Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: eOGBrpWP44BjqZO/C1hSwxk7y32H+lsordrxhQdgcmE=
Subject key identifier: 6E:FD:CF:F7:38:98:85:8F:99:BF:EF:A6:83:EC:72:B7:E0:BC:E5:39
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 2A81BC89368383349C73FA5DA36B56425D0E9397
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS399359.roa
Signing time: Sun 04 Oct 2026 00:51:05 +0000
ROA not before: Sun 04 Oct 2026 00:46:05 +0000
ROA not after: Sun 03 Oct 2027 00:51:05 +0000
asID: 399359
IP address blocks: 109.65.101.0/24 maxlen: 24
109.65.151.0/24 maxlen: 24
109.65.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 08:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:81:bc:89:36:83:83:34:9c:73:fa:5d:a3:6b:56:42:5d:0e:93:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:05 2026 GMT
Not After : Oct 3 00:51:05 2027 GMT
Subject: CN=6EFDCFF73898858F99BFEFA683EC72B7E0BCE539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:02:05:2a:d9:37:2a:7d:17:9c:b7:1a:2b:
36:83:95:93:f4:17:28:f6:e9:5d:ee:e0:ad:9b:b3:
20:cd:ad:b3:d7:d8:bd:a2:d0:47:d4:78:76:75:7f:
da:ff:b7:98:d6:f1:d7:30:92:a2:d5:29:8f:43:18:
fe:9c:55:12:bb:bf:7d:ed:77:55:50:11:58:76:8e:
67:5b:b9:4d:25:f8:bf:3e:33:d0:6c:10:62:32:3f:
ca:d0:85:55:36:4a:f3:e0:37:34:ab:86:fe:4e:0d:
ba:5b:ce:1f:64:02:ed:a1:95:cc:56:cb:c9:56:bb:
38:63:55:bc:04:17:af:5e:e0:4d:51:d9:10:c4:e5:
89:e5:b4:c1:9f:ea:5a:ae:10:6c:ea:a6:b4:6b:af:
68:a1:cd:81:01:04:f3:d4:6e:96:43:07:ec:e4:69:
a6:27:76:df:08:62:a9:f5:fc:bc:d5:37:b2:10:01:
ac:49:69:39:34:a7:f3:7c:49:63:d3:68:65:e1:d5:
07:27:a2:ac:cc:78:f8:64:31:26:70:53:c3:60:41:
22:bc:cc:46:39:d7:28:f0:1c:49:65:0a:01:61:f3:
45:2b:40:43:9e:04:f1:11:b6:7f:a5:ad:a6:ee:45:
a4:dc:57:04:7d:54:f4:e3:49:96:d7:2c:28:81:73:
22:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FD:CF:F7:38:98:85:8F:99:BF:EF:A6:83:EC:72:B7:E0:BC:E5:39
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.65.101.0/24
109.65.151.0/24
109.65.199.0/24
Signature Algorithm: sha256WithRSAEncryption
52:86:3d:6d:e4:b6:2a:cd:5e:94:4f:88:3e:b7:f2:cf:88:4a:
fa:d7:8e:3a:d7:5f:e8:94:2b:47:cf:fe:b4:5c:5f:37:26:df:
18:94:47:eb:34:f9:62:10:e6:1a:59:dc:69:87:f0:90:8c:83:
e1:3d:5b:44:bc:67:c6:2d:b5:7a:47:46:73:ee:af:7c:d2:da:
99:8e:47:31:7a:5e:4c:dd:31:5a:7d:8b:38:3f:ed:b0:a2:92:
17:77:15:a8:d2:67:f3:8d:34:04:38:eb:a2:cd:95:e8:4f:e1:
57:57:74:fa:cf:d9:d9:00:92:88:cb:e4:ef:a2:ce:c7:85:b8:
8f:0e:b1:f7:0b:24:38:29:ac:10:15:57:98:e4:b4:1d:21:4b:
d2:74:0e:7d:c0:f9:bd:39:81:a4:0d:73:6d:ed:82:47:9d:8e:
91:65:1a:f2:8a:16:2c:a2:6d:89:86:83:f7:85:ca:a7:c6:8d:
a5:4e:8d:ef:64:f0:ba:83:76:34:43:01:85:f4:6c:36:6d:49:
57:5e:4b:81:b0:44:eb:70:23:d8:6b:d0:c3:59:92:74:31:5a:
49:76:9b:71:ca:f7:c1:98:02:5d:d3:61:7a:c4:41:58:87:c0:
fd:a8:8e:26:12:77:2b:c7:fb:64:ca:ed:9d:5a:df:d6:de:1a:
f6:53:e4:e9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUKoG8iTaDgzScc/pdo2tWQl0Ok5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWYwMjNmZGMyYmJhMjgzNTEzYzZhNTg3ZjkwNzc3MGIy
NmVmZjU2OTAeFw0yNjEwMDQwMDQ2MDVaFw0yNzEwMDMwMDUxMDVaMDMxMTAvBgNV
BAMTKDZFRkRDRkY3Mzg5ODg1OEY5OUJGRUZBNjgzRUM3MkI3RTBCQ0U1MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/AIFKtk3Kn0XnLcaKzaDlZP0
Fyj26V3u4K2bsyDNrbPX2L2i0EfUeHZ1f9r/t5jW8dcwkqLVKY9DGP6cVRK7v33t
d1VQEVh2jmdbuU0l+L8+M9BsEGIyP8rQhVU2SvPgNzSrhv5ODbpbzh9kAu2hlcxW
y8lWuzhjVbwEF69e4E1R2RDE5YnltMGf6lquEGzqprRrr2ihzYEBBPPUbpZDB+zk
aaYndt8IYqn1/LzVN7IQAaxJaTk0p/N8SWPTaGXh1QcnoqzMePhkMSZwU8NgQSK8
zEY51yjwHEllCgFh80UrQEOeBPERtn+lrabuRaTcVwR9VPTjSZbXLCiBcyJ5AgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUbv3P9ziYhY+Zv++mg+xyt+C85TkwHwYDVR0j
BBgwFoAU7wI/3Cu6KDUTxqWH+Qd3Cybv9WkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDk2ZjIwYTQtMjYwZi00MGZhLWEzODktZDZjYWQyZGMw
ZmJkLzAvRUYwMjNGREMyQkJBMjgzNTEzQzZBNTg3RjkwNzc3MEIyNkVGRjU2OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzd3SV8zQ3U2S0RVVHhxV0gtUWQzQ3li
djlXay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ5NmYyMGE0LTI2MGYt
NDBmYS1hMzg5LWQ2Y2FkMmRjMGZiZC8wL0FTMzk5MzU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbUFl
AwQAbUGXAwQAbUHHMA0GCSqGSIb3DQEBCwUAA4IBAQBShj1t5LYqzV6UT4g+t/LP
iEr6144611/olCtHz/60XF83Jt8YlEfrNPliEOYaWdxph/CQjIPhPVtEvGfGLbV6
R0Zz7q980tqZjkcxel5M3TFafYs4P+2wopIXdxWo0mfzjTQEOOuizZXoT+FXV3T6
z9nZAJKIy+Tvos7HhbiPDrH3CyQ4KawQFVeY5LQdIUvSdA59wPm9OYGkDXNt7YJH
nY6RZRryihYsom2JhoP3hcqnxo2lTo3vZPC6g3Y0QwGF9Gw2bUlXXkuBsETrcCPY
a9DDWZJ0MVpJdptxyvfBmAJd02F6xEFYh8D9qI4mEncrx/tkyu2dWt/W3hr2U+Tp
-----END CERTIFICATE-----
Generated at Tue Oct 6 03:46:51 2026 by rpki-client