Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/891-zjcUcgl5ZiM7IddcNSdSSKo.roa
File: 891-zjcUcgl5ZiM7IddcNSdSSKo.roa (raw, json)
Hash identifier: bCF+6ZAmLWoixoGq5KzfVO7Uvi6tMHWq0fb2qT8uA4A=
Subject key identifier: F3:DD:7E:CE:37:14:72:09:79:66:23:3B:21:D7:5C:35:27:52:48:AA
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0D0BBCDE26FC00784D5BF82E7BCD82660
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/891-zjcUcgl5ZiM7IddcNSdSSKo.roa
Signing time: Thu 24 Sep 2026 00:06:03 +0000
ROA not before: Thu 24 Sep 2026 00:06:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 109.65.37.0/24 maxlen: 24
109.65.53.0/24 maxlen: 24
109.65.88.0/24 maxlen: 24
109.65.101.0/24 maxlen: 24
109.65.140.0/24 maxlen: 24
109.65.151.0/24 maxlen: 24
109.65.188.0/24 maxlen: 24
109.65.190.0/24 maxlen: 24
109.65.199.0/24 maxlen: 24
109.65.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Oct 2026 11:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:bb:cd:e2:6f:c0:07:84:d5:bf:82:e7:bc:d8:26:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 24 00:06:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3dd7ece371472097966233b21d75c35275248aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:3e:5a:f6:39:04:12:0c:1d:98:87:23:59:
c7:54:f9:c2:fa:89:24:63:6a:38:92:87:fd:3c:ec:
8a:6d:9e:22:57:6d:4f:f4:f9:86:87:e4:9f:49:60:
9c:e6:9e:72:fe:7f:5f:57:1a:c7:45:b7:97:6e:b0:
06:f5:0a:6e:b3:2d:41:88:51:46:06:1e:44:f5:b0:
13:4d:51:85:48:3f:d4:ed:94:83:7d:d0:68:2e:c1:
0f:53:d8:31:06:cc:63:e5:5f:25:61:9a:1a:4a:2f:
8b:23:3a:ae:2e:db:c6:85:0c:ff:48:30:4c:08:a8:
00:62:51:33:ee:23:38:5e:b0:fa:e0:e5:c8:0a:a2:
27:5e:4c:9f:32:10:df:0b:50:d5:63:1b:11:c4:19:
54:a9:60:b0:a2:2f:65:75:4f:38:91:fb:37:ed:54:
5f:25:2d:31:4a:eb:c6:2b:56:9f:a9:5d:aa:75:46:
ce:92:a2:cb:52:70:4a:0d:c4:c2:c1:a1:07:7e:ea:
27:d6:30:74:dd:1e:13:74:c4:11:7b:b4:68:cc:3f:
f5:96:63:1f:08:b9:3d:ff:a4:36:1e:f8:90:17:0a:
9c:85:99:b5:51:f1:4d:6a:dd:3f:e1:b9:12:9c:ee:
80:15:17:20:10:30:70:81:f0:f6:cf:87:66:d2:24:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DD:7E:CE:37:14:72:09:79:66:23:3B:21:D7:5C:35:27:52:48:AA
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/891-zjcUcgl5ZiM7IddcNSdSSKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.65.37.0/24
109.65.53.0/24
109.65.88.0/24
109.65.101.0/24
109.65.140.0/24
109.65.151.0/24
109.65.188.0/24
109.65.190.0/24
109.65.199.0/24
109.65.205.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:02:2c:06:e3:b2:2f:99:83:20:09:31:6a:22:e8:e6:15:de:
da:9a:bd:41:b7:e4:9a:01:75:77:76:68:5d:4d:23:57:f0:eb:
29:36:5d:27:ad:ef:eb:54:2d:a4:8b:7f:94:28:96:b9:96:7e:
6b:29:98:90:6d:2e:6c:32:76:67:31:49:2c:d2:e5:1f:82:e9:
e6:22:1d:05:1f:9c:14:59:d8:45:81:d2:36:3c:a2:13:7b:53:
b8:12:d5:01:c9:17:2f:e9:9b:d8:2a:79:ac:28:8c:a1:d7:6d:
38:1e:4e:91:ea:f7:32:ee:3e:10:da:7e:1c:83:db:f8:2d:cb:
bf:6e:c6:3a:a9:e7:0c:dc:d5:a2:14:a4:63:ab:d5:16:9a:95:
74:31:43:e2:05:a1:4e:79:0c:2f:79:56:80:14:fd:56:69:07:
80:d1:e7:11:b7:cc:9a:41:c5:a7:a6:bc:13:fd:2a:a9:f6:83:
ab:49:57:00:94:fd:86:84:14:d6:bf:3f:93:57:82:89:b9:0e:
a4:51:63:b0:63:c4:80:a9:c2:f2:76:df:04:bb:49:9a:1b:c6:
ec:aa:8e:86:98:e4:e2:2e:74:18:b8:c9:04:c2:7f:00:3e:42:
61:57:35:29:a4:55:86:30:7a:43:e5:a4:87:e6:13:69:d3:71:
f2:56:01:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 23:16:39 2026 by rpki-client