Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/pveYjPqqa33zyHJsL2HgOS81RP8.roa
File: pveYjPqqa33zyHJsL2HgOS81RP8.roa (raw, json)
Hash identifier: hkJYHCqt1h8FeEodnV/T5VcTAPQMmX14p05ilCVyqgE=
Subject key identifier: A6:F7:98:8C:FA:AA:6B:7D:F3:C8:72:6C:2F:61:E0:39:2F:35:44:FF
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 019F12DFACCE470250BE0E4F96C1241255B3
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/pveYjPqqa33zyHJsL2HgOS81RP8.roa
Signing time: Mon 29 Jun 2026 10:14:36 +0000
ROA not before: Mon 29 Jun 2026 10:14:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19e:da2f:ee0a/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 29 Jun 2026 11:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:df:ac:ce:47:02:50:be:0e:4f:96:c1:24:12:55:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: Jun 29 10:14:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6f7988cfaaa6b7df3c8726c2f61e0392f3544ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:1c:9e:68:cf:79:cb:3c:ea:1e:cb:d4:51:
86:3d:9b:9b:3b:1b:1d:b9:81:45:ef:e6:eb:f6:4f:
d7:7a:f1:e4:2b:b9:2c:9f:04:f5:d6:2d:9f:c2:62:
f4:7a:33:c8:8f:0c:d9:f9:a8:27:81:d8:a4:62:5b:
7a:22:7c:b7:3b:66:29:2c:2a:55:c5:8e:02:9c:84:
dc:0b:6d:6c:38:ed:48:d9:f1:96:19:41:aa:0e:6e:
bb:71:2e:d6:76:f5:a3:1f:07:b8:e5:2a:a6:21:16:
48:5c:a0:99:86:e8:65:32:38:0b:f9:69:cf:9e:de:
9c:c7:b5:72:e1:68:9b:9c:17:b8:03:a3:fc:7f:8e:
7e:5a:a7:a1:ad:a0:fa:50:49:d5:90:ac:99:db:48:
b4:d6:c4:cc:76:19:60:77:e1:15:ee:eb:70:4e:03:
b2:ed:25:a7:48:38:45:df:bb:27:23:00:57:14:5c:
ad:5d:ac:49:5f:22:6e:e5:2f:82:ec:bc:0a:5a:af:
16:ba:94:30:55:81:28:0f:05:5f:31:8f:bc:46:19:
72:91:e6:a6:6d:af:45:aa:bc:c2:fb:06:51:ab:11:
06:db:1b:d1:3b:dc:a5:6a:0e:36:a2:93:cb:eb:d6:
ec:e4:47:87:1c:42:a2:63:12:0d:9d:0d:65:50:5a:
d1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F7:98:8C:FA:AA:6B:7D:F3:C8:72:6C:2F:61:E0:39:2F:35:44:FF
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/pveYjPqqa33zyHJsL2HgOS81RP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19e:da2f:ee0a/128
Signature Algorithm: sha256WithRSAEncryption
02:2c:de:1e:72:8b:96:d1:fd:48:f2:1c:e2:26:59:a6:2a:10:
fa:9f:40:11:29:db:6f:86:5d:fc:87:fb:2b:4d:98:f0:6d:97:
51:0a:64:04:de:84:b3:3c:33:c4:4d:13:09:bd:60:fb:b8:2a:
6f:27:ba:a9:61:82:cd:83:56:2f:12:6f:50:ad:e2:0d:2c:28:
aa:d5:20:43:d1:c7:db:4e:bd:ba:a6:6a:78:42:9d:22:63:6b:
ee:73:35:f3:ec:a1:78:6b:3e:26:8b:57:3e:f7:8c:cb:b7:23:
ce:01:70:89:13:de:a8:c1:b9:f1:8b:93:10:38:63:16:14:df:
72:a3:2e:32:87:16:f7:d0:59:c2:78:b0:d3:13:1a:74:30:db:
b8:30:70:50:3f:1b:45:79:de:8f:51:c2:56:ad:d3:11:2d:d3:
38:1e:5e:09:b4:41:21:59:d5:4d:e0:d1:79:b4:08:c4:73:e2:
0d:8e:8a:71:7b:17:2a:13:7b:9d:81:8d:4c:9f:ff:e5:70:b0:
be:7f:b5:f4:9a:03:0a:8e:23:39:81:b9:79:91:fc:72:cd:ab:
24:cf:ba:9e:05:4a:f5:32:ee:97:19:c5:50:f1:c4:2c:70:4a:
36:36:0c:c1:b1:19:7e:a3:94:dd:bf:8b:0d:48:86:ab:7c:eb:
8e:64:86:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 29 13:37:49 2026 by rpki-client