Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS34224.roa
File: AS34224.roa (raw, json)
Hash identifier: ghldS81brjJ+Gz7uaPZ6RqNvhh3j4qcf15oFk9L0JLE=
Subject key identifier: 32:FC:C8:8F:1B:BD:00:40:DA:FB:BB:DB:33:17:24:35:A9:8F:58:94
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 352F1FB3A826E4857033064773DB966ED6E759FA
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS34224.roa
Signing time: Sun 04 Oct 2026 00:52:43 +0000
ROA not before: Sun 04 Oct 2026 00:47:43 +0000
ROA not after: Sun 03 Oct 2027 00:52:43 +0000
asID: 34224
IP address blocks: 79.182.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:2f:1f:b3:a8:26:e4:85:70:33:06:47:73:db:96:6e:d6:e7:59:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:43 2026 GMT
Not After : Oct 3 00:52:43 2027 GMT
Subject: CN=32FCC88F1BBD0040DAFBBBDB33172435A98F5894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:ba:c5:67:84:61:21:8e:ce:ac:33:f4:c6:
ec:dd:0a:26:f4:1f:c8:99:82:a0:40:ce:47:8f:8e:
4a:c0:62:e4:ac:5e:e8:1d:95:94:e3:30:ff:64:0d:
0b:17:ac:06:df:d1:46:41:01:7a:40:c2:ab:bf:33:
da:64:52:e0:1f:88:e5:c0:3e:7c:7a:b1:46:13:57:
03:7f:82:09:0a:f0:a7:84:6a:4f:c2:cd:95:38:a1:
fe:df:c0:d0:ed:c4:23:d5:11:70:f8:06:10:22:1e:
d3:75:59:f8:01:16:c4:22:b0:67:a1:84:14:63:86:
50:0a:25:a2:16:ad:69:ff:45:b4:69:7e:84:43:45:
3a:54:26:bd:13:c4:e4:0f:cf:52:df:2a:7a:95:0f:
64:68:c8:eb:31:35:ca:97:00:32:18:fc:4a:c3:22:
34:72:0b:dd:3e:e5:64:66:b5:07:b9:3e:06:cf:e9:
71:dc:b1:65:f2:bc:84:ff:eb:ee:9e:be:d1:9a:24:
37:06:59:03:23:08:83:d5:06:82:ed:d4:88:4b:57:
c8:1e:aa:b5:c7:95:3d:c0:b9:99:00:ba:da:4b:1a:
3f:87:69:e7:16:01:9f:42:6b:13:c3:45:16:0e:43:
6f:b0:83:e9:9b:da:d6:d1:46:1d:3b:ad:47:6c:66:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FC:C8:8F:1B:BD:00:40:DA:FB:BB:DB:33:17:24:35:A9:8F:58:94
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS34224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.37.0/24
Signature Algorithm: sha256WithRSAEncryption
46:72:be:34:66:98:cf:f0:b0:9a:da:b9:58:56:a3:74:d1:31:
e6:34:dd:ca:4c:03:3b:ab:5b:2a:e9:4a:7a:c1:02:43:70:97:
ab:61:4d:25:11:a5:b8:cb:41:d6:6a:39:6e:11:c7:ec:7f:5f:
9a:df:7c:b0:7d:60:43:1e:6e:83:0a:18:76:d0:ca:89:d0:76:
13:a6:01:4b:8c:ad:62:b4:9b:20:28:d8:e3:bd:80:71:3d:a8:
65:0c:2b:42:93:59:25:f3:e8:87:dd:44:9d:26:ef:f4:86:86:
ae:00:2a:1d:36:4e:e9:6f:29:f6:b6:07:a8:79:2f:11:84:51:
d7:84:7f:d0:39:f4:73:3a:ed:b1:98:36:fe:07:58:f7:18:3f:
83:b7:2f:df:00:63:f4:3a:8e:02:eb:44:fb:df:fc:f7:7b:33:
da:6e:9a:45:b4:0b:11:72:90:09:e1:b9:6e:7a:cd:f9:c8:a6:
61:f0:2c:23:95:b2:3d:69:8f:b1:9c:e0:ce:c0:8c:49:43:77:
3a:d4:bd:09:b2:99:f3:1a:98:d0:ed:ef:e9:c5:a8:0c:c9:3b:
01:67:24:8f:4e:e8:86:82:ce:3d:cc:48:d1:2a:1b:6b:51:81:
ca:bd:2f:ee:64:48:dc:2d:85:51:be:8a:60:e7:dd:c5:74:67:
99:3f:8e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:25 2026 by rpki-client