Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402288.roa
File: AS402288.roa (raw, json)
Hash identifier: K3YJ8AZgI8zj3LbNxxpin40ZUWSdc0kI5QnFsQ5FFdc=
Subject key identifier: 46:08:7E:1D:39:B8:12:CE:FF:1F:F5:4B:7B:63:9A:94:C8:BD:AF:CE
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 0F823CD724CE0607C6A8B9961C6F18CDEB668AE3
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402288.roa
Signing time: Sun 04 Oct 2026 00:51:03 +0000
ROA not before: Sun 04 Oct 2026 00:46:03 +0000
ROA not after: Sun 03 Oct 2027 00:51:03 +0000
asID: 402288
IP address blocks: 109.66.68.0/24 maxlen: 24
109.66.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:82:3c:d7:24:ce:06:07:c6:a8:b9:96:1c:6f:18:cd:eb:66:8a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:03 2026 GMT
Not After : Oct 3 00:51:03 2027 GMT
Subject: CN=46087E1D39B812CEFF1FF54B7B639A94C8BDAFCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:35:45:a3:35:c6:47:38:b6:d8:93:ef:10:
72:38:fd:c8:a9:df:8a:2c:9a:0d:c8:f1:84:5d:34:
9e:77:f7:f2:d8:0e:54:e3:74:48:cf:28:f1:50:80:
ea:e6:2e:fc:c3:82:5e:87:6c:90:8b:30:2b:b4:71:
ee:50:34:77:8c:32:2f:10:27:3f:29:a8:22:a0:46:
f1:6b:6a:07:26:1e:ed:56:93:32:18:0e:8b:cb:8c:
0c:92:79:2e:60:0d:52:95:82:3c:c7:8c:f9:ea:2b:
2d:4c:c4:d0:9a:2d:99:8d:22:65:56:90:91:f5:40:
6c:4f:19:69:43:de:1c:cd:40:f5:65:14:d2:3c:ad:
f9:b4:56:46:0d:80:c4:89:80:db:bb:dc:07:e8:ab:
20:24:ad:63:8c:cf:7b:17:c0:8f:c7:a9:bc:b1:e6:
b8:7e:9f:dc:b9:ab:c4:48:67:2b:04:4c:90:09:24:
30:21:bd:5f:ea:f6:d6:7c:97:31:63:10:72:02:10:
5b:9e:8e:38:db:c1:07:33:61:bc:1b:dd:80:e9:ca:
07:be:9b:1c:66:0b:5b:85:0a:12:8e:ec:01:ef:47:
01:23:50:30:18:44:49:d4:ba:23:0e:70:a5:1b:0f:
03:fc:f0:06:dc:a6:84:4b:ae:f3:d4:3d:a9:ba:bf:
95:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:08:7E:1D:39:B8:12:CE:FF:1F:F5:4B:7B:63:9A:94:C8:BD:AF:CE
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402288.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.68.0/24
109.66.87.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d2:1d:ad:79:4e:fb:86:58:f5:93:d8:6b:b0:db:aa:f4:97:
1b:18:f7:f0:fd:cd:d0:d5:e7:96:b6:38:08:71:f0:0c:e7:22:
4d:62:18:a7:cd:4b:bc:64:ff:28:c1:ad:de:e8:8b:26:fc:21:
de:5f:02:e5:e6:50:8c:bd:76:b7:44:d4:8d:c1:45:09:53:47:
58:94:f8:4a:e4:d4:75:31:17:a7:f7:15:38:c7:9d:f2:42:e2:
1a:72:49:22:ea:7b:01:85:09:14:ec:ee:d5:46:8c:dd:de:c8:
8b:2b:51:34:fa:0c:21:01:47:1b:fb:b7:88:3b:94:74:48:25:
19:29:75:c6:7d:ec:ad:3f:be:ca:f8:58:c4:66:82:7d:ad:97:
59:93:08:a1:5e:6a:0a:93:e4:8a:ca:0b:48:e5:82:8c:a8:38:
96:25:53:9a:32:3d:04:05:1c:6e:08:db:c7:80:af:60:dc:46:
13:01:b3:e0:ef:40:96:52:66:cd:09:30:c3:68:08:43:09:3f:
80:af:1a:46:c8:8d:93:b8:f7:c0:4b:c1:b3:c5:fd:23:d3:47:
76:ff:ff:d5:2b:6c:af:d2:97:39:61:8d:93:38:f5:39:d6:90:
b7:c4:ab:e3:f6:f4:b2:b6:4a:14:cf:50:d9:ee:92:e5:d9:14:
b2:9c:8b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:37 2026 by rpki-client