Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213060.roa
File: AS213060.roa (raw, json)
Hash identifier: xCXCkFYOpuywZxPUBbImgIlv0E+9/m8p1GE0UfCsG3M=
Subject key identifier: C9:AC:3A:37:E3:70:9C:29:AA:E2:25:9F:A6:83:B6:42:FE:14:54:5B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6DB787A5CCEC1946180E3E06E396F1D0AD6A1519
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213060.roa
Signing time: Wed 09 Sep 2026 09:13:52 +0000
ROA not before: Wed 09 Sep 2026 09:08:52 +0000
ROA not after: Wed 08 Sep 2027 09:13:52 +0000
asID: 213060
IP address blocks: 191.96.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Sep 2026 11:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:b7:87:a5:cc:ec:19:46:18:0e:3e:06:e3:96:f1:d0:ad:6a:15:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 9 09:08:52 2026 GMT
Not After : Sep 8 09:13:52 2027 GMT
Subject: CN=C9AC3A37E3709C29AAE2259FA683B642FE14545B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:0d:eb:c3:f7:87:39:25:3f:96:c3:80:5d:
ee:64:a0:47:d8:ef:61:f5:ae:60:bc:c1:34:e7:e9:
ab:de:c8:53:72:62:e5:9f:8e:70:51:7d:ce:01:0c:
ee:7d:60:af:48:9c:ef:63:ff:d5:5d:db:bc:b4:5a:
c0:71:23:21:4b:5e:b3:7b:84:57:ea:a0:2d:57:86:
19:64:7e:fd:d5:88:a9:88:a8:e8:ce:a2:e7:e0:78:
ed:79:aa:42:76:28:52:df:90:c7:2c:ec:09:7c:b1:
68:b4:bc:01:0f:c0:91:61:30:8f:5f:79:af:d3:e2:
16:32:16:c5:7f:4a:4c:fb:b2:ed:e1:44:24:32:78:
75:09:31:6b:c7:c6:f0:86:03:39:d7:ca:b9:5d:45:
46:c9:80:a7:ef:aa:6e:99:d0:b1:29:ad:73:95:fc:
37:b9:f3:e6:4a:5b:17:56:66:f4:2f:91:c6:1c:f0:
29:0e:a4:a6:e5:21:97:4a:f1:68:97:7a:a6:5a:6a:
c4:4c:50:6c:ec:02:04:da:7e:5d:8d:49:44:6f:18:
42:e1:88:5b:40:68:c6:ca:f4:83:b8:c3:1e:43:e4:
bb:0d:8a:4e:54:2d:6f:fd:c7:88:6d:72:78:96:2c:
88:54:ef:24:03:ca:e1:4b:1a:69:ea:fb:86:e5:9f:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AC:3A:37:E3:70:9C:29:AA:E2:25:9F:A6:83:B6:42:FE:14:54:5B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213060.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.6.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:56:88:a0:46:87:a2:0d:42:5c:14:5f:1a:21:a0:87:ad:26:
fe:0e:d0:5d:18:01:c1:ce:85:ee:4b:47:2c:aa:b0:5d:b9:9b:
a5:1f:b0:93:d6:49:b9:27:c6:93:df:ca:98:e5:b1:c6:da:85:
52:33:a3:98:df:17:6b:b1:3f:a3:8d:69:1f:e4:ec:1a:86:da:
42:06:62:f5:d8:2e:e0:5f:78:77:02:d0:fb:c7:23:b3:51:88:
e9:b4:a7:25:1b:7d:e0:f0:28:31:26:30:06:17:b8:25:40:bb:
27:42:3f:56:c7:95:91:10:f4:16:1e:0a:a5:b2:c3:d9:d2:18:
4b:3b:38:63:5b:9f:c8:fe:ab:f5:83:04:87:a4:81:8d:29:16:
a8:af:dc:17:33:68:c2:d1:06:f6:94:c4:83:00:22:76:eb:da:
5b:73:95:9a:62:35:9e:8d:a7:04:c6:3b:4f:c4:91:3d:72:8d:
f6:83:c1:70:ec:82:08:13:52:02:f1:37:64:a5:a5:4e:e3:1f:
eb:20:5b:16:0b:83:17:27:b0:83:4f:b6:b4:18:c3:70:31:6e:
94:d8:00:64:ee:55:7e:53:8b:8a:d5:74:69:fe:06:dc:8c:8c:
a3:b5:4f:87:7a:17:ee:e6:82:2d:f5:5e:41:8b:2f:f4:a9:63:
a8:11:f2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:53:30 2026 by rpki-client