Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS218911.roa
File: AS218911.roa (raw, json)
Hash identifier: bE95K/o84J+bwMI1sy8xIff9QfSWSyi9UO4KDWHWbWY=
Subject key identifier: 50:6E:58:02:CE:B5:76:FA:0A:31:A8:B0:EC:82:93:B4:AB:94:05:00
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 64EFD825638898389ABE99D32A17581FD8F757EF
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS218911.roa
Signing time: Sun 04 Oct 2026 00:51:06 +0000
ROA not before: Sun 04 Oct 2026 00:46:06 +0000
ROA not after: Sun 03 Oct 2027 00:51:06 +0000
asID: 218911
IP address blocks: 109.66.28.0/24 maxlen: 24
109.66.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ef:d8:25:63:88:98:38:9a:be:99:d3:2a:17:58:1f:d8:f7:57:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:06 2026 GMT
Not After : Oct 3 00:51:06 2027 GMT
Subject: CN=506E5802CEB576FA0A31A8B0EC8293B4AB940500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:0d:76:ac:52:85:15:2c:d5:19:c9:3d:52:
73:87:05:99:b0:06:5d:e2:3d:21:6f:c1:05:23:1b:
c7:71:ce:ee:52:51:54:a6:a8:59:cd:46:d0:3e:8e:
b2:b7:08:9d:91:1b:38:d2:c6:b2:28:51:b3:77:d3:
bf:2d:a4:8a:85:07:48:4c:d1:29:10:63:40:44:a6:
3e:dd:fc:59:4c:a9:f1:1f:2a:18:6f:5c:2e:b4:15:
f7:f9:12:47:5d:39:2f:06:e0:af:82:25:35:b1:91:
e5:ed:d6:2e:f3:2c:b9:78:0b:19:94:b6:ca:00:de:
3d:f0:6a:21:e9:f9:41:14:83:5f:f3:2c:62:d2:1d:
c2:87:d1:ab:6b:9f:f0:cc:21:9e:51:09:dd:1a:31:
42:40:1c:7c:55:be:2f:2b:7d:5c:b7:e1:90:75:22:
df:f0:86:1a:d1:e9:10:5a:48:a2:4d:41:be:c7:c9:
6a:46:6c:d2:0d:8e:e1:e3:d8:ae:d4:71:e2:ab:1d:
73:14:2d:72:53:3c:7f:a8:b8:2a:e6:29:22:d6:b2:
38:e7:e5:90:25:3b:28:62:40:56:f1:66:dd:d6:ca:
9f:6f:9a:bc:f7:30:e4:b7:b5:0b:fc:6d:92:fe:01:
a7:af:a1:0b:38:fa:ec:42:59:26:a7:46:ec:f2:7a:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6E:58:02:CE:B5:76:FA:0A:31:A8:B0:EC:82:93:B4:AB:94:05:00
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS218911.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.28.0/23
Signature Algorithm: sha256WithRSAEncryption
00:52:20:c8:54:08:39:29:7c:fe:84:8c:ad:39:1b:fa:19:f0:
32:44:b7:53:0d:54:f1:99:06:de:4f:0a:5e:dd:05:4b:f6:c5:
78:dd:d5:af:c7:31:9c:b3:3d:82:33:9c:ea:3d:ae:88:b2:00:
97:3a:c8:59:9a:a1:27:54:0d:9f:61:dd:b5:bf:94:9e:be:dd:
b6:04:7b:bb:e1:ab:5e:8d:df:5c:0f:2a:7e:86:bb:94:32:e1:
c2:23:19:20:ea:e0:0e:ce:ba:9c:0e:e3:8f:1a:f4:57:a5:5f:
c5:2a:70:d0:71:88:fe:f7:3c:34:fe:db:76:9c:0a:80:1c:a3:
0f:0e:1d:82:03:97:70:19:a9:1b:88:51:25:22:d6:7d:98:ac:
e4:d7:e1:2c:5e:eb:23:51:45:d2:15:cb:6d:af:73:82:b6:05:
d7:72:7b:66:74:ce:f0:b4:85:52:66:37:c8:59:32:3d:93:ad:
22:91:04:d9:3f:8a:6f:f3:d5:0b:7c:e7:d3:7d:56:40:9b:4e:
46:6d:22:b5:fb:fd:5c:c1:55:fd:6b:f2:7b:82:46:94:0f:b8:
f4:b9:22:fd:53:03:43:9c:6b:c1:fc:65:ef:57:99:7b:b1:93:
8e:81:42:de:f5:dd:aa:e6:eb:5a:b6:e3:73:1a:6d:e6:63:c3:
fa:8a:ec:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:19 2026 by rpki-client