Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS47172.roa
File: AS47172.roa (raw, json)
Hash identifier: UcCLPOEa1rS9D7h439Qfn4N9R5hfCeavg1PpxxpZAgI=
Subject key identifier: 32:2B:80:17:EF:22:03:DD:16:9A:9C:ED:04:DB:C0:31:E6:FF:41:FC
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 17FE306FEB596ABDCD54120A08E848DC0CF63FEB
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS47172.roa
Signing time: Sun 04 Oct 2026 00:51:05 +0000
ROA not before: Sun 04 Oct 2026 00:46:05 +0000
ROA not after: Sun 03 Oct 2027 00:51:05 +0000
asID: 47172
IP address blocks: 109.66.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:fe:30:6f:eb:59:6a:bd:cd:54:12:0a:08:e8:48:dc:0c:f6:3f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:05 2026 GMT
Not After : Oct 3 00:51:05 2027 GMT
Subject: CN=322B8017EF2203DD169A9CED04DBC031E6FF41FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fe:87:46:e5:4a:dd:7f:58:42:de:e5:0d:68:
75:ce:7f:fc:a5:1e:e6:8c:47:99:5d:83:41:ef:28:
af:ad:49:60:b0:19:5b:fc:25:7c:b6:01:75:2e:c2:
17:8e:08:4e:4a:88:be:da:2b:3a:1b:d7:e1:f9:43:
0e:d9:c8:52:4a:28:1b:14:78:36:14:29:20:83:bf:
b1:98:31:34:44:4d:21:fe:da:67:f1:67:1c:ef:ef:
5c:e6:ac:51:32:c7:79:6b:d6:9f:eb:90:b4:94:75:
2d:dd:15:59:e3:f2:60:09:a7:75:3b:88:13:9e:cd:
ad:0f:cf:76:24:79:c8:0e:3c:de:ac:d0:3f:8a:71:
d4:e6:c7:d6:59:b9:6d:02:24:05:99:90:b1:96:4d:
8a:f6:6d:87:91:cb:68:9c:55:c7:fa:38:58:74:7a:
4f:c2:2e:61:55:84:92:5c:3b:04:21:af:16:f6:e1:
33:70:93:a1:2b:40:31:e6:9e:0a:df:e7:99:2b:c9:
7c:a1:1d:1e:1a:26:08:79:e6:05:8b:bb:2a:84:61:
df:f9:8e:c9:f0:70:27:63:51:ec:ec:e7:01:90:43:
92:5b:d1:21:7b:36:c0:31:fe:3f:b0:21:2d:2b:da:
46:e3:c5:44:43:b7:2b:34:b7:d5:f9:d6:2b:8d:c5:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2B:80:17:EF:22:03:DD:16:9A:9C:ED:04:DB:C0:31:E6:FF:41:FC
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS47172.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.56.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1e:1c:32:2f:ba:f3:1a:1e:ac:12:0b:d4:1d:09:08:af:fa:
09:22:16:81:be:92:92:c7:b2:bf:93:59:c9:39:a4:79:64:11:
0e:a7:2a:ad:e7:66:03:ac:cb:33:d3:76:94:75:a5:2f:3a:cf:
59:8d:5a:e2:33:84:db:bd:ee:af:5e:46:f9:0c:0b:02:02:16:
37:3a:bd:31:7c:13:9b:6b:9b:04:bc:23:43:b4:93:28:9a:98:
16:27:98:b5:c6:45:ac:1b:12:d4:c9:ad:6b:88:96:3d:4a:ff:
51:86:dc:cd:e5:95:12:13:7e:e5:63:94:b1:88:79:1e:66:de:
ea:a8:6c:62:82:d8:ba:3d:ab:91:df:af:88:86:30:d4:e5:31:
df:92:dc:26:30:4c:8e:0c:81:41:72:21:99:b4:61:36:0d:37:
e2:cb:9b:24:0c:c5:5c:be:82:86:0a:02:ee:44:06:08:cb:24:
3d:f6:e1:66:bf:0a:30:cc:f5:a0:58:e5:0d:9b:e5:b5:7a:4b:
07:de:b0:fd:70:8e:bb:fe:d5:91:e1:d4:e0:49:92:03:23:be:
6c:7c:ce:b1:97:c4:ee:57:83:9c:52:9e:00:85:9e:fc:2b:ee:
b7:ca:0d:04:12:f8:93:0d:07:f9:79:e4:8a:83:aa:fd:36:87:
96:68:75:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:23 2026 by rpki-client