Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/tBEHmQUA9wv-B4hV2QHqO9SODXk.roa
File: tBEHmQUA9wv-B4hV2QHqO9SODXk.roa (raw, json)
Hash identifier: aLs0te6iLKHmfZqVmVELFzycohNIlwaqk2DMQCBUAIw=
Subject key identifier: B4:11:07:99:05:00:F7:0B:FE:07:88:55:D9:01:EA:3B:D4:8E:0D:79
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 01A0262A16BCF81026E31430E7DE3FCA434C
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/tBEHmQUA9wv-B4hV2QHqO9SODXk.roa
Signing time: Fri 21 Aug 2026 21:11:27 +0000
ROA not before: Fri 21 Aug 2026 21:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19e:da2f:ee0a/128 maxlen: 128
2001:67c:64:ffff:0:19f:8f4a:394a/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 21 Aug 2026 22:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:2a:16:bc:f8:10:26:e3:14:30:e7:de:3f:ca:43:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: Aug 21 21:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b41107990500f70bfe078855d901ea3bd48e0d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:f4:09:fe:d7:b0:bb:3e:f9:b9:db:38:5c:
5b:1f:5c:9a:8c:61:8a:36:14:90:73:26:7d:90:d2:
6c:30:ae:cc:74:9c:de:8a:5b:b5:c4:85:75:41:98:
c7:bc:bc:76:fc:b7:51:4f:9c:f7:3a:37:0e:9a:ca:
98:cb:11:d3:22:20:0f:9a:4a:6e:1d:e9:51:cf:f4:
cf:7c:a6:dc:d8:c1:ad:0e:c0:79:3f:c8:69:f1:35:
e8:8d:96:11:27:26:96:18:9a:26:98:42:54:49:b6:
86:36:dc:d4:5f:a8:b3:d9:b8:6c:eb:39:3b:7b:d3:
f8:35:d0:b1:da:ad:01:e6:d4:95:62:b1:90:d9:e5:
78:92:c6:fb:69:c8:72:93:79:89:0e:ef:62:63:8c:
47:2b:98:8a:41:54:56:23:68:26:d0:e6:11:d8:35:
07:b5:57:08:ac:13:64:12:02:3f:7a:0f:26:e7:52:
44:58:19:d8:31:ef:fe:df:f2:00:6d:db:c8:d4:a4:
a7:9e:14:c2:3b:c4:18:6d:81:01:17:63:18:c2:9a:
00:15:85:2f:dc:3e:b7:c8:a5:76:1c:75:7f:f9:b2:
96:18:fe:1a:5d:36:22:db:ef:de:43:fe:1d:05:89:
33:69:77:9d:45:c7:95:1c:91:4b:12:3a:6d:de:70:
e0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:11:07:99:05:00:F7:0B:FE:07:88:55:D9:01:EA:3B:D4:8E:0D:79
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/tBEHmQUA9wv-B4hV2QHqO9SODXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19e:da2f:ee0a/128
2001:67c:64:ffff:0:19f:8f4a:394a/128
Signature Algorithm: sha256WithRSAEncryption
62:c0:66:66:4d:ce:46:7b:96:2c:ee:5e:d1:18:05:7c:62:c5:
0c:b1:f5:f1:4e:01:f3:a4:b5:0a:cc:04:ad:b9:9f:2a:6e:63:
a1:48:a3:2e:a4:a7:d2:e1:eb:37:d0:73:d1:b0:e2:86:b4:f3:
3a:73:df:b9:82:b7:48:35:34:2d:11:42:14:a2:30:80:75:a7:
c3:2b:65:85:20:19:63:e9:33:aa:7b:58:fd:84:e1:ce:f3:00:
0f:c0:52:18:29:14:1e:c5:9a:70:30:75:2b:72:7c:64:12:ac:
21:d4:ba:24:b0:c7:13:59:b1:a5:6c:10:a6:38:0a:b2:8e:14:
99:69:0c:60:52:e6:5d:2c:1a:af:73:48:dd:06:d9:c9:3d:91:
da:ad:8b:b9:52:75:22:96:01:c7:1d:6a:ac:7a:8e:db:ce:e0:
e6:7f:38:18:97:e1:e6:42:e8:e7:40:8c:b0:38:0f:6f:dd:ad:
f1:ba:4b:84:e3:4b:3d:10:31:bf:2e:8c:d8:47:e5:b1:dd:52:
88:ea:46:87:55:d7:2e:bb:a0:da:7b:12:f4:19:c6:c5:1d:4e:
07:35:c4:fa:0b:4e:8b:4f:be:f1:92:cd:f2:fd:cf:e9:5c:9a:
ca:38:6f:ef:98:67:21:db:67:e0:91:a9:de:2b:2d:e6:a9:95:
0b:ee:32:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:02:44 2026 by rpki-client