Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/4Yrp_qCgoupMxK4Laz3oYvjlC3w.roa
File: 4Yrp_qCgoupMxK4Laz3oYvjlC3w.roa (raw, json)
Hash identifier: jEE/tfGP8nZsICdzVsEVkL35Zk6w3hnvaMEFX+kWRCU=
Subject key identifier: E1:8A:E9:FE:A0:A0:A2:EA:4C:C4:AE:0B:6B:3D:E8:62:F8:E5:0B:7C
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 019F9106901E0A9073798DCFA702F8A43A82
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/4Yrp_qCgoupMxK4Laz3oYvjlC3w.roa
Signing time: Thu 23 Jul 2026 22:09:14 +0000
ROA not before: Thu 23 Jul 2026 22:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19e:da2f:ee0a/128 maxlen: 128
2001:67c:64:ffff:0:19f:8f4a:394a/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 23 Jul 2026 23:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:06:90:1e:0a:90:73:79:8d:cf:a7:02:f8:a4:3a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: Jul 23 22:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e18ae9fea0a0a2ea4cc4ae0b6b3de862f8e50b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:f7:b4:bd:51:41:75:95:14:df:f7:5b:31:
c1:4d:9d:6c:ed:71:4f:18:fd:3a:15:2b:f3:10:76:
ee:21:fe:4e:33:4c:ae:52:bd:6a:81:69:6b:c2:27:
2b:85:65:97:d4:e7:6f:67:c4:c9:0f:5b:aa:fd:01:
18:d0:1e:1f:f2:91:a2:4b:6e:0b:3d:75:04:45:1b:
a2:82:33:93:ba:5d:46:17:82:e4:5a:f6:7c:fc:4e:
83:62:e6:85:5c:56:73:64:53:12:98:56:aa:aa:49:
58:18:fa:1c:94:28:08:41:eb:e6:db:34:ab:ea:59:
c5:c3:f0:f1:a6:a6:df:8e:e7:f1:9d:a0:75:c7:56:
40:a7:96:54:1a:f0:1b:bd:98:2a:43:11:7e:e2:58:
bf:02:d0:a7:8b:19:6d:80:c2:83:c3:59:fc:1f:2e:
82:db:ee:2d:0d:a5:9e:7e:40:f5:0e:73:1b:68:23:
93:7b:d3:52:ae:07:5e:17:5e:3e:31:e2:c9:9b:43:
e7:de:db:95:cb:54:d5:60:11:7e:ef:55:b7:50:91:
f6:74:dc:01:68:e4:1a:02:ca:49:19:bc:b8:38:a1:
d4:95:07:c1:1e:f8:6a:0a:f4:5d:70:1b:d7:fd:da:
c2:2f:e0:25:2e:f3:fe:cc:f8:3f:6c:c9:50:36:4d:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8A:E9:FE:A0:A0:A2:EA:4C:C4:AE:0B:6B:3D:E8:62:F8:E5:0B:7C
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/4Yrp_qCgoupMxK4Laz3oYvjlC3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19e:da2f:ee0a/128
2001:67c:64:ffff:0:19f:8f4a:394a/128
Signature Algorithm: sha256WithRSAEncryption
04:30:12:59:89:e5:5c:23:56:d6:39:17:de:15:c6:bd:43:d0:
5a:64:db:00:1f:e2:ed:dc:73:36:76:b2:e7:27:1a:0b:8c:40:
83:3e:4c:7e:e4:68:31:40:fe:7c:1b:00:16:ff:57:80:eb:58:
f2:af:6b:73:12:5a:98:aa:7a:b4:c6:a6:15:7b:37:c4:29:6c:
22:c7:da:8b:4e:f6:98:45:e3:64:e8:25:67:e0:28:74:a6:91:
a2:b6:a1:d1:4a:e8:83:09:0a:da:e9:32:8f:bb:1b:7f:35:ce:
69:ec:49:2b:e5:3b:79:52:58:56:4b:5a:cf:fb:8a:f6:4f:d0:
f1:6d:9f:18:96:e5:7c:79:c1:b8:9e:0f:69:55:be:82:56:48:
d9:4e:f4:f5:2f:9a:ca:c0:7f:81:7d:c7:2e:38:d6:4b:d0:49:
fe:a0:af:d5:04:19:4a:2e:4e:d8:1e:8a:3b:b3:ba:da:fc:fb:
9b:c1:52:a6:bd:f5:92:dc:03:56:99:35:2f:74:ee:0f:8e:a9:
35:a2:f0:b3:a3:de:41:f9:04:1d:ec:3e:49:aa:75:eb:81:a8:
5f:be:d6:71:eb:7f:44:e9:02:29:0a:aa:d1:a7:fb:8e:ed:1b:
cc:90:85:27:22:59:6e:2f:2b:88:9d:2a:0f:2f:58:4c:17:04:
6d:47:d5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:45:15 2026 by rpki-client