Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213060.roa
File: AS213060.roa (raw, json)
Hash identifier: Ib29qSsec/hdufHCxJr0E1DD54/Ci2DHfJ3WImnwu+s=
Subject key identifier: 81:D7:45:31:EF:53:CC:2D:B5:E7:6A:83:26:2E:0A:EF:32:F8:11:04
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 293F0F8E69D36B7D4044C0E6BCC1F3AE0AD4ADDB
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213060.roa
Signing time: Thu 09 Jul 2026 08:03:50 +0000
ROA not before: Thu 09 Jul 2026 07:58:50 +0000
ROA not after: Thu 08 Jul 2027 08:03:50 +0000
asID: 213060
IP address blocks: 45.231.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jul 2026 08:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:3f:0f:8e:69:d3:6b:7d:40:44:c0:e6:bc:c1:f3:ae:0a:d4:ad:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 9 07:58:50 2026 GMT
Not After : Jul 8 08:03:50 2027 GMT
Subject: CN=81D74531EF53CC2DB5E76A83262E0AEF32F81104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:02:68:8d:40:07:8b:bf:11:2b:77:aa:80:39:
5f:92:1a:f7:99:cd:b8:54:dd:54:95:1d:2a:a1:d1:
8b:cd:0f:e0:65:36:65:8d:3b:f9:03:84:bb:cb:f7:
ab:16:d2:d5:d3:7e:21:8d:20:6d:d8:00:0d:b7:fb:
8c:05:d5:fb:69:5c:93:b3:47:6a:8f:0c:c0:c0:e3:
e1:12:59:eb:b0:a4:c6:cb:f2:e3:e7:34:eb:9a:be:
e4:90:bc:ef:48:87:ad:3b:d8:45:9a:61:40:b9:5a:
bc:12:b6:f7:03:31:51:54:13:61:01:34:78:d2:e6:
37:26:91:0b:01:97:2c:d6:43:20:1a:a6:03:82:17:
3c:42:60:78:6c:29:fc:ac:2f:18:39:5c:55:a4:d3:
6e:c3:1e:ae:45:26:7c:15:e6:d1:0a:a9:f9:30:04:
53:44:ff:2b:79:8e:75:05:6a:b4:29:db:95:5c:b7:
ba:0c:2a:0b:3c:39:7b:e6:11:7d:2c:8e:0d:b9:d2:
8e:3d:14:82:c8:58:ca:0c:0f:76:6b:52:67:26:30:
e7:75:21:a5:4e:68:0f:ee:03:9c:c2:6d:e3:77:f4:
e5:86:c4:0c:cf:1b:ca:59:55:ac:62:87:3a:af:43:
03:32:84:4a:13:40:dc:e9:c5:00:83:b0:2c:7a:ba:
83:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D7:45:31:EF:53:CC:2D:B5:E7:6A:83:26:2E:0A:EF:32:F8:11:04
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213060.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.206.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1b:7c:34:01:02:08:97:67:5d:3d:84:b9:fb:e8:1f:e2:6f:
3d:57:5c:26:31:18:e1:f8:54:f8:c5:41:54:83:67:2d:c1:73:
f6:f4:09:fb:f9:4c:75:03:35:8b:f9:c6:fc:8a:2d:a5:9a:cd:
20:a9:4f:9b:ca:65:01:44:bb:ba:73:c1:8a:7f:b1:a3:d1:1b:
a4:3a:8e:5d:51:2e:2e:ce:d0:51:eb:61:04:91:eb:f8:1e:73:
6c:5c:84:77:c6:f5:b8:40:0d:3c:2c:82:27:6b:2c:2d:a2:82:
35:af:19:b2:1c:ec:27:89:46:9d:fe:6c:dc:eb:61:e5:d4:03:
f8:6f:a2:28:ad:04:b0:cf:e0:0b:d2:30:e5:39:c0:5c:3d:80:
cd:a6:e4:3b:72:82:c9:f9:41:cb:d1:1a:7a:32:a6:d2:f0:46:
aa:a8:c8:d1:3e:3d:96:c1:fd:65:06:15:ae:b7:2c:38:55:fd:
ac:c1:21:18:66:60:81:a2:a6:2d:21:59:c8:7f:ca:83:f3:39:
23:93:e8:a8:cc:99:69:e8:2b:db:aa:d4:77:47:2f:91:84:66:
bf:06:79:f7:e5:0c:35:b7:3b:56:e0:10:bb:61:1e:9a:e9:cf:
4b:80:c9:af:62:22:7d:0f:b9:0a:cf:ed:5d:0c:2c:7e:96:48:
2f:38:d7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:20:36 2026 by rpki-client