Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/q1WuLGRf2IQYfSmGXZtgbxoC8y8.roa
File: q1WuLGRf2IQYfSmGXZtgbxoC8y8.roa (raw, json)
Hash identifier: 6dZOPWf/10djwOs1/i1eJMVlNPj2Ywta9vnYuFgnYek=
Subject key identifier: AB:55:AE:2C:64:5F:D8:84:18:7D:29:86:5D:9B:60:6F:1A:02:F3:2F
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 01A025BB5022ACB2058E7EDA128743289905
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/q1WuLGRf2IQYfSmGXZtgbxoC8y8.roa
Signing time: Fri 21 Aug 2026 19:10:27 +0000
ROA not before: Fri 21 Aug 2026 19:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19e:da2f:ee0a/128 maxlen: 128
2001:67c:64:ffff:0:19f:8f4a:394a/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 21 Aug 2026 20:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:bb:50:22:ac:b2:05:8e:7e:da:12:87:43:28:99:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: Aug 21 19:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab55ae2c645fd884187d29865d9b606f1a02f32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:86:54:e5:91:68:b4:ed:a6:76:24:61:a0:
ab:56:a9:c6:e8:fa:13:9c:be:f0:f7:55:31:47:53:
7b:1a:01:c0:06:66:86:3f:e5:57:d7:59:c5:3d:d4:
f4:48:ea:f1:69:db:cf:d5:35:83:7b:42:00:2a:a4:
f6:0c:c4:38:1a:74:82:5b:99:29:cc:5b:8e:7d:1b:
f9:57:e2:6e:4e:9c:c0:8f:74:9a:7c:88:f5:4d:f8:
2e:c6:24:15:30:b5:14:80:34:2d:61:0c:65:1d:4f:
49:e0:4b:f6:41:bb:a3:ad:8f:97:d9:f4:e7:ac:e3:
20:48:03:af:c7:ba:64:1d:25:74:6e:51:f3:2e:f1:
7e:f1:60:e4:9e:d6:f9:0b:21:f2:5c:01:30:98:a6:
63:a8:d3:d3:52:89:e6:8e:6d:7c:6c:a6:92:c8:71:
fd:e6:b4:7a:e4:fb:bb:67:b5:83:27:a6:44:7b:0e:
95:6b:35:5e:ee:31:30:91:c1:51:7d:24:45:24:f1:
0f:4e:10:1b:03:a3:25:d1:04:67:d1:ff:d7:59:bf:
c2:38:6e:07:39:d7:9b:24:69:48:26:26:c8:6a:a4:
38:70:54:a2:d9:48:a2:17:59:19:69:5f:8a:4c:79:
cb:e2:a7:76:35:b1:67:c2:71:5f:78:ed:64:d1:72:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:55:AE:2C:64:5F:D8:84:18:7D:29:86:5D:9B:60:6F:1A:02:F3:2F
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/q1WuLGRf2IQYfSmGXZtgbxoC8y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19e:da2f:ee0a/128
2001:67c:64:ffff:0:19f:8f4a:394a/128
Signature Algorithm: sha256WithRSAEncryption
2d:02:fc:6d:80:f4:79:67:43:d3:ef:38:3c:21:c8:17:1d:37:
3b:b8:ba:9c:c8:b9:ff:9c:70:7f:2e:3a:28:dd:c7:b8:24:83:
58:70:2c:4f:43:0b:1f:e3:80:69:ea:29:3e:1a:7a:cb:dd:00:
3e:c9:25:79:d7:ab:2c:d1:18:74:3a:61:6d:a0:75:ac:22:6a:
3e:13:a3:2e:7c:e8:ec:4a:8d:09:d0:79:c2:43:19:04:e4:60:
92:12:39:0d:2a:a0:53:8a:84:e5:68:ed:3d:40:3b:4a:fb:15:
88:8d:02:c8:d8:fd:fe:0a:94:0b:d1:97:09:8f:5b:2b:1e:6e:
47:f8:91:36:9d:e9:d3:8f:65:0b:27:8d:1d:9c:93:9a:e7:b6:
55:96:70:44:6f:2b:7f:ac:e6:aa:20:88:ae:ff:4f:48:92:7e:
2e:e7:4a:ac:97:46:66:b3:35:92:f8:a4:3a:9f:e0:e0:91:06:
e6:d7:90:91:b5:ff:c4:ec:55:d7:43:36:0d:c8:fa:78:83:ea:
aa:82:7f:64:d3:19:af:c8:ab:7b:27:6c:21:f9:b2:e8:6c:a8:
54:3f:2c:ad:9b:a6:3c:ca:4d:70:d8:70:e3:7b:79:a6:18:35:
78:59:aa:8f:5e:0c:17:ff:e1:e3:15:73:06:e7:85:95:0a:d0:
77:dd:b3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:44:17 2026 by rpki-client