Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS64457.roa
File: AS64457.roa (raw, json)
Hash identifier: f/s/ch5v1ec22MyVZ6cnOFNdJDpQCbY6BgwXKStssmw=
Subject key identifier: E6:2E:BB:74:2D:7F:B5:45:9B:B6:2A:F9:21:42:5E:E8:64:48:4F:22
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 068788B4EDC3FD47F54CF15906330EFDF740CDE7
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS64457.roa
Signing time: Sun 04 Oct 2026 00:52:44 +0000
ROA not before: Sun 04 Oct 2026 00:47:44 +0000
ROA not after: Sun 03 Oct 2027 00:52:44 +0000
asID: 64457
IP address blocks: 79.183.89.0/24 maxlen: 24
109.65.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 08:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:87:88:b4:ed:c3:fd:47:f5:4c:f1:59:06:33:0e:fd:f7:40:cd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:44 2026 GMT
Not After : Oct 3 00:52:44 2027 GMT
Subject: CN=E62EBB742D7FB5459BB62AF921425EE864484F22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:1c:6a:6b:3f:a0:90:ba:8a:4d:80:b0:88:
0a:66:e0:6b:82:c8:e0:07:9c:f5:d6:11:86:30:4a:
96:06:a6:92:89:02:0c:8b:1e:f3:f1:87:cf:d8:b4:
1c:ab:d2:33:78:43:06:36:98:da:c9:58:17:b4:d3:
30:89:c5:9d:7b:98:4d:5e:85:f9:a2:90:25:8c:18:
9e:67:d2:21:9d:85:7e:e2:52:86:de:08:60:70:ce:
40:bf:fa:90:8d:cc:43:c7:41:7d:b0:10:a5:73:08:
0d:6c:75:d3:2b:b4:61:2d:89:6c:64:30:cb:af:d3:
55:b4:c8:89:34:57:6a:f5:5b:88:38:87:22:c9:58:
0d:c7:af:11:90:36:52:68:7d:18:33:ec:26:c7:cf:
09:8d:3b:82:3b:11:2d:ed:73:4f:0d:ee:41:b2:2a:
48:04:ab:3c:52:b6:f7:dc:4d:57:40:ac:20:50:49:
f4:31:55:15:a1:97:27:17:59:57:4e:2a:c1:79:79:
5e:3c:64:9d:ce:8a:f5:19:27:e4:c3:b5:01:f0:42:
0d:25:30:c7:12:fc:61:21:15:07:52:37:6d:70:a7:
79:7d:4c:bb:b8:e1:95:5c:67:79:17:41:68:da:22:
72:19:03:5a:8e:27:68:b3:90:89:00:01:35:25:96:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2E:BB:74:2D:7F:B5:45:9B:B6:2A:F9:21:42:5E:E8:64:48:4F:22
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS64457.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.183.89.0/24
109.65.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:7a:a1:9d:b6:2c:1e:b3:c0:a8:d0:4c:6a:f4:f3:82:d5:8d:
81:4b:50:b4:32:e0:9a:04:1f:8a:b4:30:4b:a0:ee:3a:66:46:
78:22:f2:7f:24:ab:74:62:fb:e6:d5:a9:e0:2a:7f:f4:be:6b:
1f:49:70:85:13:c6:47:88:b7:7d:74:0d:db:76:29:bb:e1:f0:
25:b2:74:68:72:87:8e:6a:a1:7c:b2:21:1e:5c:2f:c8:f2:b7:
8d:6f:22:5c:7f:98:ad:46:49:13:53:fe:db:c2:c5:e6:06:32:
39:1b:a1:67:3d:a8:dc:90:19:97:2f:38:c0:2e:48:c5:41:e4:
f6:2e:e0:bb:b5:8c:f5:7d:54:9f:ee:9d:74:53:c4:00:0a:8a:
02:3c:24:68:4b:fd:36:5b:d8:18:3b:95:02:ee:70:ba:8f:3f:
25:67:a1:02:8e:3d:89:3d:e4:60:81:df:fa:55:fa:37:24:57:
0a:7f:5e:4d:44:44:e0:34:12:d0:70:4f:94:30:ba:a0:26:56:
2c:38:5b:1a:0b:84:76:47:e9:b0:5e:62:dc:e0:de:71:d4:8b:
da:1f:54:e0:f2:7d:f7:18:be:f7:72:1d:f0:eb:d9:57:a0:6a:
71:db:48:8a:06:23:cb:07:01:4f:f6:21:8f:f7:6d:88:de:f9:
b6:33:f3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:21 2026 by rpki-client