Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402857.roa
File: AS402857.roa (raw, json)
Hash identifier: klvJ/tK9rMICYq97B60Xqgu8CW8itloZPviRaJhvojY=
Subject key identifier: D9:23:35:9B:13:85:94:36:50:93:1E:62:7E:A3:B2:4D:DE:25:CE:13
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7A5C241E03311B5EB54EB8E1F1BB2B86663FA4D9
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402857.roa
Signing time: Sat 19 Sep 2026 16:25:22 +0000
ROA not before: Sat 19 Sep 2026 16:20:22 +0000
ROA not after: Sat 18 Sep 2027 16:25:22 +0000
asID: 402857
IP address blocks: 181.214.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Sep 2026 12:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:5c:24:1e:03:31:1b:5e:b5:4e:b8:e1:f1:bb:2b:86:66:3f:a4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 19 16:20:22 2026 GMT
Not After : Sep 18 16:25:22 2027 GMT
Subject: CN=D923359B1385943650931E627EA3B24DDE25CE13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:57:d9:18:5b:3a:45:1d:7a:7d:dc:24:d0:ee:
85:a6:ba:3b:f3:8b:9c:ce:f9:ab:1b:c5:37:4f:e4:
ca:ff:a4:03:88:d7:85:59:84:d7:cc:69:22:25:4b:
a6:f5:95:81:be:0c:f4:07:ec:3b:fa:2f:d9:42:dc:
d7:5d:dc:9e:6f:43:e2:df:46:05:f5:19:9e:87:c4:
aa:6b:4d:d0:9d:08:d1:eb:82:98:49:63:f7:b1:fc:
4a:d8:06:9d:9c:42:1d:ea:9b:20:81:ec:10:26:62:
16:8c:70:b8:ab:30:d2:b9:8a:77:79:e3:9c:0a:1c:
b9:28:4a:bc:4c:8b:69:77:ec:82:c4:7d:38:2e:df:
cd:64:3f:0d:74:91:3e:a0:86:41:a6:f0:20:82:6d:
a7:91:7f:24:18:ff:68:d6:0d:91:19:05:05:5b:ae:
d8:5d:ad:9c:4a:d5:52:52:cd:c2:d6:ef:8e:54:d6:
e2:e6:f7:14:0d:41:84:0e:13:79:b7:b2:5c:64:f4:
18:ad:81:85:e2:b3:f3:b5:55:2b:2b:2f:01:59:64:
b2:19:04:11:f7:41:5a:60:0b:d1:43:32:20:15:85:
cc:1b:f9:e5:cf:85:62:d5:2c:13:e9:40:6f:9b:07:
e2:c2:5c:61:b4:13:5c:fe:98:c2:e5:d7:a6:86:c5:
29:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:23:35:9B:13:85:94:36:50:93:1E:62:7E:A3:B2:4D:DE:25:CE:13
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.182.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:61:38:69:91:96:04:53:a8:a1:3d:d8:13:06:dc:f0:f2:04:
67:54:99:a0:ad:e2:86:8b:74:ec:b8:5d:70:87:d0:96:22:79:
13:88:12:0f:31:27:53:89:a4:c7:58:58:71:eb:00:dc:38:f2:
77:29:95:5c:49:77:ee:25:61:f3:ad:80:2c:86:c6:f7:a2:47:
db:47:79:4b:cd:76:ab:db:83:59:6e:fb:86:97:c7:0f:ad:ee:
42:ad:98:db:f2:35:d1:22:9a:91:0b:1e:0d:84:26:01:1e:4c:
9e:43:d8:11:7c:9a:11:6f:2d:a1:66:9b:94:c2:a8:e0:6d:f7:
2e:06:49:bb:61:3f:97:8e:d0:69:a5:22:4a:aa:3f:c3:fe:31:
76:99:09:f2:d2:fd:ab:a5:61:e0:f0:46:1a:f7:e6:19:96:d1:
74:22:09:ec:bd:d9:a1:3e:cb:dd:f1:68:c8:08:d1:36:b7:5c:
58:5a:b4:57:b6:a4:b7:f7:d3:cb:37:62:1e:e9:80:45:c6:b8:
e6:dc:51:e9:1a:ff:13:f5:a1:62:6f:36:a7:1d:79:f2:f0:30:
c4:cb:52:95:2b:01:77:d6:b7:52:ba:3e:52:95:7b:f7:e8:5c:
f8:63:ef:96:ed:0d:99:17:c1:7e:18:72:b4:9c:b7:a3:ab:8a:
b2:64:89:ea
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUelwkHgMxG161Trjh8bsrhmY/pNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA5MTkxNjIwMjJaFw0yNzA5MTgxNjI1MjJaMDMxMTAvBgNV
BAMTKEQ5MjMzNTlCMTM4NTk0MzY1MDkzMUU2MjdFQTNCMjREREUyNUNFMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlV9kYWzpFHXp93CTQ7oWmujvz
i5zO+asbxTdP5Mr/pAOI14VZhNfMaSIlS6b1lYG+DPQH7Dv6L9lC3Ndd3J5vQ+Lf
RgX1GZ6HxKprTdCdCNHrgphJY/ex/ErYBp2cQh3qmyCB7BAmYhaMcLirMNK5ind5
45wKHLkoSrxMi2l37ILEfTgu381kPw10kT6ghkGm8CCCbaeRfyQY/2jWDZEZBQVb
rthdrZxK1VJSzcLW745U1uLm9xQNQYQOE3m3slxk9BitgYXis/O1VSsrLwFZZLIZ
BBH3QVpgC9FDMiAVhcwb+eXPhWLVLBPpQG+bB+LCXGG0E1z+mMLl16aGxSmrAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU2SM1mxOFlDZQkx5ifqOyTd4lzhMwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDAyODU3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtda2
MA0GCSqGSIb3DQEBCwUAA4IBAQC1YThpkZYEU6ihPdgTBtzw8gRnVJmgreKGi3Ts
uF1wh9CWInkTiBIPMSdTiaTHWFhx6wDcOPJ3KZVcSXfuJWHzrYAshsb3okfbR3lL
zXar24NZbvuGl8cPre5CrZjb8jXRIpqRCx4NhCYBHkyeQ9gRfJoRby2hZpuUwqjg
bfcuBkm7YT+XjtBppSJKqj/D/jF2mQny0v2rpWHg8EYa9+YZltF0IgnsvdmhPsvd
8WjICNE2t1xYWrRXtqS399PLN2Ie6YBFxrjm3FHpGv8T9aFibzanHXny8DDEy1KV
KwF31rdSuj5SlXv36Fz4Y++W7Q2ZF8F+GHK0nLejq4qyZInq
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:30:42 2026 by rpki-client