Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9_0BL-m4sRdvtZ_zHIQNJ-Xsurc.roa
File: 9_0BL-m4sRdvtZ_zHIQNJ-Xsurc.roa (raw, json)
Hash identifier: 0MeO4GtKZe+3ksyhkGW8sGDnMqaxRqGOJd8lX5AcDCU=
Subject key identifier: F7:FD:01:2F:E9:B8:B1:17:6F:B5:9F:F3:1C:84:0D:27:E5:EC:BA:B7
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019D68837BE3506B06BD4CCEA9F83E9C57BA
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9_0BL-m4sRdvtZ_zHIQNJ-Xsurc.roa
Signing time: Tue 07 Apr 2026 15:15:40 +0000
ROA not before: Tue 07 Apr 2026 15:15:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19c:1eac:7d76/128 maxlen: 128
2001:67c:64:ffff:0:19c:2f30:cc98/128 maxlen: 128
2001:67c:64:ffff:0:19c:4770:2527/128 maxlen: 128
2001:67c:64:ffff:0:19c:5298:96f7/128 maxlen: 128
2001:67c:64:ffff:0:19d:aea:d31a/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 07 Apr 2026 16:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:83:7b:e3:50:6b:06:bd:4c:ce:a9:f8:3e:9c:57:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Apr 7 15:15:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7fd012fe9b8b1176fb59ff31c840d27e5ecbab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:aa:2d:67:43:c6:52:db:82:9c:59:fa:93:
01:cd:ca:be:75:7f:9c:6e:82:1a:1e:e8:2a:af:97:
a8:ee:bd:96:75:21:7d:99:e0:f3:e6:d9:5c:7e:b0:
65:45:f4:22:89:f1:28:f7:da:22:fb:87:4d:34:38:
c7:a3:e9:15:33:b6:4b:1e:fa:c6:4c:d5:93:0c:72:
60:f1:ac:1a:dc:20:03:1b:d9:a0:b1:2a:3e:80:65:
47:7f:cc:96:d9:37:2b:66:68:3c:40:e6:5a:48:b3:
73:f5:c6:61:54:fa:26:55:78:89:b3:c4:8d:8b:cb:
cb:c8:ed:be:7b:e1:5a:aa:f8:05:40:f9:f8:8b:d7:
46:cb:9b:7f:6f:41:fd:a3:e1:75:8b:ed:d8:54:30:
71:17:00:3a:8a:e6:7f:8b:ac:89:cb:cc:e1:96:ab:
7e:52:d0:78:70:d3:ca:d3:27:df:d8:c0:07:f8:c2:
26:f6:5d:98:89:1e:58:3a:d6:d1:77:35:10:3b:07:
1f:18:66:c2:6d:49:46:cc:72:eb:7b:1e:b3:d9:43:
8b:5c:0c:16:de:22:81:26:4f:de:66:a9:ea:e9:0b:
52:3f:c8:08:89:c0:e6:cf:e3:62:aa:4b:74:4d:2d:
d0:49:7c:19:75:a3:cf:2c:11:f5:e2:15:c6:16:7e:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FD:01:2F:E9:B8:B1:17:6F:B5:9F:F3:1C:84:0D:27:E5:EC:BA:B7
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9_0BL-m4sRdvtZ_zHIQNJ-Xsurc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19c:1eac:7d76/128
2001:67c:64:ffff:0:19c:2f30:cc98/128
2001:67c:64:ffff:0:19c:4770:2527/128
2001:67c:64:ffff:0:19c:5298:96f7/128
2001:67c:64:ffff:0:19d:aea:d31a/128
Signature Algorithm: sha256WithRSAEncryption
5a:6f:54:80:44:9a:5d:1e:56:ae:6a:ea:2a:ea:e6:f6:ac:d6:
2f:e2:f4:56:eb:76:4e:e6:20:5f:24:09:f4:d8:b3:bd:36:fa:
62:31:1f:6d:6e:de:77:f8:92:59:b9:7c:be:81:4e:11:35:5d:
a2:42:18:5c:39:e5:c5:04:53:ed:f8:a8:79:93:e5:7e:ab:d4:
a9:62:75:2c:b4:57:e6:67:33:48:aa:b9:2e:96:d6:eb:0c:52:
88:7e:72:d6:96:1b:19:1a:a8:58:b0:2d:4b:73:8d:d4:52:fb:
fa:c2:5b:16:d8:64:c0:2d:0c:6b:cb:fd:5a:21:d1:8f:de:93:
83:fd:b2:48:ad:ec:ac:38:19:0e:88:67:75:f7:31:8e:ba:87:
f3:7b:b4:97:78:2c:39:82:11:f4:c9:e1:66:fd:72:25:ca:a3:
a9:c9:34:b4:91:a7:7a:03:94:7b:eb:7d:b8:98:37:40:3b:6e:
dd:0b:96:e5:95:e5:c2:a7:48:93:ac:2c:d8:dc:a0:8b:1f:e1:
7c:db:b2:32:e6:3b:a2:17:8e:af:73:c9:08:3e:57:30:01:c1:
d9:33:d2:36:e8:d4:32:50:f7:af:b3:0b:85:e4:fc:51:b3:5c:
12:0c:d7:75:10:00:de:4e:69:f3:d8:99:d8:48:e7:0b:88:79:
34:d0:ee:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:56 2026 by rpki-client