Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: S9pos6VYWyhB8FZMajik1lfeSO9FuEGEilJAdWRde9s=
Subject key identifier: 7E:67:3F:7A:B1:73:FC:24:E4:30:F1:79:99:AF:E9:0F:70:C6:3D:57
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 5FED0EFF63B5D9A93D4F045446A88F74E96C26EF
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402265.roa
Signing time: Mon 05 Oct 2026 08:38:59 +0000
ROA not before: Mon 05 Oct 2026 08:33:59 +0000
ROA not after: Mon 04 Oct 2027 08:38:59 +0000
asID: 402265
IP address blocks: 109.66.69.0/24 maxlen: 24
109.66.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ed:0e:ff:63:b5:d9:a9:3d:4f:04:54:46:a8:8f:74:e9:6c:26:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:33:59 2026 GMT
Not After : Oct 4 08:38:59 2027 GMT
Subject: CN=7E673F7AB173FC24E430F17999AFE90F70C63D57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:c0:2e:31:65:7e:e7:50:e6:47:76:fb:9f:
d0:b6:13:1e:cc:1e:14:f5:20:15:e1:4b:91:b4:9c:
98:39:85:85:96:cd:bb:da:82:49:15:78:0e:b9:66:
2b:6b:2e:10:a2:c2:38:0a:f7:4f:68:9c:11:23:30:
0b:3c:9d:7d:e6:37:90:61:bc:d4:8e:63:c1:d4:bd:
25:2f:bf:a0:00:fd:20:e7:bc:63:db:5a:cc:fc:53:
29:c6:38:ab:e4:e2:6f:8d:52:b7:1b:e3:c6:8d:0f:
bf:83:e8:e9:51:e1:cf:ef:f1:dc:de:88:19:ce:79:
20:dc:b6:b0:48:e2:85:9d:4a:52:d0:64:17:70:16:
b9:6d:cc:d7:05:fd:a3:86:d6:ee:89:94:60:0f:d7:
82:04:85:fa:79:12:37:98:46:fe:bb:a8:69:51:19:
af:8b:19:11:ab:29:9e:92:16:91:55:e2:b3:49:cc:
32:ea:78:a3:d2:c3:8c:7c:2d:02:0f:c3:ad:8b:84:
76:35:f8:92:b3:aa:40:d5:d1:cd:6c:b9:bd:73:ed:
1c:c9:21:0a:49:66:d4:01:06:39:71:57:e7:0b:7b:
c8:19:4d:01:ea:6d:0b:b8:e7:ac:0a:f7:ac:c2:44:
b9:da:42:2a:7c:fd:b2:fc:03:cd:49:2d:00:71:8d:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:67:3F:7A:B1:73:FC:24:E4:30:F1:79:99:AF:E9:0F:70:C6:3D:57
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.69.0/24
109.66.84.0/24
Signature Algorithm: sha256WithRSAEncryption
21:35:8b:ac:9f:81:a7:69:92:7b:53:bd:a2:b0:73:b2:df:41:
13:b7:50:67:8c:40:29:82:fa:8f:08:46:68:28:c1:cc:b6:f6:
c8:ca:fe:7b:e3:67:5d:f9:67:74:c8:b6:90:b4:17:bb:68:e0:
19:98:aa:ac:97:90:37:f0:5c:61:a5:78:a3:2c:99:09:a9:87:
5a:bf:a6:c4:13:64:7a:5b:e0:9d:93:20:59:99:1b:9a:69:74:
c7:73:e7:d0:82:23:4e:36:e6:43:bc:9a:ed:dc:9e:f0:fe:ef:
43:56:49:68:04:87:0f:f9:d6:0e:d5:30:3b:26:40:92:18:3a:
0e:07:78:09:5b:88:19:1a:65:b5:63:f7:da:7f:9a:9d:7a:eb:
c9:32:1d:cd:a0:a8:21:f3:2e:62:c2:66:c1:05:27:3c:9f:63:
68:2d:87:75:65:1f:94:41:54:3a:cd:db:56:03:31:9b:f6:f4:
50:e3:dc:05:a9:39:67:3a:e3:6b:67:cf:19:e4:ea:1f:c0:09:
76:70:80:cb:2b:c0:3d:ee:a0:c2:8c:a3:52:97:c3:c1:d3:76:
7e:4a:9f:aa:5b:55:0a:89:5f:7e:cd:cb:11:15:6a:ea:bd:a5:
8d:92:d5:59:7e:2a:78:c8:8f:51:e2:c2:b3:e1:92:b3:9d:d1:
bd:ac:24:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:17 2026 by rpki-client