Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214901.roa
File: AS214901.roa (raw, json)
Hash identifier: g+lPSGYx0j183r1LB0lU3go+kglRCUHGcsCHi8l/Pec=
Subject key identifier: 90:60:8B:D0:ED:88:2E:51:59:FD:1F:CF:6E:F7:EA:4C:12:08:16:13
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 297E642D7AC20B895E23E435C53AA5C4575D6B97
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214901.roa
Signing time: Wed 04 Nov 2026 20:32:45 +0000
ROA not before: Wed 04 Nov 2026 20:27:45 +0000
ROA not after: Wed 03 Nov 2027 20:32:45 +0000
asID: 214901
IP address blocks: 2a0e:8f02:f070::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 04 Nov 2026 21:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:7e:64:2d:7a:c2:0b:89:5e:23:e4:35:c5:3a:a5:c4:57:5d:6b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:45 2026 GMT
Not After : Nov 3 20:32:45 2027 GMT
Subject: CN=90608BD0ED882E5159FD1FCF6EF7EA4C12081613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:55:68:d1:08:a2:bd:1a:aa:b7:b3:62:11:76:
ca:85:4d:1c:ac:25:61:a2:6c:a9:85:9f:86:ec:75:
17:3e:6a:ac:3c:dd:52:5c:d4:b7:fa:6c:30:43:c0:
5a:b1:fa:f1:18:3c:65:c7:29:ac:c4:73:77:e0:0b:
30:72:f3:3e:2a:49:43:40:1d:f5:90:2d:6f:96:2a:
85:67:14:08:bd:b4:c0:73:95:92:a8:9b:41:9a:da:
6a:c3:f5:18:69:ae:79:45:ed:98:2d:99:58:5b:11:
22:52:49:ed:d0:f3:4f:9e:57:ee:a9:19:ee:cb:7b:
69:27:67:d6:db:1c:70:aa:63:68:db:04:29:e5:ea:
c0:ee:d3:eb:3d:98:68:e7:bf:d2:be:98:82:fa:43:
ce:a7:7f:dd:87:cb:6e:70:55:b5:b9:50:f3:f1:bd:
0e:51:c5:e2:91:85:c8:a2:4c:b8:c6:a0:64:87:9f:
34:5c:89:85:cf:99:42:4a:08:64:e2:f8:11:31:4b:
c4:d4:66:42:a8:96:4a:d9:ab:2c:e9:d4:99:26:e9:
50:90:5e:e2:68:39:38:22:11:dc:66:dc:cf:f0:45:
aa:8e:28:cd:1e:df:6a:18:17:9e:01:1c:d5:63:77:
eb:26:0f:9b:34:b1:8f:1d:89:ff:16:5c:8f:3c:75:
32:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:60:8B:D0:ED:88:2E:51:59:FD:1F:CF:6E:F7:EA:4C:12:08:16:13
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214901.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f070::/48
Signature Algorithm: sha256WithRSAEncryption
25:5a:0c:3b:e8:3e:06:c3:67:1f:30:3b:ee:d5:92:f3:2c:01:
00:99:97:40:fe:b1:a8:18:85:de:0e:ac:c0:aa:1b:81:d3:73:
25:7b:d1:72:85:d0:06:9e:5d:62:41:cd:ab:ab:15:bf:01:e0:
d3:33:99:6a:ff:0e:9d:ef:48:da:60:bd:b6:64:07:22:3b:a6:
d4:74:70:2e:9d:13:c5:0e:1f:26:e5:6f:d0:98:75:4d:ba:f3:
f3:c4:2a:22:a4:8e:0a:e9:22:10:1e:ba:a7:d0:28:eb:4c:a1:
38:e4:30:e4:85:c9:18:21:b5:4c:82:8c:f6:eb:20:4f:37:26:
06:23:c6:0e:d9:de:f7:24:19:d4:69:87:d0:75:53:1c:18:2d:
07:e6:09:b4:06:18:67:ff:3a:5f:45:e8:80:f2:f7:b6:58:62:
4b:79:d4:f0:42:b0:4b:17:27:8d:ad:75:44:a5:34:09:b7:ef:
3a:fe:bc:2d:ea:ab:7a:75:2c:79:3b:87:7b:ff:2a:7d:7c:56:
af:40:48:d3:c9:e4:e9:55:46:f4:5c:a7:ca:c3:43:3e:2c:8d:
db:f6:30:16:04:79:bb:35:8e:5e:df:9c:05:e5:7a:b2:36:b6:
4a:87:5f:80:32:99:81:ba:d1:ed:58:97:01:12:ee:ab:f2:f0:
9e:01:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:00:09 2026 by rpki-client