Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: UDhF5sxL04nrqJpiYs4udEtHyLzvZ5fOnv0ty5uXpi0=
Subject key identifier: E9:42:0B:FE:F6:9E:16:37:FF:38:D8:DF:02:95:A5:37:A4:7A:CD:A2
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 3EF9B7D645FA45CDCB9504DD2C0B310912D28775
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS34989.roa
Signing time: Sun 04 Oct 2026 00:52:43 +0000
ROA not before: Sun 04 Oct 2026 00:47:43 +0000
ROA not after: Sun 03 Oct 2027 00:52:43 +0000
asID: 34989
IP address blocks: 79.182.166.0/24 maxlen: 24
79.182.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f9:b7:d6:45:fa:45:cd:cb:95:04:dd:2c:0b:31:09:12:d2:87:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:43 2026 GMT
Not After : Oct 3 00:52:43 2027 GMT
Subject: CN=E9420BFEF69E1637FF38D8DF0295A537A47ACDA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:61:fe:8f:ee:b7:68:1e:e0:a3:9b:76:0e:
ad:63:8e:10:bf:4e:14:ba:81:99:2f:32:97:b2:b1:
04:52:3a:c3:99:ce:dc:ea:75:ec:7c:c6:04:68:26:
74:12:57:39:26:03:2f:48:a9:83:59:4a:7e:e1:c8:
4b:3b:d2:7a:84:27:5e:92:69:b8:ff:85:35:af:00:
07:14:1c:cc:e7:b9:1a:48:67:65:a6:e4:08:5e:b6:
55:05:62:fb:cf:e9:99:0d:e9:70:ef:2b:67:2f:cb:
1f:44:96:bf:e1:83:9e:d2:20:85:3a:8b:24:52:9f:
d7:a5:8c:3f:87:1b:9d:ab:32:a2:9c:c5:9e:4e:c0:
5d:c1:0b:b0:c6:52:e2:27:0d:94:dd:66:33:e0:2f:
97:a9:1a:d4:6d:59:0e:af:94:d3:b3:12:c7:76:42:
79:3e:c4:19:a8:d2:cc:11:5e:1c:cd:f3:7e:15:31:
57:c6:c6:50:cc:e7:9e:de:83:b4:99:6f:1e:a6:f3:
8a:27:8f:10:5c:71:4f:37:e6:eb:c3:28:2c:12:e7:
0e:06:f7:00:cb:26:2e:ce:b6:86:93:c8:11:f1:62:
f7:d6:9f:ec:dd:58:8c:74:53:7d:13:b9:1c:b5:c7:
d3:0d:78:cd:66:6a:37:5f:52:c3:85:cd:78:87:c8:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:42:0B:FE:F6:9E:16:37:FF:38:D8:DF:02:95:A5:37:A4:7A:CD:A2
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.166.0/23
Signature Algorithm: sha256WithRSAEncryption
96:79:37:b5:80:b8:c3:c3:5e:ae:96:35:50:d8:23:bf:84:c1:
35:65:d5:33:66:a7:f1:0c:9a:52:c6:53:70:a4:8d:34:03:48:
70:39:75:0d:02:8b:fc:91:0e:e7:2a:70:1e:5c:06:53:82:a9:
6c:af:a8:3e:53:6e:c6:5f:27:81:45:e0:dc:ff:4c:75:f0:66:
bf:f0:dc:81:f1:ac:23:6b:35:50:9f:af:62:39:e2:45:e8:4f:
52:c9:1b:22:9b:bb:88:46:c4:6f:cc:ea:e8:1d:23:ed:8e:20:
57:b6:76:5c:79:2b:7f:98:bc:b5:d9:cc:b8:a0:08:fd:b4:5a:
00:da:1d:42:0a:6c:ea:ce:17:ee:3f:44:04:40:c5:9f:62:ad:
b9:7c:44:98:30:01:63:2b:3a:a5:bc:82:0a:e7:14:a8:0c:b3:
0f:a3:ce:71:a5:7d:a5:3d:a5:28:44:df:d9:d3:ce:e2:8a:bf:
cb:f0:21:6c:e8:78:89:a8:b3:50:4a:1a:f6:51:38:3c:05:10:
1d:23:81:f4:e9:09:8e:c6:8b:1f:63:8b:a3:72:fe:01:37:01:
d1:b5:10:dd:8d:08:46:34:78:2d:9c:73:d9:e1:7a:1b:1b:49:
18:a6:65:f5:c1:72:c3:61:69:43:95:87:78:22:c6:c6:b7:c4:
f6:f5:49:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:27 2026 by rpki-client