Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS44213.roa
File: AS44213.roa (raw, json)
Hash identifier: jXm35kbTNUvhSEFR4CUAIu0pQ3ES2ghTnBfKubegv9I=
Subject key identifier: F6:46:16:91:7F:C9:8E:A0:BC:94:0F:11:C2:DC:8E:F9:D3:DC:14:06
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 2D5D42E594B23253937075824084CF238C376AC1
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS44213.roa
Signing time: Sun 04 Oct 2026 00:51:37 +0000
ROA not before: Sun 04 Oct 2026 00:46:37 +0000
ROA not after: Sun 03 Oct 2027 00:51:37 +0000
asID: 44213
IP address blocks: 79.176.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 10:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:5d:42:e5:94:b2:32:53:93:70:75:82:40:84:cf:23:8c:37:6a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:37 2026 GMT
Not After : Oct 3 00:51:37 2027 GMT
Subject: CN=F64616917FC98EA0BC940F11C2DC8EF9D3DC1406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:0e:e6:88:df:90:c2:1d:3e:19:a5:75:22:
08:0c:e6:54:58:f1:91:de:5a:38:df:33:1f:ee:aa:
92:b4:01:e8:8c:d0:11:0c:03:aa:58:c3:52:a3:b2:
0d:04:5d:9e:a3:f8:47:dd:c7:1f:d4:85:57:86:74:
be:5d:cb:89:6c:85:b9:20:2c:51:b6:bf:a7:e0:ea:
24:f1:79:e7:5a:44:e4:5c:09:e8:db:b3:c4:51:a5:
4c:26:90:0a:d5:96:cb:67:8f:ee:a6:b8:26:1c:cb:
12:20:29:83:d4:5d:a4:ca:e6:8f:95:73:70:0d:6e:
4a:71:3d:74:4a:ee:9d:f9:9a:57:87:69:ce:9a:26:
7b:6b:87:6d:4d:5d:2c:00:54:57:41:dd:25:ac:09:
7a:8c:e4:36:57:d2:ae:bd:97:2a:f7:f9:38:a8:17:
85:b3:c3:34:aa:c0:9f:df:a6:7e:97:27:f3:6d:f4:
58:8f:fe:7d:4a:b0:3a:67:37:62:72:10:30:f6:06:
fa:7d:49:d9:5e:20:d0:89:1f:79:f5:8f:ed:b9:4a:
83:fd:b2:db:87:cd:3b:b5:8e:7f:b3:78:99:a2:a8:
69:d4:4f:57:1e:bd:69:83:52:c1:f6:59:e1:96:93:
30:93:fb:3e:5d:9c:4c:da:21:26:43:56:36:8a:2e:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:46:16:91:7F:C9:8E:A0:BC:94:0F:11:C2:DC:8E:F9:D3:DC:14:06
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS44213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:87:fc:f9:91:00:9d:3a:b8:ce:e5:44:e1:e1:84:9e:b8:67:
e5:55:9a:c7:a9:86:a8:2f:0e:b1:9c:37:e0:ba:5c:61:04:75:
87:1b:b0:91:99:c3:f6:e1:dc:08:57:b4:13:3c:e2:00:14:87:
98:a9:f3:46:fe:c6:60:48:9d:9e:01:b0:ba:1a:24:4b:5e:07:
44:27:44:b8:35:e9:53:3d:95:8f:31:01:7a:54:0e:d4:c0:e1:
f0:84:5a:85:af:6a:d5:17:68:6b:9b:52:fb:26:a4:99:9d:70:
84:74:73:04:ef:a8:ad:97:6a:6f:3f:10:27:0c:fc:01:3d:80:
09:08:00:43:25:4a:06:59:40:77:d4:53:ce:1a:ca:27:bd:f6:
e4:12:dd:a8:61:bc:f7:cc:41:19:8d:ad:8d:9d:8e:ac:47:f8:
6f:95:8d:0f:22:24:be:d2:72:d9:d9:1e:ca:46:c5:80:48:77:
d4:12:ad:e0:76:37:0e:d7:ba:75:12:5f:7d:d6:6a:de:97:f3:
d6:51:a3:eb:fc:fa:10:5c:cd:24:d1:19:f6:ab:18:58:ee:7a:
0a:13:32:8b:49:b2:2c:8a:43:ed:4d:23:74:b1:3a:b3:8e:e8:
d9:54:c2:70:e8:1d:22:02:67:18:73:4f:c7:cd:5a:b0:bc:c4:
bd:d3:65:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:26 2026 by rpki-client