Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS30042.roa
File: AS30042.roa (raw, json)
Hash identifier: mkQUdukyeEoE8+LNGjVtqn7GuKQ2BdsSoH+NwaA8JL8=
Subject key identifier: 26:6B:25:C8:D9:84:7B:00:D9:D6:BB:75:73:F0:43:03:E2:92:F3:06
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 305A2DE64515D08374D11D16140B6C27E3848140
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS30042.roa
Signing time: Mon 05 Oct 2026 08:44:25 +0000
ROA not before: Mon 05 Oct 2026 08:39:25 +0000
ROA not after: Mon 04 Oct 2027 08:44:25 +0000
asID: 30042
IP address blocks: 79.182.2.0/24 maxlen: 24
79.182.54.0/24 maxlen: 24
79.182.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5a:2d:e6:45:15:d0:83:74:d1:1d:16:14:0b:6c:27:e3:84:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:39:25 2026 GMT
Not After : Oct 4 08:44:25 2027 GMT
Subject: CN=266B25C8D9847B00D9D6BB7573F04303E292F306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:3a:fe:f3:04:c0:39:3f:e9:77:cb:c5:35:
2a:ec:f6:2d:ca:51:7f:3a:e3:ed:f0:ed:09:7f:f5:
a3:ce:de:bb:69:d3:06:d2:27:88:e7:94:05:8c:f6:
68:2f:a3:22:58:98:6e:a4:20:35:1e:08:7f:45:8c:
5d:b1:48:72:55:56:1b:d9:93:80:28:bc:60:08:80:
35:87:50:c3:97:07:4d:c9:d4:7a:c7:1c:42:9e:e3:
d0:9c:ef:a3:20:8a:e1:18:ce:41:be:f1:a1:b3:f6:
c3:5e:9c:8b:f0:1f:8b:2c:7e:7e:ff:89:98:1f:a1:
7e:fb:81:5c:a7:e4:e9:ef:03:7a:49:af:ca:df:f2:
bf:7f:60:97:3e:d4:35:ba:c3:bf:2a:63:f6:f0:56:
17:3f:80:40:e9:55:94:f2:16:a6:c8:95:7e:99:96:
8f:86:e4:4e:f8:91:f6:10:64:1a:83:77:81:74:ac:
fa:ea:b2:51:8a:7b:cf:d9:d1:a9:c6:ad:5a:81:2a:
72:44:6e:7d:48:f0:5d:82:d8:e0:7d:22:61:45:30:
c2:76:58:e2:8c:f5:0d:ab:a7:04:1b:da:88:c7:cb:
5b:46:a4:94:1b:b0:11:9e:c6:99:0c:5b:78:9d:bf:
75:b2:0e:a7:58:e9:e8:7e:2d:e0:06:c7:63:88:a2:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6B:25:C8:D9:84:7B:00:D9:D6:BB:75:73:F0:43:03:E2:92:F3:06
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS30042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.2.0/24
79.182.54.0/24
79.182.125.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:25:fe:2d:f5:76:8f:b3:dc:27:34:ad:17:9d:53:c8:33:ec:
b2:f6:f8:e3:e4:6b:5a:95:0d:52:bc:ef:d3:9f:eb:47:7f:43:
e6:32:18:3d:30:b6:21:2f:0f:5e:71:fc:54:c0:1b:45:8a:d6:
b9:b8:63:33:87:8c:d3:8d:18:59:79:62:6c:b5:a1:e6:b0:8e:
3e:17:f1:18:a6:97:9d:44:20:7e:e8:36:b4:db:34:9e:8d:74:
c3:ec:71:ce:71:bc:eb:95:04:db:dd:3a:8b:4a:0a:47:80:f1:
74:83:19:71:43:4d:21:d2:12:e6:43:db:83:b9:c2:22:51:8d:
5c:95:a7:1e:aa:26:34:fb:47:ab:8e:a3:f8:8a:79:50:3e:da:
fe:c8:01:53:49:57:97:5c:1a:ad:d0:1d:1e:07:ea:3d:3e:90:
ca:46:57:f4:c2:06:2a:51:83:57:6c:e1:ab:eb:c0:ff:92:47:
4d:3a:34:16:e5:49:4d:06:fd:6b:f3:62:29:76:dd:fd:2d:6b:
c7:ca:e9:3c:2e:0d:be:78:db:59:7c:4c:82:2c:74:3d:6a:93:
3b:93:48:81:17:b0:98:7d:d4:ee:ce:5c:d7:68:b1:99:bd:17:
16:f4:04:21:44:1a:33:c8:4e:00:d2:8d:db:24:71:4d:dc:f9:
c8:90:23:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 6 03:46:38 2026 by rpki-client