Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: EwPrLqdSYiwWwaAbUVxHd/nlCvS86P5wwoMi2NwqtuU=
Subject key identifier: D8:37:F6:69:91:60:77:10:9B:B4:80:4E:9F:B3:4E:1D:3B:47:7A:90
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 2F415235D8EA85DD7D31A66581000C2ECDF04AD0
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS9304.roa
Signing time: Mon 05 Oct 2026 08:44:25 +0000
ROA not before: Mon 05 Oct 2026 08:39:25 +0000
ROA not after: Mon 04 Oct 2027 08:44:25 +0000
asID: 9304
IP address blocks: 79.176.14.0/24 maxlen: 24
79.176.15.0/24 maxlen: 24
79.176.16.0/24 maxlen: 24
79.176.17.0/24 maxlen: 24
79.176.18.0/24 maxlen: 24
79.176.21.0/24 maxlen: 24
79.176.38.0/24 maxlen: 24
79.176.44.0/24 maxlen: 24
79.176.49.0/24 maxlen: 24
79.176.50.0/23 maxlen: 24
79.176.57.0/24 maxlen: 24
79.176.61.0/24 maxlen: 24
79.176.70.0/24 maxlen: 24
79.176.87.0/24 maxlen: 24
79.182.7.0/24 maxlen: 24
79.182.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:41:52:35:d8:ea:85:dd:7d:31:a6:65:81:00:0c:2e:cd:f0:4a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:39:25 2026 GMT
Not After : Oct 4 08:44:25 2027 GMT
Subject: CN=D837F669916077109BB4804E9FB34E1D3B477A90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:fd:da:44:b1:66:82:60:88:57:95:7f:76:
ae:0c:1b:24:28:bb:aa:76:2d:5d:46:b4:db:77:bf:
7e:c6:36:c7:96:82:8d:9e:c5:7b:44:c6:00:30:73:
09:0a:ec:00:02:5b:d6:89:5a:27:22:13:24:6c:4d:
cd:f0:ed:40:91:60:f3:fc:b4:9d:0a:53:6b:92:b3:
ce:bf:9a:58:75:5b:ac:e0:12:05:e6:62:06:e7:2c:
16:68:f6:33:ec:09:94:ae:b7:f0:d3:b7:d6:92:8c:
8a:44:eb:ae:fd:6f:88:07:ea:72:5f:ca:03:bb:58:
e1:02:94:9a:80:2e:d8:76:ef:d9:6a:81:44:9e:d9:
7f:c3:28:ef:0d:43:70:08:e5:5e:fd:7c:25:14:fb:
db:54:d9:99:74:50:2d:f5:bc:59:23:18:76:33:a9:
60:11:85:83:d3:fd:0a:47:43:a5:26:fc:07:5a:0f:
08:e0:f9:07:fb:39:ec:7e:34:20:5f:24:47:b4:ed:
51:bb:d6:22:42:42:0b:e3:b8:61:67:21:9e:de:68:
a8:aa:92:ec:da:9a:67:82:c1:5b:12:92:d2:ec:c3:
d6:d3:ce:1e:aa:ee:c3:44:35:3e:d7:13:90:ed:f5:
e1:f4:2f:6b:ca:12:2d:7f:72:5f:87:77:33:e9:34:
a7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:37:F6:69:91:60:77:10:9B:B4:80:4E:9F:B3:4E:1D:3B:47:7A:90
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.14.0-79.176.18.255
79.176.21.0/24
79.176.38.0/24
79.176.44.0/24
79.176.49.0-79.176.51.255
79.176.57.0/24
79.176.61.0/24
79.176.70.0/24
79.176.87.0/24
79.182.7.0-79.182.8.255
Signature Algorithm: sha256WithRSAEncryption
85:fe:83:3b:1c:7f:0f:07:f6:31:06:df:1b:da:70:29:28:ff:
ce:e9:89:ba:41:57:8e:a4:d9:b3:df:03:78:0e:30:ce:89:37:
0a:56:be:d5:47:ff:38:9a:62:3f:2f:65:a0:f2:ed:78:20:c1:
2f:f4:3e:f5:1a:ff:9e:ea:8a:f6:73:57:b4:ae:84:51:6e:3c:
bb:e0:db:d8:c2:e9:ae:e3:ae:33:19:55:8c:b6:74:df:bf:32:
a2:41:f0:31:3e:43:a6:5c:e1:22:71:0e:34:6f:ba:6b:30:62:
c8:1c:5d:72:80:27:da:0a:55:fe:9f:07:84:50:b8:14:45:34:
b8:94:2b:aa:9f:6e:72:62:da:80:57:ef:e2:12:97:80:f0:b6:
e6:b1:99:ea:fb:c2:0a:e2:44:d2:8f:53:5b:e1:3f:e6:c2:54:
11:d3:46:87:60:9c:93:57:7f:99:1a:97:92:91:ee:bf:70:39:
f5:9f:c4:29:91:e4:e6:46:b8:b1:7e:10:6e:16:6e:49:81:c8:
69:32:22:46:5f:38:2e:82:b9:2b:f4:e7:df:9c:42:3c:0a:49:
87:86:84:ea:9c:a7:5b:b5:f5:57:37:a7:51:50:95:5f:fd:7f:
fc:d9:57:b9:1c:a8:63:a3:6b:fb:2e:d1:db:66:6a:52:cd:f8:
f8:8f:68:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:15 2026 by rpki-client