Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/gE8zgTFeQaUVHk-_po6Nl7m55mA.roa
File: gE8zgTFeQaUVHk-_po6Nl7m55mA.roa (raw, json)
Hash identifier: Xr4/qU2O6EMcb/NTQbFXisJsxxGpjPegHDb2pEMa+fU=
Subject key identifier: 80:4F:33:81:31:5E:41:A5:15:1E:4F:BF:A6:8E:8D:97:B9:B9:E6:60
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 01A0CBD01793843349D4A92EAED0F8D90D59
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/gE8zgTFeQaUVHk-_po6Nl7m55mA.roa
Signing time: Wed 23 Sep 2026 01:10:07 +0000
ROA not before: Wed 23 Sep 2026 01:10:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19e:da2f:ee0a/128 maxlen: 128
2001:67c:64:ffff:0:19f:8f4a:394a/128 maxlen: 128
2001:67c:64:ffff:0:1a0:a9ac:7586/128 maxlen: 128
2001:67c:64:ffff:0:1a0:aed2:ffb0/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 23 Sep 2026 02:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:d0:17:93:84:33:49:d4:a9:2e:ae:d0:f8:d9:0d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: Sep 23 01:10:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=804f3381315e41a5151e4fbfa68e8d97b9b9e660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:fe:7a:83:bf:44:b0:35:a7:2e:4a:fc:ea:
d8:f1:cc:a9:c3:f5:3a:18:ea:46:59:e2:76:3e:31:
d6:d6:75:57:8b:98:e1:21:47:8f:d4:eb:97:97:23:
f4:ff:33:8d:f2:9d:36:88:0a:f8:69:7b:de:c5:d3:
f7:26:ff:fa:52:76:7e:6a:b9:95:3a:2d:3e:76:cd:
a1:c9:68:86:69:34:aa:aa:bf:39:b7:3e:66:fe:c3:
83:c9:a9:73:40:60:b0:4e:0a:25:3c:f5:40:43:2f:
54:fa:c0:83:4f:26:cb:f1:23:47:b9:32:c1:89:03:
79:af:3a:26:fa:0a:e0:45:ac:e8:2e:4d:4d:a5:d5:
22:86:a4:f1:32:cc:24:a2:63:b3:90:a3:5d:64:ef:
1f:8b:17:1e:2e:29:d9:8e:f2:2a:e6:9c:59:86:e4:
9a:4f:a5:b8:15:e4:6e:bd:ea:02:a9:c0:a6:57:a4:
19:7f:29:9a:2a:f4:8a:f7:d9:a1:f4:58:ea:00:4e:
ba:3c:8d:bd:15:67:ba:f8:a8:74:21:08:20:d4:3a:
ee:a6:9b:5a:e8:c2:e5:b0:b7:c9:06:4e:08:ef:75:
a3:e1:9b:d1:21:8d:3c:78:fd:f9:2e:5a:34:07:cb:
0b:26:81:e5:6d:c1:f1:e3:f7:7d:42:db:6a:a9:86:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4F:33:81:31:5E:41:A5:15:1E:4F:BF:A6:8E:8D:97:B9:B9:E6:60
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/gE8zgTFeQaUVHk-_po6Nl7m55mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19e:da2f:ee0a/128
2001:67c:64:ffff:0:19f:8f4a:394a/128
2001:67c:64:ffff:0:1a0:a9ac:7586/128
2001:67c:64:ffff:0:1a0:aed2:ffb0/128
Signature Algorithm: sha256WithRSAEncryption
14:aa:89:6b:d1:53:4b:2d:f0:e9:cf:5b:47:d3:0f:c4:ec:c5:
f6:52:3e:bf:b2:fa:24:72:a5:38:93:42:7d:d4:f8:2e:03:98:
ae:34:96:d2:32:6a:dd:58:47:d6:2c:e3:d5:bd:12:70:ca:89:
e9:e9:dc:12:32:f9:78:69:4a:4d:56:35:c4:e2:d6:1b:5e:46:
0a:30:33:56:41:75:9a:f4:5c:40:a2:82:d4:bd:f5:10:98:d9:
6c:b0:b1:e3:83:67:eb:fc:1d:f3:0c:dd:e7:7a:d7:6a:45:23:
b6:bc:b1:d8:b7:6a:dd:13:4a:45:e4:91:0c:a6:7c:70:52:22:
a8:f5:3c:2c:cc:99:8e:c6:49:a1:2e:41:2c:f6:5a:ec:d5:ca:
ba:c0:35:b7:21:cb:19:5b:7c:28:0f:71:bc:3b:c6:a9:e6:09:
5a:1e:b6:86:4c:9b:1d:e2:58:5d:7f:57:e9:6f:15:ac:8c:e2:
ea:bb:dd:52:9c:a7:9b:29:46:7e:c2:18:2d:2a:bf:16:41:44:
d7:e6:cc:54:49:15:6a:88:d7:81:f2:4e:c0:84:81:91:d1:1e:
52:ac:29:ad:2d:30:ee:9f:43:58:f4:8f:cf:8c:a5:76:1c:62:
6c:9a:14:81:df:3a:b0:41:82:7a:d2:da:40:56:99:49:18:5d:
6d:3c:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:50:49 2026 by rpki-client