Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fzqM6KaA8OjuH3hyJpcfMXd1VC8.roa
File: fzqM6KaA8OjuH3hyJpcfMXd1VC8.roa (raw, json)
Hash identifier: 5Pl2uUDcu4OZqYLWoVh+vsy+qXA02eFDqUb0AfyKPw8=
Subject key identifier: 7F:3A:8C:E8:A6:80:F0:E8:EE:1F:78:72:26:97:1F:31:77:75:54:2F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0BBDB03AD7008330D3F883CA5CEABFBBF
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fzqM6KaA8OjuH3hyJpcfMXd1VC8.roa
Signing time: Sat 19 Sep 2026 22:48:07 +0000
ROA not before: Sat 19 Sep 2026 22:48:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 194.231.135.0/24 maxlen: 24
194.231.138.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
194.231.159.0/24 maxlen: 24
212.189.85.0/24 maxlen: 24
212.189.89.0/24 maxlen: 24
212.189.96.0/24 maxlen: 24
212.189.97.0/24 maxlen: 24
212.189.98.0/24 maxlen: 24
212.189.99.0/24 maxlen: 24
217.8.200.0/24 maxlen: 24
217.8.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Sep 2026 14:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:db:03:ad:70:08:33:0d:3f:88:3c:a5:ce:ab:fb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 19 22:48:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f3a8ce8a680f0e8ee1f787226971f317775542f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:b1:d1:fb:9a:5f:73:87:3c:34:09:79:a1:
2e:43:91:5c:94:6f:c4:f5:a3:e6:b0:3d:a3:6b:0d:
c5:d8:79:3a:63:8d:8e:4b:e2:5e:2b:e8:2d:46:d2:
65:7f:cb:27:ee:a7:f2:a9:60:4c:da:30:fe:54:93:
ea:e3:94:90:c9:bd:3c:b9:f4:f9:0d:52:d6:2a:0e:
11:b0:5d:ce:84:10:df:b1:49:ce:99:19:0b:b2:ea:
f4:c3:5c:f9:7b:31:6c:a3:59:58:52:b2:67:5a:c0:
84:9b:69:29:62:30:f6:87:c4:f1:2f:bb:3d:9b:47:
a2:ee:a4:4a:d2:a7:bd:70:d4:ea:96:63:9e:5a:ee:
6d:4f:80:b1:7f:06:ee:25:e8:8e:bb:bc:f3:74:cc:
63:05:c9:f7:a2:ef:2c:17:ad:ec:fe:d9:a6:5b:ca:
e3:e9:5a:3d:f1:0e:a1:96:3d:b0:0f:cc:f5:ac:50:
d7:2b:76:7a:55:29:88:68:94:5b:46:64:e1:f7:25:
6d:98:c7:73:5c:af:8f:1c:fa:c9:92:12:d1:d7:ab:
94:e2:65:1f:c3:54:ed:2b:64:4d:75:44:c1:6d:5f:
6d:6a:d6:54:7f:ea:7e:cb:e5:38:d1:ea:99:50:6b:
f0:b1:c1:0a:08:84:10:53:3b:93:a6:b9:c7:0c:12:
e2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3A:8C:E8:A6:80:F0:E8:EE:1F:78:72:26:97:1F:31:77:75:54:2F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fzqM6KaA8OjuH3hyJpcfMXd1VC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.135.0/24
194.231.138.0/24
194.231.154.0/24
194.231.157.0/24
194.231.159.0/24
212.189.85.0/24
212.189.89.0/24
212.189.96.0/22
217.8.200.0/24
217.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
51:89:c6:2c:de:9e:f9:b7:09:e5:72:e2:d8:70:20:ec:78:4a:
1f:70:eb:66:4f:27:cc:28:6f:e5:fc:35:10:1d:8d:36:19:64:
e7:b4:b3:93:d6:19:57:f4:02:d9:02:ab:71:ff:ab:74:4a:f0:
ba:3c:ee:3a:1f:4a:3d:3c:e6:27:52:77:15:22:5d:47:20:66:
80:d5:6b:cf:24:cd:04:ed:6f:7e:b4:a0:01:29:1d:ce:a9:60:
57:b1:10:92:04:7a:da:09:d0:c7:04:49:82:49:87:4c:8a:47:
4b:3f:d8:d9:77:b0:0b:14:7d:77:a9:d4:61:79:24:3a:bc:92:
b7:63:3b:bd:65:71:4e:18:ab:ca:d9:4d:34:51:cf:04:94:b2:
b1:bc:f0:19:87:82:02:e5:fd:9f:7e:b1:fe:cc:a9:5c:e1:4a:
c4:ab:56:8b:9c:48:98:ed:0d:55:ce:70:4c:e6:52:0b:12:1b:
48:67:87:cb:f9:eb:1a:68:dc:8c:f8:d3:ce:bd:d7:cb:8d:9c:
26:3b:43:0e:0b:33:84:eb:aa:71:63:24:28:68:98:c4:47:cf:
37:59:cb:96:df:84:f8:a3:64:eb:a2:44:73:3c:bd:67:a4:3e:
ca:ec:a5:d8:77:4b:64:98:20:82:cd:70:8f:76:94:19:50:36:
e8:95:c4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:06:28 2026 by rpki-client