Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: afftldYqCPzJUMt2PVX9yIGN+a92P8t9RyyypSZHvnI=
Subject key identifier: 36:98:C9:28:5C:E1:84:90:1A:AD:83:86:84:21:99:59:05:DE:30:8E
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 10A45C3AA63BD476EA82A574C7DCD590E162551E
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402215.roa
Signing time: Sun 04 Oct 2026 00:51:03 +0000
ROA not before: Sun 04 Oct 2026 00:46:03 +0000
ROA not after: Sun 03 Oct 2027 00:51:03 +0000
asID: 402215
IP address blocks: 109.64.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 08:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a4:5c:3a:a6:3b:d4:76:ea:82:a5:74:c7:dc:d5:90:e1:62:55:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:03 2026 GMT
Not After : Oct 3 00:51:03 2027 GMT
Subject: CN=3698C9285CE184901AAD83868421995905DE308E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:2e:ab:7f:43:16:10:78:47:cf:4b:b0:49:
36:a6:fa:8a:81:e9:be:a9:6b:bc:6b:e2:72:7e:51:
9b:15:d4:42:fe:9f:7d:13:a7:66:33:86:b2:ea:b7:
cb:e8:b8:98:43:a9:29:0b:d7:57:b2:0c:a7:d5:32:
df:22:89:b9:2f:d7:29:f0:53:50:bb:2a:4c:26:a7:
70:e0:ff:80:07:59:1b:12:ed:31:ed:48:5c:3a:44:
65:a7:09:ae:34:53:87:60:55:e6:f6:cf:53:81:73:
31:38:83:c5:2e:65:cf:cf:e9:da:a1:49:7a:bc:b9:
ad:0d:e2:7f:da:d2:1d:60:aa:90:51:0f:1f:67:68:
b4:25:71:3b:e6:d2:53:fd:98:cb:32:d2:be:21:49:
99:22:64:66:55:09:73:3a:60:ee:a9:62:45:15:a3:
7e:75:f7:77:bc:f5:5e:6e:53:55:9d:f8:29:97:a4:
23:68:43:b4:5a:df:f0:11:d2:f5:49:86:f0:32:a9:
be:0a:6e:d8:c1:00:79:c4:c8:71:c6:8a:14:96:27:
fa:f8:a9:fe:f9:e4:1c:9e:10:5b:ce:b2:1e:ba:fd:
06:6b:f2:07:73:0a:b4:b9:39:54:8a:c6:f8:28:2c:
a0:a8:96:a3:79:0a:58:b1:01:8b:b5:44:f4:ac:30:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:98:C9:28:5C:E1:84:90:1A:AD:83:86:84:21:99:59:05:DE:30:8E
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.64.0.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5d:e5:16:98:aa:58:7e:54:c9:11:e4:1a:35:89:31:4e:ed:
2c:48:02:b1:91:d3:72:db:15:78:1e:c2:94:d3:e2:4d:eb:00:
4f:68:2f:0f:b3:9e:90:e3:ab:06:50:34:86:b4:94:90:63:ed:
93:f4:82:53:a7:3e:88:39:22:9c:3b:d9:9a:d4:cc:52:55:4d:
fc:66:5d:ee:09:c9:f2:42:40:9d:9f:91:f2:83:7c:55:f1:2b:
22:8b:b2:2a:ed:61:cf:c1:81:9f:d4:e9:82:70:e6:59:8f:8d:
a9:0e:8a:9d:9d:c9:57:d1:37:cb:a7:31:3f:25:16:8b:92:e3:
23:15:31:94:7c:13:42:36:df:9b:ee:3e:b1:01:af:47:e2:be:
2d:11:8b:d4:ea:2b:e7:6b:53:7c:4d:2d:a1:5b:19:db:22:e8:
7a:4c:2e:46:80:b7:d1:42:97:bd:bd:f1:01:0a:d2:b9:b8:6c:
5b:64:98:59:ab:c1:dc:2d:b9:72:11:6b:f4:4b:df:ef:1e:cb:
d9:fb:b7:a8:f9:26:55:eb:a6:11:27:56:c9:7c:00:fd:4c:83:
37:15:34:9b:e2:80:ce:6e:5f:92:52:07:be:cd:08:9e:87:f6:
7f:0b:14:ac:59:56:1c:d4:50:d9:79:4f:1c:45:1c:74:ea:fc:
8a:69:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:34 2026 by rpki-client