Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS142240.roa
File: AS142240.roa (raw, json)
Hash identifier: z2xnlnCLR1vlDA2+Oxelo48ONO6QuKZRfHeE0N8qijo=
Subject key identifier: 3B:49:0B:A8:1C:D9:2E:B8:64:88:BA:BF:96:10:7D:B2:E8:CC:50:6E
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 281C83FA26AD09078A8F06FB1F305A6A8A43234A
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS142240.roa
Signing time: Tue 22 Sep 2026 03:01:14 +0000
ROA not before: Tue 22 Sep 2026 02:56:14 +0000
ROA not after: Tue 21 Sep 2027 03:01:14 +0000
asID: 142240
IP address blocks: 82.139.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Sep 2026 09:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:1c:83:fa:26:ad:09:07:8a:8f:06:fb:1f:30:5a:6a:8a:43:23:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 22 02:56:14 2026 GMT
Not After : Sep 21 03:01:14 2027 GMT
Subject: CN=3B490BA81CD92EB86488BABF96107DB2E8CC506E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:1b:ea:e4:ad:ad:b9:ef:d2:11:2c:ee:85:
cd:a3:1c:1d:c7:23:14:74:b4:bb:21:62:50:fe:aa:
28:d2:a3:e0:c6:05:4e:30:da:48:cb:63:0a:67:ef:
2c:f6:be:92:40:76:ac:ee:58:69:46:a4:17:44:dc:
94:e1:d7:58:c1:74:bf:f7:9d:b9:ac:eb:4e:47:4a:
bb:35:fd:18:3c:3f:88:d5:92:c1:38:01:bd:fd:66:
c5:3a:46:2b:bc:a0:47:e0:98:2f:71:7b:66:29:c2:
32:ae:51:41:90:c6:fb:1c:ff:20:8f:8e:b2:eb:15:
fe:8e:98:5d:59:d3:a4:e1:58:78:c3:c5:2d:c8:cc:
85:62:f7:e2:f0:31:f4:1a:95:90:3f:b1:2f:63:c2:
07:a4:6c:7b:4a:46:c6:99:ce:7b:bf:fc:59:c0:e8:
de:ce:83:2b:9a:20:01:ef:e5:ed:2a:54:92:6f:fe:
b8:5f:c4:2b:c8:82:36:50:3d:17:ef:19:25:ae:15:
14:e1:fb:63:08:fa:a3:e8:d7:6c:d3:78:1c:2e:af:
d7:b6:36:d8:21:81:9a:44:7a:9e:da:15:f6:48:ef:
f2:22:a7:cc:c3:9d:a7:1b:85:b4:a8:d4:6c:0c:35:
ce:75:e7:c3:49:f1:e5:24:37:82:8a:6b:42:33:fa:
9c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:49:0B:A8:1C:D9:2E:B8:64:88:BA:BF:96:10:7D:B2:E8:CC:50:6E
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS142240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.244.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b9:c8:15:ac:22:e3:8c:2f:46:fa:c7:94:17:53:9c:ad:41:
89:73:86:5f:14:2f:7c:4c:4f:79:fb:c9:66:c4:87:99:58:75:
22:0d:56:3b:2c:ea:3b:96:b1:2e:63:ed:26:84:95:3a:81:af:
57:8c:e7:7e:f5:4c:29:c9:a1:ca:ab:45:e0:bd:37:1e:f7:c8:
8f:e9:ca:0f:73:69:64:31:80:e4:e3:02:90:46:84:e6:0a:5f:
c8:a8:1f:9c:ee:42:33:9f:da:9b:69:c0:da:c8:62:79:f2:c9:
36:48:a2:44:f4:d5:c7:53:bf:dd:7c:b9:64:17:d2:d0:7b:55:
b6:19:3b:cb:80:02:92:17:2b:1d:02:f9:d3:3a:3b:1a:72:59:
6f:56:24:35:ae:4b:46:4e:bd:24:10:cf:c6:8c:77:97:fd:06:
77:dd:f4:4a:66:bd:5a:6b:76:ec:8b:5a:0a:c7:03:fd:38:2d:
48:cb:8b:f0:6e:96:e7:6b:0f:0f:86:0b:fb:4d:61:ad:09:a5:
94:37:df:7c:46:4e:7a:43:65:11:45:9a:3d:8a:e3:42:7b:3e:
aa:54:4a:db:fb:d3:1c:65:8b:f0:e5:64:a7:24:c8:3f:88:89:
e8:20:37:6c:e9:68:8f:4e:3a:40:c7:1e:53:39:80:ee:8e:41:
1b:9f:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:27:30 2026 by rpki-client