Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402306.roa
File: AS402306.roa (raw, json)
Hash identifier: FjjNVsaFH/aYUNj1OQ/5PvJLvoE7exPcKRJQ5gG2hVk=
Subject key identifier: 86:62:3D:25:53:69:99:3B:4C:DD:56:81:9C:B7:78:D3:ED:32:5F:76
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 47DADA1766BA821E76F340E3C4CB27D1CA1F8B21
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402306.roa
Signing time: Sun 04 Oct 2026 00:51:05 +0000
ROA not before: Sun 04 Oct 2026 00:46:05 +0000
ROA not after: Sun 03 Oct 2027 00:51:05 +0000
asID: 402306
IP address blocks: 109.66.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:da:da:17:66:ba:82:1e:76:f3:40:e3:c4:cb:27:d1:ca:1f:8b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:05 2026 GMT
Not After : Oct 3 00:51:05 2027 GMT
Subject: CN=86623D255369993B4CDD56819CB778D3ED325F76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:cd:bc:7e:24:a8:9c:e3:8b:96:7b:d3:9c:
b9:40:db:16:78:b2:ea:7c:92:6e:f5:9a:64:04:91:
69:37:a4:8e:f3:c8:49:2f:a0:0a:31:1b:27:e6:25:
db:b3:b0:9b:dd:75:b8:62:51:de:e1:eb:f1:eb:bb:
01:e6:3c:1a:7c:30:ff:5b:61:81:b1:9d:a3:a5:ee:
9a:90:a6:67:39:00:69:00:84:2c:0a:34:ad:17:cf:
4b:4d:9f:71:2e:21:ed:fd:0a:17:b8:f7:b5:81:32:
3b:16:b3:66:7f:7b:49:c5:56:cd:3e:64:2f:89:58:
c8:da:e2:ed:74:6c:ac:a0:7f:4c:75:d2:26:d1:b4:
db:5b:6d:37:b5:25:57:60:b4:68:7f:2c:70:8f:78:
78:03:92:b9:19:83:b0:6a:b4:cd:19:5f:b9:4c:93:
5f:92:bc:eb:9f:cb:3a:3a:c0:b3:76:e3:04:8a:8c:
f2:ad:af:3a:e7:85:40:ce:22:d6:6c:b9:4d:dd:b1:
20:ae:2b:0b:fa:bf:19:21:16:f8:13:fd:f8:23:bb:
6d:23:b2:a7:d5:a8:b0:83:55:c3:91:84:6c:b0:e3:
fa:cf:1a:62:01:7a:6e:22:f6:90:dc:22:17:bd:5b:
0e:61:c3:86:9a:56:7b:bf:99:43:2a:d6:49:6b:35:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:62:3D:25:53:69:99:3B:4C:DD:56:81:9C:B7:78:D3:ED:32:5F:76
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402306.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:39:48:d9:43:91:78:8b:13:f2:d0:c1:af:a7:b3:56:5e:6d:
24:6f:d5:b5:5c:0c:37:9d:d8:75:0c:81:d0:aa:a2:2a:fb:09:
25:cf:65:c1:0d:d2:65:2a:dd:6b:1b:c9:62:48:e8:9a:ff:da:
2b:29:74:bc:57:36:4d:ca:e5:c0:8b:c1:17:ec:9b:c3:6d:06:
40:0c:d2:0d:51:ea:83:99:a6:92:58:ec:dc:d4:47:71:19:3a:
ba:ee:c9:a8:55:8e:5c:ea:9f:03:33:66:26:94:04:af:56:ae:
35:06:8e:b0:99:ff:13:4d:1c:81:dd:3e:fd:9b:ba:00:42:8e:
4a:0e:3b:16:4b:c6:72:91:73:ff:47:98:4e:4f:ca:67:87:f7:
1a:4d:60:93:f1:f2:4b:6a:07:c6:75:6d:ab:72:ab:35:5f:10:
10:a9:b8:92:d4:07:3a:14:88:f0:7b:ef:be:9d:ba:b0:eb:17:
0f:f6:82:b7:2f:7d:3e:28:9c:df:6b:93:ba:bb:4e:3d:40:b0:
9c:5f:08:dd:c3:ba:13:6c:a1:40:46:92:c6:c6:3d:6b:c2:c2:
ed:f7:5a:c3:f5:6a:c3:35:0e:57:ed:12:69:c2:4a:0b:1b:51:
7c:3d:06:39:06:57:00:dc:5d:db:1e:b3:9b:30:fa:d4:9c:36:
47:7b:70:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:39 2026 by rpki-client