Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: OE3m/16qHhoqMuXxQdIuOHOoOCyeauf9UmTt+3iGRHI=
Subject key identifier: A2:37:A8:0D:36:FF:97:77:37:D2:98:90:EA:20:4E:5A:7E:60:A7:FF
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 4D4AC2B0EDFD77B3C12C7FB8F07CBF9658E6745E
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS9009.roa
Signing time: Sun 04 Oct 2026 00:51:05 +0000
ROA not before: Sun 04 Oct 2026 00:46:05 +0000
ROA not after: Sun 03 Oct 2027 00:51:05 +0000
asID: 9009
IP address blocks: 109.66.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:4a:c2:b0:ed:fd:77:b3:c1:2c:7f:b8:f0:7c:bf:96:58:e6:74:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:05 2026 GMT
Not After : Oct 3 00:51:05 2027 GMT
Subject: CN=A237A80D36FF977737D29890EA204E5A7E60A7FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:8c:e7:a4:37:5f:25:3f:4e:d0:af:b0:2e:
af:35:68:5b:a6:46:23:23:24:b8:03:44:b5:f1:22:
15:42:b8:05:f7:ac:08:83:f7:e6:27:65:d3:e0:7b:
25:24:18:1b:78:a3:bf:f0:37:cf:69:12:61:98:cf:
09:af:80:03:97:f7:e6:7d:78:ce:ef:f6:a6:60:90:
a4:69:1b:2b:56:86:3e:3e:52:59:ec:3b:25:99:11:
0f:d3:1a:b2:47:ce:23:c1:d8:db:9a:b0:2d:94:fd:
f8:b2:21:e6:1c:fe:21:e1:01:43:4e:38:8d:d7:87:
b3:0b:76:3e:fe:e3:f0:4d:71:4e:9f:e8:4e:fa:0c:
cf:d6:f9:d9:f0:54:91:05:1f:fa:0b:c4:f2:fe:2d:
2b:68:b9:2f:2e:b4:9b:a2:95:9c:17:3f:da:c6:f7:
88:45:c8:eb:e5:f9:3d:3c:26:e6:cd:3f:fe:70:73:
76:d7:2b:ae:8c:1c:43:9a:e8:a1:e3:b3:91:dc:f8:
8a:ee:19:4f:13:b7:f4:76:60:60:20:5d:e9:e8:91:
72:41:6a:fd:69:bb:c0:8f:df:cc:32:48:bb:9d:19:
50:97:79:d5:78:d6:3b:83:26:09:89:4f:bd:38:f8:
90:bc:8c:e0:d8:91:aa:15:56:ea:ed:f2:70:c7:87:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:37:A8:0D:36:FF:97:77:37:D2:98:90:EA:20:4E:5A:7E:60:A7:FF
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.13.0/24
Signature Algorithm: sha256WithRSAEncryption
20:86:70:00:41:fc:50:b6:cd:42:48:c1:22:b7:80:d5:6f:21:
39:2a:70:17:08:eb:f7:e3:a5:b9:28:36:15:d7:d8:36:65:60:
23:aa:89:6f:fb:9e:01:29:8d:63:30:73:0b:f8:74:f1:2d:dd:
13:7e:6c:50:e7:95:cb:70:70:fe:4f:71:9a:c4:59:c5:1f:0b:
1d:99:1e:7c:d9:93:01:8f:08:95:71:01:b6:2e:a2:78:4c:81:
e0:88:8d:72:45:26:cf:c4:05:8d:7a:bd:89:9a:4d:60:fe:2f:
e6:51:31:da:bc:db:4a:97:74:9c:a9:5c:7b:e1:41:3b:3b:7e:
cb:72:7d:13:a5:a8:cb:ff:a1:cf:e4:63:7c:b1:7f:63:3d:5b:
cd:fd:b9:bc:5c:3f:e5:31:25:a4:2f:ea:4b:bc:95:1a:f3:92:
75:e0:34:2b:36:66:0f:ba:d3:8a:08:08:c0:a2:84:4c:70:3e:
ae:3d:2f:13:dc:dc:62:13:05:0d:9d:bd:88:3d:33:1b:16:0e:
ce:4d:da:a9:04:cf:d8:4b:26:ce:c1:0c:5b:7a:84:25:4b:3e:
92:20:17:77:33:78:34:01:d1:c1:5b:be:0d:e4:19:5a:c8:6f:
cf:25:d4:ab:29:7b:4c:5e:16:20:47:da:cc:25:a5:cf:39:dd:
44:c8:53:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:07:18 2026 by rpki-client