA:94:12:41:6D:B2:4B:D7:9D:66:C5:21:E1:4A:06:F0
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS218797.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.28.0/23
Signature Algorithm: sha256WithRSAEncryption
02:46:d0:13:5f:ce:ae:c2:d6:9e:f7:56:b7:cc:ea:77:9f:f7:
76:78:82:eb:c0:6e:18:f9:e9:1c:fd:ee:77:d2:41:17:27:fc:
70:a9:3b:c1:a7:52:ef:00:e6:43:4c:d1:8b:e8:df:f9:3f:76:
e7:7b:70:8a:76:4f:c7:66:45:23:f2:2f:17:64:71:09:f8:8e:
1a:43:bd:61:f5:ab:c8:80:e5:77:f8:be:d4:3d:73:2b:4a:72:
2b:e9:01:e4:45:c1:b4:91:9c:b1:48:fe:66:24:e6:d0:0d:80:
7c:7c:23:c7:36:e2:e6:cc:17:09:e0:2a:aa:3b:59:41:4f:f6:
0b:40:44:fc:ed:94:08:0d:90:2b:35:f4:57:1b:91:d3:8e:ad:
e9:0b:d7:dd:80:92:d8:2d:53:5c:bd:5d:5b:37:d3:cb:09:55:
bc:a0:24:5a:23:8e:b4:5f:69:09:98:d4:0f:af:eb:30:64:ce:
c8:d9:85:56:c6:bf:b7:05:6f:9e:16:0f:e4:b0:7b:81:35:80:
62:6e:49:bf:b3:d9:81:ba:7e:bd:54:dd:8d:43:29:88:0d:80:
bc:3f:65:13:c1:fa:5c:d2:01:f4:a3:36:39:c5:e8:72:7b:00:
1f:0c:8a:5a:cc:bb:9b:21:33:22:3b:17:90:56:ea:42:14:93:
24:9e:6d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:34 2026 by rpki-client