Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: HEPlcMFk+ftN+UFPHp+xHYVpldeQBzRGp8Ne2MYnBMA=
Subject key identifier: 52:36:93:CB:33:E4:C4:D3:1D:DE:2E:31:17:87:E4:1E:DE:8E:5F:52
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 3795F0A0F859A59D899B4CB197E3B826078C9B9C
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS5650.roa
Signing time: Sun 04 Oct 2026 00:51:37 +0000
ROA not before: Sun 04 Oct 2026 00:46:37 +0000
ROA not after: Sun 03 Oct 2027 00:51:37 +0000
asID: 5650
IP address blocks: 79.176.28.0/24 maxlen: 24
79.176.35.0/24 maxlen: 24
79.176.40.0/24 maxlen: 24
79.176.83.0/24 maxlen: 24
79.176.150.0/24 maxlen: 24
79.176.153.0/24 maxlen: 24
79.176.156.0/24 maxlen: 24
109.66.37.0/24 maxlen: 24
109.66.39.0/24 maxlen: 24
109.66.45.0/24 maxlen: 24
109.66.47.0/24 maxlen: 24
109.66.50.0/24 maxlen: 24
109.66.61.0/24 maxlen: 24
109.66.183.0/24 maxlen: 24
109.66.185.0/24 maxlen: 24
109.66.187.0/24 maxlen: 24
109.66.189.0/24 maxlen: 24
109.66.191.0/24 maxlen: 24
109.66.193.0/24 maxlen: 24
109.66.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:95:f0:a0:f8:59:a5:9d:89:9b:4c:b1:97:e3:b8:26:07:8c:9b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:37 2026 GMT
Not After : Oct 3 00:51:37 2027 GMT
Subject: CN=523693CB33E4C4D31DDE2E311787E41EDE8E5F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:7a:7d:00:a7:44:e5:f0:90:63:e5:f9:77:
69:c6:9f:08:ba:08:82:db:2a:e4:14:c4:04:c7:ff:
22:8a:8e:29:57:53:33:64:a8:7f:1e:cc:52:19:fa:
fc:d6:ed:bb:df:c9:5d:1a:cc:78:cb:b5:06:ac:f1:
d1:0f:ce:ca:85:31:52:99:4a:4c:ac:ee:a0:39:49:
64:8f:2b:9e:a2:f8:f9:c5:18:98:2d:1d:78:31:a3:
84:86:23:61:1f:ca:24:9f:b6:7e:3e:81:10:9b:0a:
c6:93:99:90:69:ab:19:2c:75:2a:12:49:ab:f0:ec:
f8:d6:14:2e:43:a6:65:af:f6:12:3e:98:eb:35:74:
3e:c7:0f:b4:b7:96:09:5c:c3:75:e6:b3:9f:c7:61:
fd:14:63:ed:60:be:70:57:00:f3:b0:28:6d:ad:93:
1b:39:66:ab:81:ed:f4:47:05:46:11:bd:41:99:9d:
b7:01:ed:66:fb:93:1e:ae:12:c6:b3:7d:63:9c:9d:
65:7b:09:48:31:14:5b:e5:e7:33:f7:62:de:b3:38:
df:88:6b:28:3a:0f:ce:8a:10:fe:f9:80:51:d9:a5:
a6:a3:6c:2c:6f:23:0d:c8:4f:a4:8a:f0:d4:d9:20:
4d:67:85:9f:13:c9:f0:fd:4d:8d:8d:ee:76:31:0a:
47:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:36:93:CB:33:E4:C4:D3:1D:DE:2E:31:17:87:E4:1E:DE:8E:5F:52
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.28.0/24
79.176.35.0/24
79.176.40.0/24
79.176.83.0/24
79.176.150.0/24
79.176.153.0/24
79.176.156.0/24
109.66.37.0/24
109.66.39.0/24
109.66.45.0/24
109.66.47.0/24
109.66.50.0/24
109.66.61.0/24
109.66.183.0/24
109.66.185.0/24
109.66.187.0/24
109.66.189.0/24
109.66.191.0/24
109.66.193.0/24
109.66.252.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:6a:2d:d5:0c:5d:04:d6:34:51:7e:ee:74:ce:70:7a:a4:7c:
3f:4b:93:97:69:4b:26:a2:da:5e:7f:0a:49:23:cb:29:3f:de:
84:dd:b9:e9:78:6f:00:0f:c3:08:93:72:70:78:4a:07:b3:8d:
c1:64:91:b4:8e:62:e2:3d:16:5c:69:84:c7:47:b3:11:db:13:
13:23:8c:a1:ff:72:97:4a:0c:f9:c3:15:8d:77:17:42:cf:40:
06:1c:d0:4e:8b:2f:af:2e:78:5c:4a:6a:f3:f5:09:eb:ef:72:
f7:0a:fa:7f:ee:d8:f3:4d:30:9e:7a:0e:f8:9c:e0:92:8a:15:
c7:18:68:7d:63:1a:21:b1:a8:e6:1a:d4:b8:12:de:e0:7a:21:
99:88:eb:9a:a0:2b:df:16:fa:f8:19:e7:c5:e8:56:2a:46:81:
c0:cb:15:ec:1a:99:03:e3:a0:c2:7f:56:f3:2d:23:af:ed:30:
a3:d3:21:e6:fb:9d:cc:9c:ba:8b:f0:03:4f:05:e3:e2:e7:87:
cc:b7:c1:c7:58:90:0b:1a:e2:60:a5:0d:3f:66:1c:14:72:73:
58:9d:fa:3d:a8:8f:ba:c0:b2:41:f2:35:fc:80:8e:5f:05:44:
43:8b:ba:4e:82:99:87:ca:03:74:28:0a:b1:08:05:d1:30:07:
46:e3:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:14 2026 by rpki-client