Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: fi1EUkaYXFP11WR29mDmTdFNUdPJw6VaP9QZk074EFU=
Subject key identifier: 0B:6D:8C:11:1D:D2:C6:08:25:40:0C:6F:BF:23:3B:89:F0:48:D6:9D
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 5E1C3A588D4E6BEC4CB4400F475AE510C361DBB0
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS25198.roa
Signing time: Sun 04 Oct 2026 00:51:37 +0000
ROA not before: Sun 04 Oct 2026 00:46:37 +0000
ROA not after: Sun 03 Oct 2027 00:51:37 +0000
asID: 25198
IP address blocks: 79.176.2.0/24 maxlen: 24
109.66.12.0/24 maxlen: 24
109.66.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:1c:3a:58:8d:4e:6b:ec:4c:b4:40:0f:47:5a:e5:10:c3:61:db:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:37 2026 GMT
Not After : Oct 3 00:51:37 2027 GMT
Subject: CN=0B6D8C111DD2C60825400C6FBF233B89F048D69D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:95:6f:c1:27:e4:c4:fb:29:32:45:1b:ed:
95:bb:90:02:98:0e:ea:de:6a:47:6b:88:e7:5d:a8:
12:aa:01:68:13:77:d2:5c:1b:62:1f:3b:8d:ac:ae:
1f:00:0a:8e:c7:ca:ac:3e:94:be:39:17:9b:95:9e:
8e:c0:65:93:f8:63:38:4b:4c:6b:53:88:f9:ee:49:
b6:0a:5d:b4:f9:18:9e:85:9a:44:27:28:94:59:3d:
1b:54:fb:f3:25:5f:95:0d:45:85:a5:ad:28:ca:e8:
40:2d:e9:31:e4:3f:ad:8c:63:44:5f:cd:9e:e4:9a:
72:3b:bf:d2:89:fe:0a:3d:ba:48:93:01:2e:94:5d:
16:40:8b:b5:29:69:39:76:b2:ba:72:88:a6:71:02:
b0:75:eb:fa:f7:d7:4d:76:41:81:59:a0:53:b8:5c:
04:54:eb:4f:02:c6:26:57:ee:0a:b6:7a:13:98:9c:
58:ec:13:e1:ef:53:da:26:97:d5:56:a8:d4:60:f7:
04:18:11:38:db:be:30:94:07:4f:a1:23:c6:30:7f:
d2:23:a6:82:0c:87:29:04:c6:cd:76:6a:74:d1:a4:
d9:50:df:3a:4e:4a:09:ad:ef:dd:8e:2f:ef:98:2c:
9c:71:59:d9:a9:9c:48:6e:b7:3b:ef:f0:ba:17:09:
2d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6D:8C:11:1D:D2:C6:08:25:40:0C:6F:BF:23:3B:89:F0:48:D6:9D
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.2.0/24
109.66.12.0/24
109.66.229.0/24
Signature Algorithm: sha256WithRSAEncryption
12:57:e3:c3:99:ec:e4:30:e7:f1:ba:00:50:b7:8f:d4:63:1f:
c0:59:25:31:d0:57:f9:aa:d2:6f:9d:9f:35:9a:30:6d:39:52:
8d:2a:fe:09:cd:91:3c:11:7b:4f:1e:b2:20:ef:3c:df:1f:4b:
ac:5a:b5:0f:55:7c:44:0e:b4:ff:63:e2:6a:0f:39:eb:b4:85:
7d:aa:69:a8:a6:eb:fd:90:eb:ff:84:ac:a2:1e:11:bb:49:89:
24:b7:c1:09:28:03:5b:5c:d5:25:65:97:74:f0:97:d4:16:b4:
21:3d:53:80:e1:c4:25:fb:52:bd:33:c2:04:b7:68:c8:30:5d:
99:3b:3f:30:d2:e1:39:b4:d4:7a:53:76:c8:b8:31:3e:b9:cc:
48:a7:f5:21:63:a1:92:9a:0a:a5:d1:c4:e0:7e:88:f7:aa:29:
62:e5:71:34:5a:c9:4a:69:59:28:7f:bf:35:ab:36:d6:22:0e:
45:0f:73:5f:04:7b:1b:aa:c7:e2:19:cc:e7:87:3c:c3:d9:17:
07:71:3e:24:07:be:4a:e0:67:c4:9e:80:c4:da:ce:99:68:82:
91:26:0c:fd:af:b3:3c:f3:57:2a:a3:e8:01:b4:8c:97:2a:7a:
6c:ac:ee:cb:20:25:b4:33:b1:e8:3c:e7:d7:69:ce:cc:dd:fe:
cc:78:b2:2e
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUXhw6WI1Oa+xMtEAPR1rlEMNh27AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWYwMjNmZGMyYmJhMjgzNTEzYzZhNTg3ZjkwNzc3MGIy
NmVmZjU2OTAeFw0yNjEwMDQwMDQ2MzdaFw0yNzEwMDMwMDUxMzdaMDMxMTAvBgNV
BAMTKDBCNkQ4QzExMUREMkM2MDgyNTQwMEM2RkJGMjMzQjg5RjA0OEQ2OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJuZVvwSfkxPspMkUb7ZW7kAKY
DureakdriOddqBKqAWgTd9JcG2IfO42srh8ACo7Hyqw+lL45F5uVno7AZZP4YzhL
TGtTiPnuSbYKXbT5GJ6FmkQnKJRZPRtU+/MlX5UNRYWlrSjK6EAt6THkP62MY0Rf
zZ7kmnI7v9KJ/go9ukiTAS6UXRZAi7UpaTl2srpyiKZxArB16/r31012QYFZoFO4
XARU608CxiZX7gq2ehOYnFjsE+HvU9oml9VWqNRg9wQYETjbvjCUB0+hI8Ywf9Ij
poIMhykExs12anTRpNlQ3zpOSgmt792OL++YLJxxWdmpnEhutzvv8LoXCS2jAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUC22MER3SxgglQAxvvyM7ifBI1p0wHwYDVR0j
BBgwFoAU7wI/3Cu6KDUTxqWH+Qd3Cybv9WkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDk2ZjIwYTQtMjYwZi00MGZhLWEzODktZDZjYWQyZGMw
ZmJkLzAvRUYwMjNGREMyQkJBMjgzNTEzQzZBNTg3RjkwNzc3MEIyNkVGRjU2OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzd3SV8zQ3U2S0RVVHhxV0gtUWQzQ3li
djlXay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ5NmYyMGE0LTI2MGYt
NDBmYS1hMzg5LWQ2Y2FkMmRjMGZiZC8wL0FTMjUxOTgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABPsAID
BABtQgwDBABtQuUwDQYJKoZIhvcNAQELBQADggEBABJX48OZ7OQw5/G6AFC3j9Rj
H8BZJTHQV/mq0m+dnzWaMG05Uo0q/gnNkTwRe08esiDvPN8fS6xatQ9VfEQOtP9j
4moPOeu0hX2qaaim6/2Q6/+ErKIeEbtJiSS3wQkoA1tc1SVll3Twl9QWtCE9U4Dh
xCX7Ur0zwgS3aMgwXZk7PzDS4Tm01HpTdsi4MT65zEin9SFjoZKaCqXRxOB+iPeq
KWLlcTRayUppWSh/vzWrNtYiDkUPc18Eexuqx+IZzOeHPMPZFwdxPiQHvkrgZ8Se
gMTazplogpEmDP2vszzzVyqj6AG0jJcqemys7ssgJbQzseg859dpzszd/sx4si4=
-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:38 2026 by rpki-client