Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS131689.roa
File: AS131689.roa (raw, json)
Hash identifier: ZB8i5hJw2hr65YcaWqUN5bUhmKeGOf68LHucL1lR86E=
Subject key identifier: 51:19:BD:23:4B:65:DA:05:10:9D:A6:5E:E5:55:9B:2C:64:37:3F:B9
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 51C73AC35C73ED99ABB6EE2D1F74B7C55B246AE2
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS131689.roa
Signing time: Sat 21 Feb 2026 02:05:02 +0000
ROA not before: Sat 21 Feb 2026 02:00:02 +0000
ROA not after: Sat 20 Feb 2027 02:05:02 +0000
asID: 131689
IP address blocks: 45.157.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Mar 2026 04:59:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c7:3a:c3:5c:73:ed:99:ab:b6:ee:2d:1f:74:b7:c5:5b:24:6a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Feb 21 02:00:02 2026 GMT
Not After : Feb 20 02:05:02 2027 GMT
Subject: CN=5119BD234B65DA05109DA65EE5559B2C64373FB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:8b:9a:5a:63:9f:ca:19:ee:f6:ca:fc:43:
42:44:98:bb:3d:69:f5:3b:11:51:3f:2b:59:e7:38:
5d:06:ad:21:a1:94:98:91:59:1d:f3:60:25:39:17:
14:bc:b6:20:29:2f:4b:17:27:f9:f6:85:ca:43:5d:
c5:37:df:43:66:2b:21:5d:a5:7f:d9:bb:2e:1a:52:
dc:10:79:c5:2c:0e:5d:1b:2f:9f:d4:58:9f:21:04:
66:31:5e:04:e6:fd:71:40:6a:3e:ed:60:13:29:05:
0d:8e:f4:6f:41:20:60:4e:26:0a:63:c6:0f:16:cd:
f2:93:32:38:5a:74:28:e3:ad:c3:83:44:68:11:28:
19:f3:84:f3:62:b7:c1:79:4d:a9:b3:00:05:7a:ca:
f5:0e:72:c9:7e:a2:67:93:df:58:68:95:f6:1c:fe:
da:b6:79:2c:1f:1e:9a:13:29:f6:21:a6:08:70:f8:
d8:33:a4:c1:ad:b5:50:c4:c5:35:62:93:8e:d1:dd:
af:5d:04:96:c3:5d:fe:d8:35:24:3c:04:3c:87:8b:
1b:57:3b:3a:8f:da:e6:9d:c7:63:ee:b9:4c:23:dd:
3d:6d:3e:89:99:0f:6f:94:60:75:76:8a:fe:2a:fc:
56:68:76:e0:d0:99:34:e6:7a:09:1f:1d:6e:a4:71:
a7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:19:BD:23:4B:65:DA:05:10:9D:A6:5E:E5:55:9B:2C:64:37:3F:B9
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS131689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.18.0/24
Signature Algorithm: sha256WithRSAEncryption
54:67:15:f4:e7:a2:ff:40:40:6c:df:e4:fe:32:3a:ed:a2:93:
0f:08:b4:3b:1d:a2:e3:10:66:34:80:cd:c7:2c:97:f9:df:3c:
45:b3:63:2e:47:cd:e4:88:df:88:78:76:8d:37:dd:37:2d:e8:
d7:d9:33:90:cc:47:27:13:a4:3a:39:ba:47:14:fd:55:d2:7a:
ad:fd:71:77:90:5a:36:62:40:9f:a6:88:78:68:f3:02:c1:4f:
a6:bb:22:14:91:3e:13:0c:d3:5f:60:27:bd:00:db:3e:ba:0a:
21:ed:43:95:f2:61:ab:fa:a9:c1:b3:5a:8d:c9:7f:98:b4:f5:
e5:25:9b:c7:ed:30:64:b4:8f:4c:d7:07:a4:a6:2f:ef:bc:74:
1b:fe:bf:dc:a1:f7:82:e7:b2:0d:7c:86:9c:49:8c:1b:3a:86:
97:85:2a:7d:2e:29:5f:68:98:ff:60:91:c9:e6:32:bf:a3:90:
0c:cf:1f:9e:f8:05:f7:39:85:96:00:94:0d:1f:82:45:47:3a:
9a:64:d3:e4:7f:78:0f:9a:a7:de:b4:ee:2e:6b:2c:0b:d9:f2:
85:e3:99:3c:68:f6:3f:87:e5:3c:b8:bb:48:98:3c:5b:53:a9:
ad:df:1f:90:19:79:a8:0f:95:2e:ec:fa:ed:8b:b2:cb:b7:ea:
41:11:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:58 2026 by rpki-client