Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/mQ0MiOqSuDuX4I22z4mXhoxaxwU.roa
File: mQ0MiOqSuDuX4I22z4mXhoxaxwU.roa (raw, json)
Hash identifier: E6YzNjvM0gE2VEZbyRNUkj55FMi+mMqp+LHFWsmxZzg=
Subject key identifier: 99:0D:0C:88:EA:92:B8:3B:97:E0:8D:B6:CF:89:97:86:8C:5A:C7:05
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 01A1186C80FDD55A1E568D439BF2624ABB3F
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/mQ0MiOqSuDuX4I22z4mXhoxaxwU.roa
Signing time: Wed 07 Oct 2026 22:12:06 +0000
ROA not before: Wed 07 Oct 2026 22:12:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19e:da2f:ee0a/128 maxlen: 128
2001:67c:64:ffff:0:19f:8f4a:394a/128 maxlen: 128
2001:67c:64:ffff:0:1a0:a9ac:7586/128 maxlen: 128
2001:67c:64:ffff:0:1a0:aed2:ffb0/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 07 Oct 2026 23:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:6c:80:fd:d5:5a:1e:56:8d:43:9b:f2:62:4a:bb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: Oct 7 22:12:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=990d0c88ea92b83b97e08db6cf8997868c5ac705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d3:eb:a1:6d:5a:2b:1c:fb:7f:fa:95:ef:44:
97:e8:7a:ba:5b:2d:3b:8d:f5:38:49:1b:97:1e:58:
d4:02:dc:d6:cd:23:be:b7:66:4f:e7:29:4c:bb:f7:
27:f0:0d:85:10:d9:e2:a7:5f:58:ab:7a:c5:de:7e:
85:39:e0:f7:33:b0:08:96:c9:e9:04:67:f4:6a:c1:
0c:b8:09:bc:f5:48:c5:95:79:36:3a:c3:cf:1d:4e:
ee:3c:10:a6:c9:2d:3d:2c:c2:a4:7d:40:eb:96:1e:
34:06:e8:04:14:ce:66:9b:29:78:99:41:c7:15:c1:
0c:97:d9:b2:2a:58:6f:20:b1:73:34:e1:e6:60:8d:
c9:e0:e4:45:6d:01:d3:fa:31:a9:0b:2e:80:ba:9a:
c7:31:cd:9e:6d:bd:10:47:f2:eb:e1:84:02:a3:52:
91:7d:6a:40:ad:54:a9:b7:3f:9d:40:c0:bd:69:07:
57:50:d8:b4:3d:02:9d:8a:40:cc:ea:eb:8b:a1:69:
c8:3a:fa:77:46:6a:91:ad:d6:aa:d6:43:76:15:c3:
61:40:81:5c:68:95:6a:6c:82:b7:44:00:e7:7b:ce:
99:60:1f:ab:b3:ba:53:40:b2:44:03:06:19:5c:75:
f5:d4:57:30:5c:aa:c8:29:6b:b3:8b:10:69:81:bc:
94:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0D:0C:88:EA:92:B8:3B:97:E0:8D:B6:CF:89:97:86:8C:5A:C7:05
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/mQ0MiOqSuDuX4I22z4mXhoxaxwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19e:da2f:ee0a/128
2001:67c:64:ffff:0:19f:8f4a:394a/128
2001:67c:64:ffff:0:1a0:a9ac:7586/128
2001:67c:64:ffff:0:1a0:aed2:ffb0/128
Signature Algorithm: sha256WithRSAEncryption
7f:4b:17:7e:52:fd:c3:3c:db:32:e8:76:14:07:85:41:32:0a:
8f:d2:b6:9d:b4:00:c3:15:b7:15:aa:fc:4e:33:83:36:51:52:
33:16:36:c0:60:ac:1f:07:eb:02:c8:59:8f:35:8a:29:50:be:
8e:6a:69:3f:6e:b6:77:e1:65:82:c3:a9:d7:a2:ab:01:8f:4b:
eb:a4:83:f6:68:04:e2:4e:3a:a4:9a:49:6c:f5:db:c2:67:fd:
bd:39:e3:58:4b:c7:69:5b:26:67:76:12:27:c3:68:cd:32:b7:
a6:02:de:fc:29:fa:26:1f:8b:bb:53:36:e6:1f:d9:c1:32:16:
19:95:96:9d:89:fe:c9:d6:27:21:0e:dc:28:00:a9:59:d5:a9:
c9:b0:9f:ef:26:78:40:ea:4c:45:35:2c:42:39:2c:ed:2b:19:
b1:4f:4c:f1:90:e7:8f:ca:21:0a:f9:85:3c:72:f3:24:cb:a0:
7e:24:82:7d:4c:78:7a:89:cb:d0:e8:fe:f9:02:ec:fa:75:f2:
39:4b:22:dc:b7:14:34:f7:17:74:45:b0:7a:67:09:84:b1:49:
58:4d:0a:b8:3d:34:a4:ad:5f:dc:05:4d:cf:cc:fa:f7:64:a2:
b0:98:bf:13:d0:c8:0a:1d:00:95:d0:33:23:3b:bc:3a:c8:27:
5e:48:c2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:03:48 2026 by rpki-client