Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: CSIAf7B7/Srkflp20rgu+TkBLhQJ0eTIfTayDNE3aMs=
Subject key identifier: A9:AD:B4:B7:BB:92:DF:7A:1F:99:BA:BD:72:9E:99:AB:FA:E7:10:A2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 373E2EE1C10E87A21486063BBE84960AEE4F7BC9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401362.roa
Signing time: Tue 20 Oct 2026 07:41:20 +0000
ROA not before: Tue 20 Oct 2026 07:36:20 +0000
ROA not after: Tue 19 Oct 2027 07:41:20 +0000
asID: 401362
IP address blocks: 168.222.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Nov 2026 08:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3e:2e:e1:c1:0e:87:a2:14:86:06:3b:be:84:96:0a:ee:4f:7b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 20 07:36:20 2026 GMT
Not After : Oct 19 07:41:20 2027 GMT
Subject: CN=A9ADB4B7BB92DF7A1F99BABD729E99ABFAE710A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:cc:98:6d:67:58:18:00:c2:ef:2f:b0:8f:
20:e4:e6:a6:7a:6e:81:95:72:20:fd:fc:23:cc:2a:
64:7a:72:df:c3:c2:3e:6a:55:76:7e:54:60:60:67:
93:cf:0f:47:57:07:d1:0c:44:59:d2:1d:c9:b5:19:
b5:27:6c:5b:6f:11:41:ac:80:7a:55:aa:97:1d:61:
05:76:54:33:50:25:16:b0:11:1d:74:ba:b4:f3:b6:
a4:e4:3b:f2:b6:07:ac:dc:36:a0:18:68:cd:9d:0d:
4e:e5:8a:77:86:5f:68:cc:88:94:60:0e:5f:57:f8:
38:f8:d4:e8:d4:6a:e1:35:08:03:b7:89:98:d1:a9:
3c:17:2b:45:76:ca:6b:6a:8b:21:03:2f:92:4b:96:
63:04:eb:df:c7:96:3f:3d:64:43:9f:5f:b5:42:87:
74:27:53:27:e0:5f:83:d1:df:f6:72:d0:9d:69:6b:
a3:ff:1c:b8:46:73:2b:b5:44:1f:e6:f6:ec:a8:22:
bf:b5:9b:68:f0:74:37:df:fe:66:ce:9b:97:32:41:
4f:a7:5a:1b:c2:71:a6:34:d3:78:1b:94:c8:18:34:
a8:b6:e0:14:f0:6f:f9:67:43:d9:a7:8b:83:13:9d:
46:28:de:9f:e9:04:22:2f:ea:b3:ca:83:dc:16:a7:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AD:B4:B7:BB:92:DF:7A:1F:99:BA:BD:72:9E:99:AB:FA:E7:10:A2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.54.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b3:a7:51:0a:27:a8:e2:7c:2d:cd:9e:26:b1:4b:b2:d8:fc:
6b:ed:b2:6d:91:d7:43:22:0a:17:c6:5e:a5:63:cc:68:f2:45:
dc:13:04:80:d3:ab:0d:3a:c6:7c:0f:ea:94:d9:18:85:05:65:
02:ad:32:a2:b1:42:41:68:f4:f3:18:ed:f4:9c:1c:3d:53:d9:
2c:11:3f:52:be:81:db:1c:94:cb:60:dc:7d:41:c8:15:b9:48:
ce:ca:d8:4a:62:31:4a:5d:08:a9:41:e1:e8:1a:7b:34:50:f3:
2d:49:ff:10:91:e8:03:2b:33:3f:4c:0b:4b:bb:f7:61:17:9b:
d2:12:02:2d:fb:21:be:74:8d:90:ec:b6:f9:fc:81:01:d9:d3:
fe:25:c3:b1:2f:7d:79:3f:0b:e2:a9:26:ca:e6:c4:3f:2c:0e:
8a:43:94:fb:37:f6:5f:8b:b7:9f:85:1e:43:1e:98:6f:6f:65:
23:ba:4b:14:7a:6f:98:dd:87:0c:b0:10:80:69:68:46:ed:ed:
73:28:c6:2f:4c:43:7e:5d:a8:95:0b:d5:79:76:40:52:0f:e0:
b5:ea:d9:eb:2f:ba:ad:f0:ec:ff:7a:bd:4a:a1:86:43:67:0c:
58:6b:1c:f9:d8:81:df:8b:53:88:bd:4d:fe:a5:ad:68:43:d0:
84:c7:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:14:38 2026 by rpki-client