Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/ND0zHlZPRmISe8Pglvf0NjnhDc4.roa
File: ND0zHlZPRmISe8Pglvf0NjnhDc4.roa (raw, json)
Hash identifier: psoLYxREzi9y6AKl2u8LND9Sc1qskH01oPinuxzFM+0=
Subject key identifier: 34:3D:33:1E:56:4F:46:62:12:7B:C3:E0:96:F7:F4:36:39:E1:0D:CE
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 01A10E541EE38769BEC51FBE3EAC38CBFA2C
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/ND0zHlZPRmISe8Pglvf0NjnhDc4.roa
Signing time: Mon 05 Oct 2026 23:09:16 +0000
ROA not before: Mon 05 Oct 2026 23:09:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19e:da2f:ee0a/128 maxlen: 128
2001:67c:64:ffff:0:19f:8f4a:394a/128 maxlen: 128
2001:67c:64:ffff:0:1a0:a9ac:7586/128 maxlen: 128
2001:67c:64:ffff:0:1a0:aed2:ffb0/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 06 Oct 2026 00:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:54:1e:e3:87:69:be:c5:1f:be:3e:ac:38:cb:fa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: Oct 5 23:09:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=343d331e564f4662127bc3e096f7f43639e10dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:91:d8:b8:72:27:1d:3b:c5:e5:25:c6:05:
67:72:d7:f0:68:00:20:fa:22:e6:0f:fe:db:4e:0e:
f1:33:cd:9f:cd:ed:01:e8:14:06:38:35:85:05:46:
5f:93:2c:15:04:07:b0:48:a5:ce:c2:4f:6d:ee:c3:
fd:a3:52:a6:ae:29:6b:8a:9f:90:f5:f6:12:60:b0:
49:f7:82:18:78:26:3a:cc:13:5b:a7:5e:f2:d8:46:
63:f5:f1:5b:1e:7f:03:7b:76:82:bf:62:b3:41:49:
94:5b:1c:02:a8:47:d6:72:77:de:ba:29:21:4c:c5:
c0:d1:f1:2f:d2:7e:60:15:0e:55:16:50:76:ad:e8:
b8:6d:7c:0a:3c:8f:60:f5:00:50:44:a9:51:6d:ea:
e7:90:09:8a:09:a2:1b:1e:56:1d:05:3a:33:13:55:
8e:ac:44:b7:40:28:fc:6f:ad:c7:28:70:7e:fa:22:
a8:fd:f0:2d:1f:f9:45:1a:40:fb:c0:75:5a:3f:0e:
3f:ad:51:a3:f6:c6:51:e1:73:0d:d7:86:59:6b:f0:
95:e9:aa:45:cf:c0:96:e1:0f:b8:59:52:ee:95:9c:
34:18:c3:bc:ab:2c:51:cf:9d:a1:31:90:01:ee:7b:
35:13:fc:54:1e:2b:8b:ed:23:21:13:7b:88:6d:e3:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3D:33:1E:56:4F:46:62:12:7B:C3:E0:96:F7:F4:36:39:E1:0D:CE
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/ND0zHlZPRmISe8Pglvf0NjnhDc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19e:da2f:ee0a/128
2001:67c:64:ffff:0:19f:8f4a:394a/128
2001:67c:64:ffff:0:1a0:a9ac:7586/128
2001:67c:64:ffff:0:1a0:aed2:ffb0/128
Signature Algorithm: sha256WithRSAEncryption
3e:75:84:d6:2a:0a:f1:5d:12:e9:4f:86:09:4b:c4:b3:e8:9a:
9e:09:ed:eb:c4:b7:32:1f:d6:be:8e:d0:5d:9a:2d:0a:32:30:
74:36:87:1b:16:57:b1:65:61:e5:1d:f7:6f:2c:12:fd:fb:24:
6e:1d:3e:8f:ff:b9:88:f6:97:82:b3:45:68:a9:30:d0:24:a6:
ac:ed:b4:b8:e9:e8:fa:c1:5c:72:f8:4b:b7:80:94:43:bc:fc:
73:f3:49:86:37:e2:7d:47:8b:0f:32:b9:aa:cd:dd:85:2a:cd:
74:47:05:db:22:0c:86:96:34:37:db:ed:8e:dc:ee:5e:57:05:
65:3f:97:b4:4e:e5:19:1b:ad:ab:53:73:e0:26:3a:1d:9c:32:
5b:62:69:2e:68:08:5b:24:64:c6:70:82:fc:91:2f:87:f9:ce:
26:46:0a:bc:0a:06:41:20:58:7a:5f:90:95:d3:80:33:16:9f:
62:b0:59:9f:8a:bc:ea:4b:c1:e6:d0:9f:d6:68:7a:23:47:19:
b3:d6:48:d9:e0:92:e1:22:47:4b:86:39:84:bc:a9:18:22:81:
51:49:e6:1c:fe:e1:31:d8:f2:46:54:0e:58:6e:11:53:f7:d7:
8f:bc:21:7b:b8:3f:2d:7a:c2:a4:59:e8:65:50:33:63:d6:e6:
3e:8e:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:37 2026 by rpki-client