Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS204214.roa
File: AS204214.roa (raw, json)
Hash identifier: DY8qhTJPxd4Qr2vQP6WEru19TPIcsV4OoFsW+i2xtpI=
Subject key identifier: CF:F1:EA:8B:C3:23:4C:EC:1E:82:64:9B:62:3A:4B:C5:04:A7:FC:E6
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 01B6B314428492B0D04BADD086E826392B23437A
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS204214.roa
Signing time: Wed 04 Nov 2026 20:32:49 +0000
ROA not before: Wed 04 Nov 2026 20:27:49 +0000
ROA not after: Wed 03 Nov 2027 20:32:49 +0000
asID: 204214
IP address blocks: 2a0e:8f02:f078::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 04 Nov 2026 21:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b6:b3:14:42:84:92:b0:d0:4b:ad:d0:86:e8:26:39:2b:23:43:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:49 2026 GMT
Not After : Nov 3 20:32:49 2027 GMT
Subject: CN=CFF1EA8BC3234CEC1E82649B623A4BC504A7FCE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:77:69:52:63:4e:23:4b:c6:bd:e5:36:89:
ed:2e:a9:fc:6c:ca:3b:04:19:78:d4:91:7b:0c:2b:
a3:13:72:92:8b:fa:f3:5a:da:e4:52:0d:e7:a6:d1:
99:55:64:f3:e2:6d:41:e4:57:56:bc:22:53:1e:e1:
58:7a:76:a0:57:8a:93:40:62:04:a5:1e:ba:c4:77:
72:2d:69:ab:2b:41:17:db:1d:c3:ac:c4:c2:f1:c6:
85:5e:89:cd:3e:a0:5b:06:2b:6e:2c:59:38:1d:a4:
d3:48:1f:63:d6:61:b7:52:15:64:bb:7c:25:c9:bc:
30:8a:83:76:20:8f:5d:75:5f:14:2f:52:42:71:b4:
53:8c:9e:2a:8f:fe:3c:f1:60:f5:3d:98:78:4c:af:
e4:6c:bf:29:70:ad:dc:a2:da:ce:fa:5f:7b:e0:6c:
a3:08:2d:9b:6f:27:90:cc:a9:82:14:1f:60:52:b7:
13:52:80:ba:02:4e:28:79:0e:7b:e5:68:89:49:5f:
b6:e4:fd:1c:7f:18:e2:07:ce:f2:a0:8d:5d:21:e7:
4e:7b:7a:93:52:0f:5e:84:98:cb:c8:7c:59:a3:d7:
bb:f4:a7:84:17:8f:69:ee:c3:c9:07:29:ef:19:b7:
e7:9c:2d:2b:21:0b:f4:18:35:2a:ac:1e:f7:82:51:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F1:EA:8B:C3:23:4C:EC:1E:82:64:9B:62:3A:4B:C5:04:A7:FC:E6
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS204214.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f078::/48
Signature Algorithm: sha256WithRSAEncryption
9b:a3:eb:7a:f6:1c:a9:b6:8c:56:e4:51:99:50:04:3e:3e:74:
a0:74:1e:09:7d:09:19:19:9d:87:a6:d9:0b:40:93:ea:29:67:
3e:8d:6b:bf:05:a8:5d:97:00:b9:5d:fc:bc:89:53:0d:d1:c8:
9b:aa:0e:55:4b:60:49:de:5f:3b:ad:ab:7f:83:94:d2:68:ff:
11:c9:39:bd:1a:6c:60:18:6c:27:16:dc:e8:2a:ad:99:88:a7:
65:ed:68:3f:f8:9e:20:e0:68:c6:df:20:05:0d:3c:ad:80:b1:
fd:0c:26:7f:d9:1c:15:77:9f:b9:97:4c:6d:69:1a:3a:4c:b8:
a3:44:2c:bf:0f:b3:19:26:fe:47:34:f6:5d:53:e7:31:b9:b7:
29:fb:4a:f2:aa:b6:2f:a3:7c:29:f5:cb:9c:f1:28:c3:bb:b4:
40:f1:43:5d:94:f5:99:eb:59:c5:91:da:18:bd:ae:ae:2c:3e:
d8:f5:da:3a:c2:f4:17:32:2f:51:00:6f:ab:0b:d7:6c:ac:ec:
70:14:da:b5:72:49:81:56:17:09:fc:5c:7b:98:29:03:0f:8e:
cb:a8:22:ab:05:3a:98:bf:1b:c8:c6:f6:91:5e:c7:c9:cc:28:
31:a4:f9:c6:1d:aa:a0:4d:ee:82:3f:72:d3:16:96:1f:81:8f:
d0:4f:26:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:00:10 2026 by rpki-client