Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS272962.roa
File: AS272962.roa (raw, json)
Hash identifier: jTUQoEsmDGS21PuRyCYvcY3+OycAnzlX2hiSqyGg6y0=
Subject key identifier: 32:F8:62:79:F4:A1:42:56:22:E5:73:07:7F:EC:12:FE:98:9D:30:65
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 243D31AD013DC7F5940C5D63C1401D13BE9F4E6C
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS272962.roa
Signing time: Sun 04 Oct 2026 00:51:05 +0000
ROA not before: Sun 04 Oct 2026 00:46:05 +0000
ROA not after: Sun 03 Oct 2027 00:51:05 +0000
asID: 272962
IP address blocks: 109.66.166.0/24 maxlen: 24
109.66.167.0/24 maxlen: 24
109.66.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:3d:31:ad:01:3d:c7:f5:94:0c:5d:63:c1:40:1d:13:be:9f:4e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:05 2026 GMT
Not After : Oct 3 00:51:05 2027 GMT
Subject: CN=32F86279F4A1425622E573077FEC12FE989D3065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:3f:0e:ee:ee:77:12:63:ea:de:07:5a:a3:
16:1e:bb:74:61:a6:54:dd:9d:79:68:51:0d:08:44:
9d:91:28:65:0f:55:ba:8a:63:31:27:b4:c9:1b:e8:
7a:6a:95:ea:67:83:11:54:1f:c0:9c:2f:9f:48:a6:
84:02:bb:33:53:7e:3e:10:95:8c:d6:9b:6f:f2:47:
b7:02:42:d7:27:ad:91:d3:aa:cd:16:c6:52:7f:43:
0c:7b:b4:81:8f:3b:af:0d:bc:01:9b:79:75:25:6b:
ac:96:07:74:ce:53:f7:47:9a:53:ee:21:d9:9a:d1:
ef:af:22:20:1f:5c:ee:20:ee:bd:2a:40:30:91:d5:
30:44:84:4e:44:a8:1a:75:44:50:c8:ea:ce:7f:9b:
15:65:bc:a4:5f:df:c0:ad:11:37:b0:12:81:6d:d2:
3b:62:81:eb:98:23:18:92:4a:83:f9:36:8a:2c:72:
42:ac:17:49:88:ab:79:9e:0e:97:d9:c8:33:88:70:
d4:d3:dc:2f:7c:0b:d6:d8:20:8a:5f:11:69:3e:49:
a3:2d:40:12:1f:05:8c:14:84:3d:0f:de:d6:2c:0d:
81:5a:a1:a3:a1:d9:f4:9b:5d:f3:1d:ed:45:f8:fc:
b0:b4:a7:f1:ff:dc:62:fb:75:cc:dc:f1:9b:d9:36:
98:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F8:62:79:F4:A1:42:56:22:E5:73:07:7F:EC:12:FE:98:9D:30:65
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS272962.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.166.0/23
109.66.199.0/24
Signature Algorithm: sha256WithRSAEncryption
86:72:48:b3:5e:8b:ab:b3:1d:87:6f:34:4a:d0:1c:c0:b3:5c:
fb:56:bc:1a:14:64:52:24:af:fd:aa:02:44:33:a0:9b:23:73:
50:41:94:32:c7:01:78:37:47:2a:13:08:9d:e0:61:35:e7:5b:
03:f4:65:e2:fc:70:d4:53:19:14:c6:11:d4:a2:83:ab:dc:7c:
c1:ab:7e:f0:f2:a0:03:43:16:d6:72:0a:55:25:b8:ab:c1:e9:
ba:54:0c:13:ca:07:3f:7b:b8:c7:87:84:7f:9d:fd:4b:e3:37:
0f:49:11:d7:ec:9b:32:09:e5:d7:a2:43:df:dc:e1:4d:a5:39:
2f:92:41:58:15:8d:ca:22:db:c2:87:a0:3c:d7:05:e0:0d:80:
44:fa:4c:77:c6:6a:ef:4a:57:2d:6c:40:e5:0c:5e:ec:b2:cc:
02:09:57:5e:da:00:5d:03:e0:09:8d:96:86:9c:5b:d8:80:39:
26:f2:d4:93:32:02:09:38:8b:38:38:0f:44:6e:29:3a:23:6a:
b7:5b:fe:51:da:8d:79:13:3b:52:4e:02:99:ba:20:c0:c9:1c:
f9:1e:95:51:2a:42:c8:60:c4:3c:7e:b1:f6:c8:7a:4f:59:a1:
72:87:fc:0e:c7:87:49:1e:5d:a2:63:2d:ea:4f:2e:41:60:f1:
01:15:0e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:46:43 2026 by rpki-client