Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/EUvwwj2DbP5dDkNXBMFsXNGV8Ks.roa
File: EUvwwj2DbP5dDkNXBMFsXNGV8Ks.roa (raw, json)
Hash identifier: lRf+diHwpu/oIHwY2GuqPstFacZhO62HFdYJLrnfrwA=
Subject key identifier: 11:4B:F0:C2:3D:83:6C:FE:5D:0E:43:57:04:C1:6C:5C:D1:95:F0:AB
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 019EBF66480EABE61E39BD0C57F96C1ED380
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/EUvwwj2DbP5dDkNXBMFsXNGV8Ks.roa
Signing time: Sat 13 Jun 2026 05:13:31 +0000
ROA not before: Sat 13 Jun 2026 05:13:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19e:175a:3589/128 maxlen: 128
2001:67c:64:ffff:0:19e:8d95:c397/128 maxlen: 128
2001:67c:64:ffff:0:19e:9217:41cb/128 maxlen: 128
2001:67c:64:ffff:0:19e:973d:a4cb/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 13 Jun 2026 06:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:66:48:0e:ab:e6:1e:39:bd:0c:57:f9:6c:1e:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: Jun 13 05:13:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=114bf0c23d836cfe5d0e435704c16c5cd195f0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5a:d4:48:4b:d0:ef:fe:64:3f:b6:d8:36:29:
57:2f:65:2b:5e:00:ed:0c:58:68:2d:78:e3:2d:9a:
28:fe:e1:ee:f9:2a:51:6d:c0:3e:ba:9c:42:df:0f:
7d:9f:d3:5d:5c:9d:a6:e6:56:0a:5c:14:42:e1:01:
d5:4e:c2:87:78:51:b8:de:4d:24:cb:2f:af:e7:c7:
98:76:36:26:e8:b6:e0:71:3e:83:7c:b9:ba:70:19:
77:ec:51:0a:03:98:7d:9e:e0:fd:d0:91:b8:b0:b9:
ca:f3:22:80:08:df:57:46:cb:76:ee:ee:06:1c:d8:
db:16:74:f0:3c:79:f1:c7:57:49:0e:5f:06:bf:d8:
b2:59:88:1d:75:d4:90:04:de:c1:b8:cd:b4:b7:0e:
83:86:57:5e:c7:0f:94:3a:f3:0b:04:54:62:0e:76:
15:f9:c7:db:80:71:7d:c3:7c:cb:bc:7c:6a:c4:a7:
79:a0:44:1f:bd:e1:7e:43:49:e8:a9:82:3a:b7:4a:
99:d9:9c:92:94:0f:e2:e1:63:24:76:10:63:60:a4:
09:1d:23:35:a4:24:89:9a:e2:06:29:1b:ac:d2:76:
a7:75:3a:8b:d6:1c:f7:a3:2d:4c:ee:83:5a:26:f1:
ad:f3:b7:b3:ce:4c:1a:19:e4:3d:c3:59:31:1d:45:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4B:F0:C2:3D:83:6C:FE:5D:0E:43:57:04:C1:6C:5C:D1:95:F0:AB
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/EUvwwj2DbP5dDkNXBMFsXNGV8Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19e:175a:3589/128
2001:67c:64:ffff:0:19e:8d95:c397/128
2001:67c:64:ffff:0:19e:9217:41cb/128
2001:67c:64:ffff:0:19e:973d:a4cb/128
Signature Algorithm: sha256WithRSAEncryption
5d:0e:7e:24:d9:c2:6d:62:ad:dd:c8:b7:67:be:11:3f:1a:a7:
6f:fe:ca:96:78:83:97:16:2f:97:7a:ce:1a:80:a6:c8:4b:8b:
b1:d0:6b:b1:45:4e:87:16:e5:14:ce:03:1a:20:4d:35:84:ce:
ad:e1:da:00:59:c0:51:57:0c:ae:5f:c6:7e:2b:f3:22:a9:30:
16:7a:d4:38:e7:a1:40:53:e0:16:6f:30:ca:8a:c7:fe:62:22:
0b:6c:97:e5:b9:c5:75:62:1c:d3:f8:40:8f:ae:d8:c3:95:0b:
29:b1:65:73:5b:b4:75:0e:1f:d5:14:63:4d:59:07:5e:56:98:
23:23:a1:ef:2f:b3:ee:11:96:a9:4f:92:8b:41:8f:86:75:8e:
e1:1c:32:56:24:fa:58:e3:e3:ac:31:1f:b0:03:af:6e:37:cd:
01:c8:e1:f7:9b:71:87:6e:c2:4d:62:ae:03:98:63:28:6b:27:
8f:a1:de:ce:ed:55:e6:a5:70:9b:c9:cf:3d:00:33:c5:e5:43:
2c:7d:23:25:a9:06:f7:cb:e3:56:01:c8:0b:09:ee:7d:c1:ee:
b6:70:22:1e:56:9a:36:82:11:d2:fc:3f:ce:73:90:b3:f4:0f:
45:d8:9e:c6:eb:8d:6b:90:59:a9:0e:76:7b:24:6a:4b:24:0a:
19:16:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:54 2026 by rpki-client