Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/HfxIza41D1lN6xpCVvZ-jIjqCJM.roa
File: HfxIza41D1lN6xpCVvZ-jIjqCJM.roa (raw, json)
Hash identifier: bzCsZLqcb+yF23P0Q14pwJzc6vRw2bGw3Av/zaNvIY0=
Subject key identifier: 1D:FC:48:CD:AE:35:0F:59:4D:EB:1A:42:56:F6:7E:8C:88:EA:08:93
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 019FA946C0FA320E682AE53E4455BF4EE476
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/HfxIza41D1lN6xpCVvZ-jIjqCJM.roa
Signing time: Tue 28 Jul 2026 15:10:14 +0000
ROA not before: Tue 28 Jul 2026 15:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19e:da2f:ee0a/128 maxlen: 128
2001:67c:64:ffff:0:19f:8f4a:394a/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 28 Jul 2026 16:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:46:c0:fa:32:0e:68:2a:e5:3e:44:55:bf:4e:e4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: Jul 28 15:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dfc48cdae350f594deb1a4256f67e8c88ea0893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8e:39:10:99:7f:ee:fe:2c:b0:9e:08:f9:15:
02:cc:71:80:c4:36:5e:bf:fd:09:64:23:3f:18:ab:
4a:c1:7a:dd:25:0c:9a:04:bd:0b:3e:a6:87:48:13:
24:75:1d:8e:51:bf:4d:80:fa:33:97:2a:2a:f9:4b:
42:b5:a6:8e:4d:b9:d7:cd:09:9c:94:bd:6c:35:06:
15:a4:c2:75:a6:f5:82:5a:36:22:bf:c0:84:6e:a0:
9c:32:a7:e5:24:93:78:54:0f:29:24:5d:25:3c:98:
d6:be:ea:85:c3:a8:07:5c:62:96:b9:ed:e9:18:a3:
26:8d:07:1a:00:19:ec:5d:c8:c0:de:98:33:0c:ac:
8b:7a:de:b9:25:b8:cb:0e:40:99:5b:74:fc:1d:c8:
03:81:f5:eb:be:be:49:5d:7f:72:de:8d:de:bc:c7:
ce:9b:42:6e:d3:82:b6:82:50:d6:42:9d:5d:99:12:
98:45:61:9e:56:a6:41:60:07:3c:b0:30:3d:af:fa:
40:83:10:9f:04:88:2c:7c:71:d9:5d:9d:72:cb:a8:
a4:35:ba:0d:f5:e7:f2:9e:aa:9c:53:17:16:a6:9a:
14:09:38:f4:16:fe:b4:ef:0e:c4:35:cc:ab:eb:c0:
b9:cb:f0:3b:b8:07:ee:78:4d:cb:c2:02:3e:b6:7e:
6f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FC:48:CD:AE:35:0F:59:4D:EB:1A:42:56:F6:7E:8C:88:EA:08:93
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/HfxIza41D1lN6xpCVvZ-jIjqCJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19e:da2f:ee0a/128
2001:67c:64:ffff:0:19f:8f4a:394a/128
Signature Algorithm: sha256WithRSAEncryption
8e:24:47:46:4a:ed:8d:dd:39:f2:f3:bf:7e:51:c7:84:4c:72:
48:5b:4a:0c:07:fd:e7:19:ab:aa:f7:3e:cb:87:7d:68:c6:6f:
b2:b8:95:17:32:53:a5:01:ab:d7:b3:88:3d:85:1d:75:87:75:
e4:a3:3c:12:f8:58:99:ea:a8:35:ee:de:8b:c2:62:f7:1b:a4:
de:2d:cd:01:17:75:7c:dd:f0:c5:ff:ed:3a:a3:af:c8:cb:59:
04:8e:e8:29:3b:bb:ee:d2:af:00:d2:22:1a:8d:40:0f:7b:aa:
36:40:7c:98:ea:d8:61:ce:08:0a:58:02:cd:7b:98:c0:e6:d8:
98:31:7c:20:a3:f1:f6:7b:1e:1a:68:58:14:bf:00:35:cb:a1:
e6:9e:52:75:07:89:58:74:a9:06:c3:46:ca:4d:1c:0d:54:3b:
59:91:3f:48:86:1e:63:12:8c:fe:0b:5f:27:41:7b:9a:31:05:
85:62:b7:1a:a6:e8:f0:27:28:59:d7:a5:89:cf:9c:0a:82:3c:
c3:69:c9:37:84:bf:8a:44:94:54:c4:c5:ee:5b:83:39:b0:4d:
0f:31:a0:49:6b:22:18:f6:ec:54:e8:29:34:69:a2:1e:05:31:
57:33:a1:80:5e:4d:a2:17:ee:f6:1a:ea:0a:41:15:2a:b2:fc:
3f:5a:db:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:08:33 2026 by rpki-client