Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS2497.roa
File: AS2497.roa (raw, json)
Hash identifier: RGHdLSzHTLyPUUKz9ylBiCkWESKS4bWYJA6S6uhYCIg=
Subject key identifier: DF:A3:72:36:77:39:CF:F5:27:8E:30:FB:FD:5F:9D:C7:8F:EA:A3:BC
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 30D89FE3FC0A6F86A88FB3782D47FE16A2493BD2
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS2497.roa
Signing time: Sun 04 Oct 2026 00:51:06 +0000
ROA not before: Sun 04 Oct 2026 00:46:06 +0000
ROA not after: Sun 03 Oct 2027 00:51:06 +0000
asID: 2497
IP address blocks: 109.66.30.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:d8:9f:e3:fc:0a:6f:86:a8:8f:b3:78:2d:47:fe:16:a2:49:3b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:06 2026 GMT
Not After : Oct 3 00:51:06 2027 GMT
Subject: CN=DFA372367739CFF5278E30FBFD5F9DC78FEAA3BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:d1:01:a0:56:dc:f6:1b:8a:ff:f4:ac:83:
67:75:98:97:8f:52:43:10:e0:3d:5b:13:b3:f8:2b:
4e:6b:5d:8d:f3:52:68:48:b0:69:ea:ab:f4:51:e7:
9c:7f:58:58:63:d3:67:22:dd:28:21:a2:c8:c1:43:
5e:11:72:d4:b8:d4:a3:12:b0:b5:d4:29:33:84:ff:
3c:48:a9:fa:1c:ab:28:09:01:8b:58:8e:1e:4b:cd:
df:3b:d4:ed:01:e1:97:e4:5b:10:37:7d:32:2f:8f:
8d:04:8d:a6:6a:92:77:7c:ab:64:20:69:13:3c:18:
3f:d5:2a:74:c8:56:b1:d8:b3:ad:39:43:26:a0:cf:
a9:4a:19:77:2e:5a:5f:52:46:94:0a:64:58:26:83:
9e:7b:61:3b:eb:71:a6:ec:b6:2c:c0:25:32:43:6b:
dc:fd:45:10:86:7b:91:b4:a8:24:73:75:e7:ab:10:
e8:87:eb:f2:3b:61:b4:72:bb:c6:10:99:96:1c:6e:
94:2d:ea:8b:26:cc:2d:1c:24:8b:c4:26:e6:7e:fa:
61:e6:80:75:e5:bc:de:65:42:d7:02:77:a3:c4:0f:
7e:ca:09:68:b6:2a:56:7f:cd:1f:e7:2e:2f:b3:ab:
75:60:2c:da:31:2f:79:62:ef:9a:d0:df:d3:02:1b:
3b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A3:72:36:77:39:CF:F5:27:8E:30:FB:FD:5F:9D:C7:8F:EA:A3:BC
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS2497.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.30.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:9b:4d:02:e6:e6:75:f8:b4:72:1a:fa:ad:34:31:56:14:53:
c7:7b:d2:d2:05:9a:06:4f:85:7d:69:b4:58:01:d5:d3:69:7f:
db:2a:7c:ec:2a:00:b6:fc:02:58:da:86:24:0a:66:0b:d7:ec:
78:a5:48:54:49:e5:c5:4a:6e:24:0c:ce:ab:97:d4:b3:65:23:
bd:10:d8:94:70:98:97:41:4d:5e:3e:41:c0:93:66:ae:2f:f1:
ca:72:af:79:7f:85:1d:51:dc:96:f5:de:ae:f7:1f:e4:57:98:
d4:ef:df:a1:73:82:e9:8d:bf:38:6a:4d:d4:ba:71:6e:30:0f:
36:01:ce:1c:e3:e1:7a:58:cf:e5:ab:6e:77:a3:98:64:e4:86:
5c:05:ad:b1:c7:34:dd:5c:9e:e6:4b:25:8c:e8:c9:fa:69:10:
db:de:71:c2:e1:0b:f4:fc:9c:c3:31:17:12:52:cb:ba:3d:01:
cc:95:31:89:d5:e8:0b:da:6d:ed:ec:ac:8d:0b:a1:9d:35:09:
a5:43:a5:09:13:4d:b8:44:f0:91:07:f4:43:e0:42:a7:00:03:
9c:d3:0a:62:f5:5b:5f:77:4b:79:10:01:7c:56:d5:ff:2b:84:
62:1a:d0:24:49:9d:dc:eb:c3:e2:35:ad:ea:e4:ac:97:f5:40:
d3:57:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:02 2026 by rpki-client