Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: RlYSl5tR6ZByzriPOt05xoyUn8XjZIREX/lJaGrvL+E=
Subject key identifier: 9F:EC:41:EA:64:29:5C:47:F4:80:3B:84:98:D6:C7:8B:6A:E3:17:F4
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7ECF4643AF509E4E7C78CFC7656E97F607FFB007
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401362.roa
Signing time: Wed 12 Aug 2026 07:27:00 +0000
ROA not before: Wed 12 Aug 2026 07:22:00 +0000
ROA not after: Wed 11 Aug 2027 07:27:00 +0000
asID: 401362
IP address blocks: 181.215.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Aug 2026 00:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:cf:46:43:af:50:9e:4e:7c:78:cf:c7:65:6e:97:f6:07:ff:b0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 12 07:22:00 2026 GMT
Not After : Aug 11 07:27:00 2027 GMT
Subject: CN=9FEC41EA64295C47F4803B8498D6C78B6AE317F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:a6:a4:81:11:ae:84:15:f7:d6:37:73:5e:
98:89:7c:4b:b7:97:42:b3:c0:77:4b:6d:63:9f:cb:
8b:12:f3:eb:1d:d1:8d:5c:e3:bf:f0:63:0f:ce:67:
f1:b8:6f:db:b9:35:50:a9:53:88:b2:13:33:e6:44:
5a:6d:50:53:3d:aa:77:bf:5b:34:f3:f4:a4:ce:6a:
9e:f7:1e:67:2c:7b:2e:43:a9:3a:a2:2b:d2:fa:7b:
84:b8:60:cf:bc:7d:c2:09:a6:51:71:d8:1e:5a:12:
ec:a1:38:3c:1c:0d:a1:df:83:7d:f3:4f:e7:c9:79:
07:ba:94:a8:3c:c8:a6:a4:cf:95:89:df:22:7e:d7:
96:2c:85:72:9d:bc:2c:91:a6:8c:e5:6d:4f:b2:62:
93:fb:c7:e9:8b:79:c2:64:bb:35:01:ac:f4:f7:13:
df:6d:69:bd:0c:a4:88:2d:90:e0:14:8d:a3:fe:ed:
f6:57:08:90:bd:8a:84:36:58:e0:f7:8f:0a:e1:2b:
e2:01:30:55:32:b3:d6:4c:ca:0f:60:b3:1c:a8:1d:
21:a3:f6:37:a3:cd:41:eb:26:6b:74:6c:a3:36:37:
4f:56:69:af:1c:d5:84:10:f2:59:7c:61:d7:3f:7e:
82:ac:ef:38:52:7e:15:d2:cd:58:10:8c:2d:c1:7c:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EC:41:EA:64:29:5C:47:F4:80:3B:84:98:D6:C7:8B:6A:E3:17:F4
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.88.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:8b:b3:50:dd:0d:58:bb:bd:39:74:b8:2c:c3:bd:00:57:7e:
43:b9:eb:b9:f0:04:13:17:51:b3:5f:f6:24:db:f9:d0:c0:f4:
06:2c:c6:4b:06:44:c5:1b:20:bd:26:4a:e9:a8:d5:37:47:5d:
8b:b9:a2:73:ed:9a:4a:c4:18:b3:63:6a:d6:1f:99:b9:e2:bc:
cf:04:50:5f:4d:9c:a8:d9:f0:2f:da:b6:46:4a:2d:fe:ea:0c:
87:ab:30:ae:86:bb:24:9d:ea:a8:04:1b:e7:c3:f4:ab:fa:0d:
9b:d5:56:df:52:85:f7:7e:2f:d4:9b:95:87:c1:61:5a:7b:05:
11:a0:fd:d8:1c:2a:df:1b:b4:77:11:d5:61:a7:a0:2d:17:79:
bc:b9:32:fc:b2:84:f6:8c:22:4c:96:bd:c2:86:df:e7:4f:cc:
4c:4d:e9:a3:e0:c5:21:b4:aa:e2:33:dd:11:bd:51:22:64:b4:
4f:c5:d4:6c:45:ee:62:aa:d1:3e:a3:85:d2:2b:1f:15:9a:68:
b1:65:e6:1c:9f:dc:3d:18:b7:7c:e2:cf:a6:c1:b9:ee:7b:00:
a9:64:29:b2:bf:8b:90:5f:bd:40:96:6a:c1:69:18:7c:6b:ea:
51:ee:02:72:6d:72:39:dc:fe:06:04:0f:df:3f:7a:29:71:df:
23:fb:e1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:01 2026 by rpki-client