Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS218958.roa
File: AS218958.roa (raw, json)
Hash identifier: TKZ4ik8exb3J0fOrX2N15P8HYf746ya6obcF0RzQLKM=
Subject key identifier: BF:B4:D3:F8:E7:52:0A:8D:02:AB:27:AB:B1:3C:FE:1F:85:22:C5:22
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 1CC43694B9FE720ACA3E384ED73BAC1E64DAB756
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS218958.roa
Signing time: Sun 04 Oct 2026 00:51:06 +0000
ROA not before: Sun 04 Oct 2026 00:46:06 +0000
ROA not after: Sun 03 Oct 2027 00:51:06 +0000
asID: 218958
IP address blocks: 109.66.100.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c4:36:94:b9:fe:72:0a:ca:3e:38:4e:d7:3b:ac:1e:64:da:b7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:06 2026 GMT
Not After : Oct 3 00:51:06 2027 GMT
Subject: CN=BFB4D3F8E7520A8D02AB27ABB13CFE1F8522C522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:c6:5c:b7:1f:97:97:99:45:a7:2d:28:7e:
1d:4a:50:d2:03:a7:73:2a:2e:e3:a8:d9:d6:54:dd:
64:fc:8d:9f:e2:6a:50:3e:0f:1e:44:16:a8:40:8c:
ba:35:6b:2e:cd:83:d5:10:9b:13:db:00:37:6e:a7:
da:4c:4e:d5:0c:bc:87:7b:03:ab:fd:a6:3b:98:ce:
fd:ab:70:b2:e9:2a:90:f8:cc:7b:96:b4:3b:10:eb:
74:e1:c2:0f:ea:0c:88:c6:07:22:46:49:8a:7d:e3:
22:46:ff:65:55:4e:fe:b5:34:c3:eb:86:21:6c:b2:
c1:3a:c8:ea:5f:06:09:c8:f5:24:1a:6d:75:b9:9e:
44:a7:22:ed:9e:0d:57:a8:61:20:51:3c:4b:9d:75:
ab:4f:0f:42:57:70:20:13:5c:a6:44:fc:d7:4d:cf:
77:81:c4:6a:d8:9a:a0:4f:7e:0d:af:08:c5:c5:74:
1b:84:2c:fa:de:12:63:5f:d5:31:77:09:21:6f:16:
14:ef:78:fc:69:ea:e5:3a:9b:73:e3:08:2a:b5:92:
cb:f6:cc:58:6d:2a:ad:82:dd:1d:d4:1c:d4:a9:d2:
c3:89:b6:db:da:da:b4:88:34:67:fd:2b:86:18:a0:
87:c9:21:58:b1:b8:11:2a:1f:f2:92:c8:1a:4a:06:
34:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B4:D3:F8:E7:52:0A:8D:02:AB:27:AB:B1:3C:FE:1F:85:22:C5:22
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS218958.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.100.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:d3:3d:46:77:97:18:22:00:34:79:0a:85:cd:12:cf:35:16:
ce:f3:52:53:5e:c5:bc:11:b7:df:a5:07:3f:fd:08:73:8e:25:
69:c5:6e:f5:91:97:ba:b9:cd:5a:17:50:19:bb:5b:d1:fe:3d:
d3:e5:16:e0:97:8f:ff:60:14:b2:48:ba:b8:2b:1e:d1:cd:07:
54:93:e8:79:b6:b7:07:30:19:8e:31:dd:a9:8e:c8:d8:39:7f:
de:24:7e:3f:21:6c:4f:f5:b4:c5:48:02:26:19:4c:83:b4:2b:
96:f6:e0:db:e7:8f:5b:6a:63:e2:22:e8:6f:a3:c4:8f:5b:7a:
17:d7:8e:e4:d7:cb:e2:c0:8b:f0:a5:05:47:c8:81:5a:d4:f7:
67:2a:f3:d4:42:21:99:b9:3e:1f:89:c3:02:a7:89:eb:7a:03:
5b:06:5e:7b:7d:3b:4b:4e:ed:75:1b:08:fc:23:f6:72:06:fb:
ef:17:a7:5b:08:ad:d1:f5:bf:39:f2:66:28:af:88:ca:7f:9d:
4e:98:75:d2:9e:06:da:49:46:94:a6:02:27:56:49:1f:0a:73:
b4:de:e0:2b:9a:45:88:17:50:e2:7b:b0:09:6e:36:73:f9:79:
2b:6c:5a:40:98:38:a6:d1:9c:10:de:bd:38:ff:51:b1:68:0c:
3f:33:ae:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:13 2026 by rpki-client