Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/_0JTwNAlW1yblvxXw_OlRlZ0deI.roa
File: _0JTwNAlW1yblvxXw_OlRlZ0deI.roa (raw, json)
Hash identifier: jdnRk7XRByIGO5MUj76u1KFau/e0SMtkwjorOwHXylA=
Subject key identifier: FF:42:53:C0:D0:25:5B:5C:9B:96:FC:57:C3:F3:A5:46:56:74:75:E2
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0C490511EA2ACEFCE4F18B64137C30481
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/_0JTwNAlW1yblvxXw_OlRlZ0deI.roa
Signing time: Mon 21 Sep 2026 15:23:07 +0000
ROA not before: Mon 21 Sep 2026 15:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 79.180.10.0/24 maxlen: 24
79.180.77.0/24 maxlen: 24
109.64.210.0/24 maxlen: 24
109.66.12.0/24 maxlen: 24
109.66.13.0/24 maxlen: 24
109.66.16.0/24 maxlen: 24
109.66.42.0/24 maxlen: 24
109.66.52.0/24 maxlen: 24
109.66.53.0/24 maxlen: 24
109.66.57.0/24 maxlen: 24
109.66.129.0/24 maxlen: 24
109.66.134.0/24 maxlen: 24
109.66.167.0/24 maxlen: 24
109.66.177.0/24 maxlen: 24
109.66.207.0/24 maxlen: 24
109.66.210.0/24 maxlen: 24
109.66.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Sep 2026 01:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:90:51:1e:a2:ac:ef:ce:4f:18:b6:41:37:c3:04:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 21 15:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff4253c0d0255b5c9b96fc57c3f3a546567475e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:8f:72:de:9e:78:cc:32:12:4f:0b:5e:5f:
3c:e7:38:b5:bc:6c:f9:87:09:dc:f8:0d:11:df:48:
f8:2d:0d:aa:2d:88:55:a8:1c:f0:e7:1f:10:7a:03:
6f:4a:a5:8d:36:d0:07:36:28:8d:96:09:a9:5b:de:
65:83:57:88:33:83:f7:f5:4d:62:13:43:42:08:cc:
aa:8f:97:38:89:28:f8:44:6b:63:05:57:3c:aa:85:
b4:42:b9:25:83:4f:37:3b:74:56:e2:75:84:e7:d7:
03:e2:0e:7c:9a:78:44:e1:e8:4a:38:35:32:12:ff:
ea:be:3d:da:a4:ab:4a:9d:d6:8c:f7:cd:54:eb:12:
9a:27:d6:72:2b:ba:3f:8c:0d:ab:a9:03:ed:f9:1a:
63:f2:3a:a2:c7:37:3b:ed:3f:6a:ff:4d:b7:95:82:
b8:30:30:d1:e3:93:14:96:d5:bc:65:3d:06:db:e3:
5d:92:a2:26:a2:60:4f:0d:69:c5:b1:ab:c7:45:65:
80:92:78:2f:57:82:e8:3d:47:66:ef:59:35:4b:e4:
fa:73:b4:1b:ea:7d:96:8d:65:7c:82:cb:cb:b2:50:
c1:b0:a2:7e:80:26:52:51:f0:ed:a3:8e:b9:e3:f0:
f4:86:ee:15:c5:6f:fd:d5:3d:a8:99:ad:a1:1a:6d:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:42:53:C0:D0:25:5B:5C:9B:96:FC:57:C3:F3:A5:46:56:74:75:E2
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/_0JTwNAlW1yblvxXw_OlRlZ0deI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.180.10.0/24
79.180.77.0/24
109.64.210.0/24
109.66.12.0/23
109.66.16.0/24
109.66.42.0/24
109.66.52.0/23
109.66.57.0/24
109.66.129.0/24
109.66.134.0/24
109.66.167.0/24
109.66.177.0/24
109.66.207.0/24
109.66.210.0/24
109.66.242.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1f:72:60:68:80:68:1f:b9:33:c0:6d:9d:80:52:b1:35:d3:
6c:29:41:06:7b:5e:c8:93:11:7a:35:12:02:19:9e:b9:a3:a2:
ab:99:e5:c7:1e:c8:17:10:85:05:ba:00:51:3e:c9:73:b8:5a:
e4:19:3f:50:09:c6:6f:9d:f0:70:d2:7e:c7:55:24:d8:fd:f7:
65:57:5b:57:97:dd:0b:f9:56:8d:84:f1:d6:70:9f:60:2e:10:
12:f5:37:63:b3:f4:89:86:1c:d6:95:a4:f3:f9:93:70:7f:80:
de:b6:12:a8:0f:9c:76:99:ad:4d:59:a4:9a:a5:46:df:96:26:
08:b9:29:61:ec:3a:c9:23:2e:55:5d:7d:db:eb:94:94:69:66:
14:f2:66:16:d7:26:b5:6f:6e:a3:7f:37:8d:e2:11:33:be:5a:
2d:78:9f:7c:01:72:59:b9:3c:91:b7:93:b0:6c:4a:97:11:e1:
86:72:5e:e2:e4:45:77:24:ac:67:3d:b7:da:89:90:96:31:50:
35:92:88:4c:79:46:6a:a1:af:5c:76:cd:e7:75:cc:fe:72:eb:
ee:e9:72:dd:af:63:81:56:32:ad:2e:bb:e5:6c:28:ce:b4:a8:
63:51:1c:92:09:55:bb:b9:d5:79:b4:33:70:d3:0e:33:6d:8e:
e7:2a:19:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:46:03 2026 by rpki-client