Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/lOfQEvwoGb6EUzR8igepatl8tR0.roa
File: lOfQEvwoGb6EUzR8igepatl8tR0.roa (raw, json)
Hash identifier: UIorciYUX/cQU7EzhNShktkOU5HOrFanh5Tg0ubMaOM=
Subject key identifier: 94:E7:D0:12:FC:28:19:BE:84:53:34:7C:8A:07:A9:6A:D9:7C:B5:1D
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 01A0D3536A7BC7D62B8EC2EEF97549371BE5
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/lOfQEvwoGb6EUzR8igepatl8tR0.roa
Signing time: Thu 24 Sep 2026 12:10:54 +0000
ROA not before: Thu 24 Sep 2026 12:10:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19e:da2f:ee0a/128 maxlen: 128
2001:67c:64:ffff:0:19f:8f4a:394a/128 maxlen: 128
2001:67c:64:ffff:0:1a0:a9ac:7586/128 maxlen: 128
2001:67c:64:ffff:0:1a0:aed2:ffb0/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 24 Sep 2026 13:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:53:6a:7b:c7:d6:2b:8e:c2:ee:f9:75:49:37:1b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: Sep 24 12:10:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94e7d012fc2819be8453347c8a07a96ad97cb51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:6d:a0:bb:57:b9:5a:92:3b:2d:23:41:40:
8e:9e:bd:d5:94:bf:fb:ed:67:fe:b6:5e:4f:37:e5:
01:dc:16:48:a0:40:ea:33:9e:67:cc:61:3a:bf:90:
d9:5e:04:0e:f1:5a:1a:51:2e:7f:32:33:50:dd:9d:
88:c2:6a:f7:a4:e8:7e:d7:e7:4e:11:d3:cd:91:21:
fe:54:9c:03:cf:87:e5:23:d2:fb:83:53:cf:c1:f0:
75:3b:78:b6:51:ae:b1:67:94:af:fe:6a:b0:0e:3d:
ac:42:a0:c6:1b:64:f1:5e:99:39:54:91:d3:42:52:
03:c8:92:24:44:65:0f:7a:83:ff:c3:85:b9:17:6f:
34:8e:62:90:2c:cd:84:77:48:b2:34:8b:72:d4:c1:
11:c5:7d:91:db:a7:fb:49:96:d6:d4:3a:c3:58:94:
9b:a5:93:db:a2:ff:77:75:fc:32:07:f9:b5:47:23:
6f:7c:3f:f5:78:79:db:16:11:1a:45:a3:08:d4:34:
b7:1a:5e:38:58:44:91:ca:cc:e3:bf:63:27:e1:b9:
b1:b5:56:e3:e3:dd:6e:95:0d:8d:2f:df:d2:66:66:
38:7f:58:d6:85:3d:f1:76:ab:13:8f:ee:87:07:12:
29:26:41:73:3d:30:01:36:45:56:2f:b9:1d:f6:f7:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E7:D0:12:FC:28:19:BE:84:53:34:7C:8A:07:A9:6A:D9:7C:B5:1D
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/lOfQEvwoGb6EUzR8igepatl8tR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19e:da2f:ee0a/128
2001:67c:64:ffff:0:19f:8f4a:394a/128
2001:67c:64:ffff:0:1a0:a9ac:7586/128
2001:67c:64:ffff:0:1a0:aed2:ffb0/128
Signature Algorithm: sha256WithRSAEncryption
04:a7:9b:04:98:bc:ab:92:09:fa:2f:95:b4:b5:bb:8e:a5:f0:
a8:76:38:d0:de:ed:7c:bb:99:06:ca:2a:0b:9d:ee:1d:75:0f:
06:10:eb:47:6e:1f:60:57:d9:bc:06:13:cf:b2:d4:49:5d:9b:
7a:d8:67:e9:b8:26:20:2f:e2:e7:d8:1d:23:3b:de:6e:d2:d3:
4e:9b:df:c7:c0:78:e0:b3:b1:87:43:18:73:b9:35:f2:c7:b5:
89:33:2d:dd:74:e4:2e:7a:91:af:6d:cd:b8:15:8a:a7:c5:ce:
b1:c7:2d:d9:cf:e7:0a:e5:fd:6d:d9:e8:62:1f:53:6c:1d:50:
88:a2:91:bc:f2:13:24:43:08:18:c9:ec:e9:9e:04:e0:9e:79:
15:f5:d8:2f:d5:59:1a:c4:24:75:34:61:7e:10:c7:d5:a7:1e:
e5:29:2a:1d:97:cc:59:ec:98:90:33:96:fb:97:81:bc:ca:8d:
41:31:57:36:73:d5:f1:72:82:94:35:9c:53:fc:76:21:a0:c0:
5b:fc:9e:fb:86:14:a3:d5:cc:27:b1:90:83:97:f6:8a:02:d7:
db:8b:05:32:45:e8:f5:54:ca:d9:f2:cf:f2:08:57:0a:99:5c:
d1:d8:ec:40:47:ba:9a:d3:ef:9d:1f:9e:ce:64:f3:49:7c:69:
9c:32:8a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:41:54 2026 by rpki-client