Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS153947.roa
File: AS153947.roa (raw, json)
Hash identifier: Vd33PqrMReJyxhthPFlBlE2waiIxrPltxQl/vjuFAgI=
Subject key identifier: 9B:B9:81:C8:47:B8:E8:9D:8A:0A:0F:B7:7F:64:90:5D:3F:F3:7D:07
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6EF8FDC93B871AD3C23B27D9F7A792227AFA2261
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS153947.roa
Signing time: Wed 29 Jul 2026 02:24:46 +0000
ROA not before: Wed 29 Jul 2026 02:19:46 +0000
ROA not after: Wed 28 Jul 2027 02:24:46 +0000
asID: 153947
IP address blocks: 78.105.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jul 2026 07:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f8:fd:c9:3b:87:1a:d3:c2:3b:27:d9:f7:a7:92:22:7a:fa:22:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 29 02:19:46 2026 GMT
Not After : Jul 28 02:24:46 2027 GMT
Subject: CN=9BB981C847B8E89D8A0A0FB77F64905D3FF37D07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:1e:7f:78:ce:bf:32:67:7a:84:d9:47:dc:
19:7f:33:73:5a:70:ca:ec:92:9c:9a:98:2d:d3:86:
f2:66:fd:7e:7b:9c:a2:46:20:f3:73:60:6b:c2:1a:
19:83:51:95:cf:6c:0a:3a:fa:a3:45:af:c5:97:07:
d7:04:57:fc:9a:4b:5f:2e:25:0e:33:a5:30:27:10:
e9:af:47:15:91:a7:7a:d6:86:f2:94:fc:4f:dd:17:
66:c9:25:87:30:6e:0a:2f:7f:0f:45:8c:27:b8:b6:
cc:c9:55:fd:a8:a2:7b:70:31:84:09:4f:1a:82:8f:
65:ae:a4:c3:7a:00:27:59:f5:82:33:df:fb:a4:7f:
db:f9:16:38:0b:bf:e2:2f:c6:41:af:b4:90:ff:8c:
96:db:15:cc:38:74:06:b4:ab:ff:5c:b5:97:60:3a:
34:2c:c0:71:62:e6:3f:ea:e9:a3:f4:ad:e5:fc:87:
e6:2f:94:06:f0:44:2d:87:d1:65:ba:34:c2:73:d3:
f1:6e:4f:90:f6:23:6d:b5:13:22:63:d5:45:32:84:
be:cc:f4:a3:68:38:c9:e8:80:29:54:38:50:5f:f9:
f3:15:81:6e:b6:23:f8:0b:f5:be:27:b0:cd:c7:97:
82:8a:97:48:7b:de:9f:fd:6a:04:84:87:d0:c5:78:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B9:81:C8:47:B8:E8:9D:8A:0A:0F:B7:7F:64:90:5D:3F:F3:7D:07
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS153947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.141.0/24
Signature Algorithm: sha256WithRSAEncryption
70:82:0d:6a:7b:06:ac:d2:e6:58:c3:a9:ae:15:43:64:79:1b:
7f:d2:05:0a:37:96:24:c7:96:81:13:3b:a4:30:8c:07:15:82:
b1:8a:f6:de:0e:0a:f8:7c:26:dd:dd:da:63:73:cb:6e:55:03:
37:4d:36:b5:a1:6c:e9:5e:e1:c9:4b:07:bd:2d:e2:1f:89:b7:
ab:63:d8:9b:96:85:56:c7:dd:39:8e:ce:c7:40:56:e2:be:19:
d7:2c:39:eb:55:09:8f:da:3e:60:4d:62:d1:d2:61:f2:0c:78:
38:8c:a9:03:5a:70:dd:13:b6:7d:f3:0f:d4:10:c7:5e:91:54:
a4:67:ab:71:d3:64:94:c4:1d:7f:22:54:70:46:77:7f:83:8b:
94:d2:3b:8c:34:9b:ef:9d:5e:c8:53:c0:74:dd:64:29:c1:bd:
35:fc:ee:c4:3a:11:56:d0:ba:f0:71:45:f9:23:c5:9e:2f:61:
a6:2c:96:3c:8e:a6:95:ff:4c:fa:a5:c5:9b:ac:11:34:38:b9:
7f:69:7f:6d:50:9e:bd:99:8d:1c:4e:97:c2:cd:89:ec:27:53:
81:b7:78:34:45:43:47:dd:a3:39:28:1f:26:ea:43:1e:90:3f:
0a:52:42:95:a1:0a:df:34:22:e6:48:e5:d4:0b:8e:bb:23:39:
83:8c:8a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:47:53 2026 by rpki-client