Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/CnWC8LCcJU-91np6pCrAVHJQqtM.roa
File: CnWC8LCcJU-91np6pCrAVHJQqtM.roa (raw, json)
Hash identifier: kqSPi05BCWcAYjKa6KiuNZ/rLkPVJgQUMCtWBJeD4i8=
Subject key identifier: 0A:75:82:F0:B0:9C:25:4F:BD:D6:7A:7A:A4:2A:C0:54:72:50:AA:D3
Certificate issuer: /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial: 0197AD8288D7A2F18D1E371FD4AF30FA1A2E
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/CnWC8LCcJU-91np6pCrAVHJQqtM.roa
Signing time: Thu 26 Jun 2025 18:31:42 +0000
ROA not before: Thu 26 Jun 2025 18:31:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207510
IP address blocks: 2a14:d100:f000::/48 maxlen: 48
2a14:d100:f001::/48 maxlen: 48
2a14:d100:f010::/48 maxlen: 48
2a14:d100:f011::/48 maxlen: 48
2a14:d100:f012::/48 maxlen: 48
2a14:d107::/43 maxlen: 48
2a14:d107::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 27 Jun 2025 08:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ad:82:88:d7:a2:f1:8d:1e:37:1f:d4:af:30:fa:1a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Validity
Not Before: Jun 26 18:31:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a7582f0b09c254fbdd67a7aa42ac0547250aad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:76:ef:5f:c4:5a:a8:27:8b:dc:4d:3a:79:
ad:11:29:5a:62:51:8e:09:77:5f:79:ae:5d:be:ec:
cf:de:6a:5f:82:87:f5:db:2c:91:af:b9:6c:73:69:
e2:a7:69:10:80:56:19:da:ed:8d:5a:31:a7:28:6d:
46:f4:28:70:d7:7c:13:a4:c5:68:06:23:86:3e:b4:
af:bf:56:f0:13:d6:14:12:a9:eb:3a:f0:67:eb:39:
58:90:c4:6b:8f:6b:7b:af:94:29:c2:cd:8b:c1:95:
22:2c:7a:17:69:63:28:ba:84:f3:69:ef:e6:cb:c0:
18:e8:c3:f2:f5:5b:82:36:0a:79:bc:14:93:08:9d:
0d:85:73:87:c0:d4:eb:30:a0:b5:c4:f2:ff:96:e9:
24:60:d3:c9:11:83:8f:76:8d:7c:72:a4:39:ed:9d:
0c:f7:31:6a:96:d8:3c:30:d2:f0:f6:d7:e3:2b:2f:
8a:dc:a7:1b:0e:3d:e4:4e:7d:1c:b5:e4:9a:4d:06:
cb:e3:16:59:d6:fc:29:f4:5e:2d:93:90:c1:ab:df:
5b:65:41:1f:1c:9d:4c:27:6d:48:ba:c8:0e:01:d6:
61:dc:01:67:6c:aa:e2:2c:1e:e2:0e:0e:05:5a:7b:
c6:10:c7:c4:bd:fd:4c:87:ee:9e:0e:e3:cb:5e:79:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:75:82:F0:B0:9C:25:4F:BD:D6:7A:7A:A4:2A:C0:54:72:50:AA:D3
X509v3 Authority Key Identifier:
keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/CnWC8LCcJU-91np6pCrAVHJQqtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:d100:f000::/47
2a14:d100:f010::-2a14:d100:f012:ffff:ffff:ffff:ffff:ffff
2a14:d107::/43
Signature Algorithm: sha256WithRSAEncryption
7a:65:8b:52:40:e6:bf:04:91:59:d8:9f:9f:1f:15:70:ac:c4:
f9:1b:65:98:8d:8d:90:02:91:93:f8:c5:0f:a1:50:33:74:ca:
90:70:12:9b:65:bc:d6:08:90:d5:e8:ec:31:fb:c6:ce:3a:28:
50:cf:82:62:2e:f8:97:b8:6c:f1:93:ea:21:ab:c7:0c:4a:51:
25:30:44:e2:66:75:da:75:8d:4a:ee:4a:be:5c:2f:71:17:cf:
bc:21:56:d7:ba:dd:64:57:3f:47:78:f1:a0:1e:53:41:1f:de:
fb:19:7d:c3:a0:8a:0a:a1:58:fd:cb:60:0f:9d:7c:81:83:1b:
c9:52:74:bf:87:65:a1:d1:f6:56:cc:3d:94:d9:7c:ba:7b:85:
ff:ba:32:72:59:d9:36:08:fd:c5:7e:6b:c2:4f:ae:74:1e:c6:
b1:0e:ac:46:1a:70:82:58:12:13:f8:b7:12:46:70:5f:7c:57:
81:ff:e8:19:0d:38:17:03:32:8e:2e:2a:3d:9f:73:22:a3:72:
71:3c:bc:bd:5c:4e:a6:ec:0f:77:17:c8:e8:75:97:ec:08:be:
b2:c4:d7:56:77:5e:b6:3b:a6:a7:fc:b8:15:f2:a2:59:a4:ba:
c8:c3:12:a0:b4:61:66:7a:b3:4f:7f:eb:a4:43:0c:7e:8a:de:
3e:70:d8:e8
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZetgojXovGNHjcf1K8w+houMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWZjZmQyODc1YWJkZjYxZTE5ZDMyNzBlYWZlMWVmZmFk
YzY2NjIwHhcNMjUwNjI2MTgzMTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTc1ODJmMGIwOWMyNTRmYmRkNjdhN2FhNDJhYzA1NDcyNTBhYWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdF271/EWqgni9xNOnmtESlaYlGO
CXdfea5dvuzP3mpfgof12yyRr7lsc2nip2kQgFYZ2u2NWjGnKG1G9Chw13wTpMVo
BiOGPrSvv1bwE9YUEqnrOvBn6zlYkMRrj2t7r5Qpws2LwZUiLHoXaWMouoTzae/m
y8AY6MPy9VuCNgp5vBSTCJ0NhXOHwNTrMKC1xPL/lukkYNPJEYOPdo18cqQ57Z0M
9zFqltg8MNLw9tfjKy+K3KcbDj3kTn0cteSaTQbL4xZZ1vwp9F4tk5DBq99bZUEf
HJ1MJ21IusgOAdZh3AFnbKriLB7iDg4FWnvGEMfEvf1Mh+6eDuPLXnkT5QIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFAp1gvCwnCVPvdZ6eqQqwFRyUKrTMB8GA1UdIwQY
MBaAFPefz9KHWr32HhnTJw6v4e/63GZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTVfUDBvZGF2ZlllR2RNbkRxX2g3X3JjWm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iMDJjYjYtODZjNy00ZjZkLTk5ZDEt
OTA3NzZmODRjOWI3LzEvQ25XQzhMQ2NKVS05MW5wNnBDckFWSEpRcXRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iMDJjYjYtODZjNy00ZjZkLTk5ZDEtOTA3NzZmODRjOWI3
LzEvOTVfUDBvZGF2ZlllR2RNbkRxX2g3X3JjWm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcBKhTRAPAA
MBIDBwQqFNEA8BADBwAqFNEA8BIDBwUqFNEHAAAwDQYJKoZIhvcNAQELBQADggEB
AHpli1JA5r8EkVnYn58fFXCsxPkbZZiNjZACkZP4xQ+hUDN0ypBwEptlvNYIkNXo
7DH7xs46KFDPgmIu+Je4bPGT6iGrxwxKUSUwROJmddp1jUruSr5cL3EXz7whVte6
3WRXP0d48aAeU0Ef3vsZfcOgigqhWP3LYA+dfIGDG8lSdL+HZaHR9lbMPZTZfLp7
hf+6MnJZ2TYI/cV+a8JPrnQexrEOrEYacIJYEhP4txJGcF98V4H/6BkNOBcDMo4u
Kj2fcyKjcnE8vL1cTqbsD3cXyOh1l+wIvrLE11Z3XrY7pqf8uBXyolmkusjDEqC0
YWZ6s09/66RDDH6K3j5w2Og=
-----END CERTIFICATE-----
Generated at Tue Jul 29 03:45:42 2025 by rpki-client