Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS40929.roa
File: AS40929.roa (raw, json)
Hash identifier: BQrjHAy9kWa7V2DLjdZ5+w5zUqYLqd+q/HA4iGPDh/k=
Subject key identifier: 4F:46:85:26:E8:73:8A:E3:C1:42:1C:8C:56:36:C4:2F:73:52:C8:55
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 7AD6B05D75A015CDD50FA76D400AD2847BA5F043
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS40929.roa
Signing time: Sun 04 Oct 2026 00:51:06 +0000
ROA not before: Sun 04 Oct 2026 00:46:06 +0000
ROA not after: Sun 03 Oct 2027 00:51:06 +0000
asID: 40929
IP address blocks: 109.66.108.0/24 maxlen: 24
109.66.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d6:b0:5d:75:a0:15:cd:d5:0f:a7:6d:40:0a:d2:84:7b:a5:f0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:06 2026 GMT
Not After : Oct 3 00:51:06 2027 GMT
Subject: CN=4F468526E8738AE3C1421C8C5636C42F7352C855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2a:a0:ac:55:dd:57:38:70:fe:07:2b:23:2a:
b2:f3:c8:48:c8:aa:5f:72:cd:28:3c:39:a9:8a:49:
f9:43:4f:ac:48:86:62:ba:c3:5b:76:b6:95:c4:9b:
0f:df:50:38:e6:f1:9e:1f:d2:2c:87:5b:90:ae:f1:
a9:1a:bf:22:57:a4:3a:d9:21:dc:61:a8:47:f2:4f:
27:f9:bb:ab:e4:11:94:b7:f5:a6:75:39:2e:41:aa:
85:e2:e6:41:03:a8:62:74:3a:43:82:ea:e3:b0:7f:
93:7c:23:74:fb:8a:b8:14:4a:72:17:a3:57:f2:dc:
f7:97:e2:1b:5e:74:5c:55:6f:2a:a9:04:25:e0:27:
c1:ec:9a:15:b5:24:0e:dc:88:bf:7f:87:36:a0:80:
20:ac:1e:5e:91:c2:fd:f5:89:ad:25:4c:3b:52:81:
f9:c2:ec:7b:fc:39:83:a7:b1:8e:ef:8b:56:fb:2e:
89:05:b2:ef:21:c0:e6:6a:f6:55:04:d2:a5:86:e0:
a6:52:42:07:0b:8e:5e:51:f5:78:b3:c1:30:ef:a5:
a2:c5:94:01:82:fd:de:c1:b0:36:c5:45:8a:e1:46:
00:0a:f9:71:a2:1b:7e:c0:d0:0f:4a:a1:59:ba:a7:
54:a5:7f:b7:45:08:53:d5:89:98:5f:90:1c:e0:50:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:46:85:26:E8:73:8A:E3:C1:42:1C:8C:56:36:C4:2F:73:52:C8:55
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS40929.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.108.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:c1:f0:63:6a:de:14:48:f6:a6:4a:7f:f7:95:d5:04:59:44:
a6:a5:8c:b3:84:c9:4d:10:93:6b:ab:cb:8e:2c:f5:3d:5d:66:
43:05:e4:4d:8d:c8:4e:f9:c0:36:c2:63:f8:49:7b:38:38:7e:
ba:a4:b7:0d:79:86:fb:c4:72:2f:ba:e3:5b:a3:66:40:0a:46:
b8:6f:53:64:22:77:ce:e4:6a:f4:4a:7e:35:d5:81:9b:73:c1:
0f:18:41:bc:82:4c:ea:5f:91:f9:82:1f:93:cf:f2:ca:da:60:
6b:43:f2:e9:4b:61:ee:ae:cf:79:ed:5a:27:30:93:0c:0f:08:
d4:00:2d:10:6c:a6:66:e6:2f:2c:34:2c:c8:c2:ab:b8:d3:57:
18:49:69:ad:46:aa:98:a5:bb:19:36:7b:ff:85:3e:58:2b:79:
7c:cc:93:fb:fc:73:04:32:83:a2:3d:d1:5b:75:17:39:64:cb:
df:d4:27:c6:26:8a:46:44:22:df:3a:8c:f7:b4:ff:dd:7f:b3:
76:ac:99:43:a9:b7:65:1d:7f:9e:22:f4:08:dd:31:94:b8:5b:
ff:1d:0b:d2:8c:87:91:b7:55:66:16:17:76:aa:81:cd:cc:6c:
2a:43:23:ad:7f:7b:d1:25:35:ae:6f:3e:68:c8:11:2d:18:e5:
48:cf:48:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:00 2026 by rpki-client