Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS61112.roa
File: AS61112.roa (raw, json)
Hash identifier: HyiBdb+tR8MBRyCtKTEcHq0vFs0L2JjFAVyylOZN94E=
Subject key identifier: CA:23:27:02:48:F4:97:0A:65:FD:52:B5:DD:D6:F9:5E:34:C9:EA:70
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 071E6E77BAE31F44AA90629FAB4A77496675B5C3
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS61112.roa
Signing time: Mon 05 Oct 2026 08:44:25 +0000
ROA not before: Mon 05 Oct 2026 08:39:25 +0000
ROA not after: Mon 04 Oct 2027 08:44:25 +0000
asID: 61112
IP address blocks: 109.66.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:1e:6e:77:ba:e3:1f:44:aa:90:62:9f:ab:4a:77:49:66:75:b5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:39:25 2026 GMT
Not After : Oct 4 08:44:25 2027 GMT
Subject: CN=CA23270248F4970A65FD52B5DDD6F95E34C9EA70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:20:9a:d7:7f:b1:3b:ba:47:35:c0:5f:71:
be:0c:34:9a:80:fa:ed:2a:dd:db:3f:02:04:ec:d0:
32:40:d0:ce:6d:29:e2:b3:d4:7f:06:85:df:8f:9c:
22:88:7d:92:ce:9b:0d:ad:aa:0a:bd:a8:62:81:35:
2e:a5:ab:55:42:9c:2f:49:f2:61:4e:29:7f:2e:c9:
93:67:58:74:80:f3:7a:cf:21:d1:74:0a:97:78:c2:
30:b0:9c:43:73:1c:a8:23:f0:28:7a:7a:10:12:6f:
86:ee:f8:2b:1d:16:74:5b:18:92:b6:c1:27:5a:91:
ac:d8:f2:23:d8:c7:0b:55:eb:1d:3c:a5:1b:31:78:
93:e2:85:46:dd:b0:a2:95:a0:6d:62:69:09:a8:63:
9e:c5:d7:e6:ca:76:53:50:fa:c0:a3:1d:0d:da:17:
d4:01:3c:a7:a5:83:9a:5e:31:31:d2:4b:f3:9d:ee:
59:9b:26:76:1d:08:3c:5a:54:09:6d:6d:bf:d0:c1:
8e:f5:26:9c:68:d6:a2:79:97:bf:fc:77:f3:ea:0f:
ca:22:c9:e4:d7:ee:31:2c:d7:97:48:03:f5:68:c7:
e5:14:57:63:72:69:2a:12:b8:5d:20:cb:57:e8:0b:
00:9b:d1:c8:8f:4d:c7:b6:5a:e5:79:a6:f4:e2:bf:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:23:27:02:48:F4:97:0A:65:FD:52:B5:DD:D6:F9:5E:34:C9:EA:70
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS61112.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.66.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:95:10:3c:dc:78:27:9f:50:00:30:73:4a:b0:83:0b:12:1d:
7e:ad:2c:46:98:6e:1a:d6:4d:4b:c9:9d:dd:66:1c:6a:7d:3f:
aa:9c:14:f2:4f:df:27:7f:bb:94:2d:db:fa:c1:cd:01:34:7f:
a2:5d:1a:0b:07:2c:3e:e3:a9:4d:76:e7:87:ba:bd:b7:20:40:
48:f7:91:db:60:a4:b2:2b:b8:66:72:52:6f:0a:c6:cc:15:dc:
98:de:2e:32:e1:af:eb:36:b4:15:4a:60:d7:6a:86:a4:f8:f6:
31:f6:f9:30:73:e2:28:de:25:4d:46:83:4f:1e:bf:21:72:4a:
90:ae:12:b0:eb:26:9c:51:7c:e5:b4:67:b7:f9:94:36:1c:be:
d7:20:c0:57:22:18:04:d0:78:84:ff:b9:0d:8a:95:71:03:7d:
09:5a:3c:7d:1b:88:44:e7:4c:6e:5f:a3:bf:0c:62:83:2a:a8:
09:07:d5:4b:47:49:fe:95:e7:32:f0:8e:ed:e1:6c:0b:0f:c8:
07:ba:8c:4e:d6:e6:96:f9:98:78:f5:5d:70:75:05:a5:19:c6:
6d:99:ec:82:7e:26:a7:d4:96:be:6e:6b:45:81:39:aa:99:16:
b8:21:c8:c4:b7:72:12:db:99:cd:ba:90:2d:97:4f:7c:d6:56:
81:7e:92:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:39 2026 by rpki-client