Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/hkLMuBc_yGeUrtqqBrVQpkAbTuI.roa
File: hkLMuBc_yGeUrtqqBrVQpkAbTuI.roa (raw, json)
Hash identifier: s7sNtmEXtAEprKbhuN3lTui6w/6gn4nMFyQC7+/qcp8=
Subject key identifier: 86:42:CC:B8:17:3F:C8:67:94:AE:DA:AA:06:B5:50:A6:40:1B:4E:E2
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 019FA910BD2F290C61C8924F0E24F44D0C81
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/hkLMuBc_yGeUrtqqBrVQpkAbTuI.roa
Signing time: Tue 28 Jul 2026 14:11:14 +0000
ROA not before: Tue 28 Jul 2026 14:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19e:da2f:ee0a/128 maxlen: 128
2001:67c:64:ffff:0:19f:8f4a:394a/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 28 Jul 2026 15:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:10:bd:2f:29:0c:61:c8:92:4f:0e:24:f4:4d:0c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: Jul 28 14:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8642ccb8173fc86794aedaaa06b550a6401b4ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4b:ae:13:ff:15:aa:28:07:eb:5c:b2:c9:58:
ff:80:24:33:e9:cc:55:3d:fa:56:59:0a:ee:3d:bb:
e8:51:0b:99:56:92:f6:67:99:ae:2d:84:37:05:0e:
c2:39:14:0f:e6:b9:5b:7b:3a:3e:30:ad:c0:25:47:
f4:65:fb:dd:fa:6c:83:5e:90:57:6f:75:2e:60:e7:
20:cb:71:1e:9f:e1:0b:6d:12:0a:fa:cc:0a:48:ad:
45:d6:72:5e:b5:bf:03:a9:20:d8:bb:a0:f0:5b:94:
33:46:a1:27:1a:4e:92:1e:0e:f9:de:d6:91:9b:1b:
0d:d2:f7:19:9e:a9:eb:ce:a1:a4:c8:ec:10:fb:0d:
f4:cc:5b:be:f6:b5:1e:5f:c4:8d:4f:11:ba:65:8e:
c8:59:c2:77:fc:12:a8:bd:ca:e1:cc:b9:53:2f:67:
de:9e:1c:81:8e:15:94:2a:fb:ef:45:c7:cd:22:2f:
04:a3:d1:f7:8b:de:c5:c8:1b:8f:c3:9d:32:09:47:
67:29:dc:86:f5:f1:8e:53:7f:6d:fa:2c:a8:57:58:
db:aa:c4:ff:0a:fe:7f:72:1d:0b:8a:ea:c7:d9:89:
f9:dd:08:a0:1a:cc:7b:31:8b:80:e1:f3:f5:4b:c1:
3d:9b:0a:08:35:9a:c7:72:7a:5d:f9:a6:e5:33:77:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:42:CC:B8:17:3F:C8:67:94:AE:DA:AA:06:B5:50:A6:40:1B:4E:E2
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/hkLMuBc_yGeUrtqqBrVQpkAbTuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19e:da2f:ee0a/128
2001:67c:64:ffff:0:19f:8f4a:394a/128
Signature Algorithm: sha256WithRSAEncryption
71:23:76:11:58:84:22:fd:4d:4e:08:10:c4:86:ec:a9:ab:71:
19:42:b5:44:e3:78:a6:7d:11:3f:e0:8a:e8:c4:89:f0:e1:a4:
d4:ca:bb:85:f1:cc:8e:c3:b3:82:90:f3:b8:d8:2a:3b:52:f7:
09:c5:a9:a5:1e:dd:7e:47:f3:7c:6e:db:4a:04:01:80:90:c8:
f1:a9:79:1f:81:d1:05:c2:3d:44:45:96:fa:32:4e:9a:f8:c4:
16:fc:dd:1f:64:4d:6b:64:a4:2f:97:e7:96:a0:78:b6:b3:b1:
ba:7c:67:7f:6c:9f:e3:28:47:d2:bd:7b:7d:d8:ad:d1:38:46:
38:aa:c1:c8:12:b8:0e:86:ef:ca:96:7e:47:9a:c6:26:96:0f:
fa:f7:7f:44:a6:0c:f4:f3:05:8c:10:5f:16:84:59:bb:fe:ae:
e5:a7:bd:14:ed:03:36:41:6e:bb:ae:87:02:0e:dd:57:23:52:
b2:52:ec:ce:da:7b:55:e3:a9:85:09:03:b4:4b:de:60:4d:b2:
2f:93:cf:5b:45:de:3b:2c:02:61:28:9a:d5:9f:c9:be:46:2f:
38:b4:d9:2f:f3:60:f5:ea:e9:30:04:60:d5:77:56:9a:b9:34:
a2:70:91:ed:8e:22:d3:aa:2f:e9:fc:37:b7:95:c0:67:bf:e5:
ce:11:28:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:06 2026 by rpki-client