Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZwMK5mzimumCRCDzXzYHnFn9lHw.roa
File: ZwMK5mzimumCRCDzXzYHnFn9lHw.roa (raw, json)
Hash identifier: i0JSpmmz0/O4R6v7vJSCzPoxXzzajcsuQKSPkxXzT4Q=
Subject key identifier: 67:03:0A:E6:6C:E2:9A:E9:82:44:20:F3:5F:36:07:9C:59:FD:94:7C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0DD57CFDCFB9476DB5B229B604A94FFB5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZwMK5mzimumCRCDzXzYHnFn9lHw.roa
Signing time: Sat 26 Sep 2026 10:51:54 +0000
ROA not before: Sat 26 Sep 2026 10:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 109.121.44.0/24 maxlen: 24
178.219.4.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.148.0/24 maxlen: 24
188.255.164.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Sep 2026 08:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:57:cf:dc:fb:94:76:db:5b:22:9b:60:4a:94:ff:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 26 10:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67030ae66ce29ae9824420f35f36079c59fd947c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:f4:96:ee:8f:10:a7:da:32:05:99:81:72:
c2:4f:74:90:c1:cf:5a:c2:5b:67:22:c3:6d:09:83:
05:ff:9e:bb:a8:53:76:d3:14:1a:06:b6:42:42:3a:
a8:a2:75:8e:7d:c3:c4:80:45:5f:e7:4d:9e:ec:60:
e7:39:e3:36:ee:b8:b5:2c:51:8d:1c:2a:74:09:7c:
11:bd:e9:24:dd:05:16:33:8d:94:b9:ee:2e:4f:85:
cc:b9:2d:04:b9:4c:23:10:23:d8:a6:a1:28:83:a3:
81:27:f8:dc:ef:15:af:4c:c2:27:6c:07:e3:53:5e:
24:d1:a8:5c:2e:e1:7c:6d:79:b3:58:37:ea:db:03:
a7:27:e5:7c:2f:3d:15:c2:90:5b:25:05:15:7a:96:
55:d1:fc:03:d3:fd:8d:20:77:b4:de:c1:b8:f5:b5:
c7:c6:00:72:83:84:35:ff:25:16:a2:ba:f1:5c:ed:
21:9e:3d:0e:c6:6d:10:9d:1f:85:f8:14:a3:1d:3d:
e1:05:29:53:31:59:16:85:b5:24:44:de:f2:b7:17:
db:f1:5d:78:f5:a3:1a:eb:57:58:bb:fa:7c:a9:ce:
4a:65:a1:a2:0c:df:d4:b5:88:22:b3:4f:8f:26:1e:
22:9a:b3:59:68:86:6b:f5:54:83:16:99:be:ce:03:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:03:0A:E6:6C:E2:9A:E9:82:44:20:F3:5F:36:07:9C:59:FD:94:7C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZwMK5mzimumCRCDzXzYHnFn9lHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.44.0/24
178.219.4.0/24
178.219.6.0/24
185.47.91.0/24
188.255.148.0/24
188.255.164.0/24
188.255.198.0/24
188.255.247.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:93:ff:6e:18:26:cb:8e:17:ef:3b:09:41:20:f5:cb:5b:91:
48:6b:bf:d8:1d:6b:81:ac:6c:2f:24:20:b7:96:74:ca:8d:1f:
6e:62:f7:78:3f:b3:b1:aa:22:33:03:92:08:25:b2:f1:1b:38:
f5:76:f4:cd:c9:2b:cf:ed:73:79:0e:d3:66:9a:64:ac:53:ba:
70:52:a7:ef:0e:b6:1c:e6:5b:67:3f:e4:04:e0:0d:de:d4:ba:
f1:32:79:40:3d:ac:8a:1a:3c:ec:3e:b8:73:cc:72:1d:ef:b1:
53:f2:8f:de:32:64:a2:c7:ae:48:0f:43:83:95:2b:ee:66:d5:
60:a8:05:60:b7:68:06:8f:46:d3:6d:23:83:87:12:35:2f:b0:
5a:5b:6e:a3:95:17:27:22:6e:45:db:87:a2:07:84:47:9c:2d:
cd:62:5d:8f:a0:96:a9:b6:b1:9c:13:eb:fd:49:b9:7f:51:87:
d1:ac:78:29:65:6c:a8:e6:03:42:2c:23:55:30:15:92:fa:f0:
8b:47:36:d6:88:70:ba:9b:fc:d5:9e:e5:3a:3e:b9:d0:38:00:
18:58:b5:b2:fa:aa:f4:ba:30:88:00:e3:55:29:ec:3f:73:e7:
a8:93:60:d9:81:80:cc:57:e6:c9:f9:b9:3a:e3:1e:3d:54:56:
47:59:2c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:09:40 2026 by rpki-client