Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/pHpet6pGcAecOqgQqM7heAbdYlM.roa
File: pHpet6pGcAecOqgQqM7heAbdYlM.roa (raw, json)
Hash identifier: VNpbTo0hbXGOwzN3fmgdrMm5FU9cL18s+xPICQjJgFc=
Subject key identifier: A4:7A:5E:B7:AA:46:70:07:9C:3A:A8:10:A8:CE:E1:78:06:DD:62:53
Certificate issuer: /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial: 0197ACEF23A39116907A240E3126BE69F8CA
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/pHpet6pGcAecOqgQqM7heAbdYlM.roa
Signing time: Thu 26 Jun 2025 15:50:42 +0000
ROA not before: Thu 26 Jun 2025 15:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207510
IP address blocks: 2a14:d100:f000::/48 maxlen: 48
2a14:d100:f001::/48 maxlen: 48
2a14:d100:f010::/48 maxlen: 48
2a14:d100:f011::/48 maxlen: 48
2a14:d100:f012::/48 maxlen: 48
2a14:d107::/43 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Jun 2025 18:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:ef:23:a3:91:16:90:7a:24:0e:31:26:be:69:f8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Validity
Not Before: Jun 26 15:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a47a5eb7aa4670079c3aa810a8cee17806dd6253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:6a:7d:4c:45:99:1b:7a:30:b2:d1:24:e8:
85:bd:26:f2:ff:de:26:ad:c4:82:6c:e4:33:5f:dc:
dd:e7:c1:38:b3:9e:eb:50:da:4c:36:b0:c6:ca:31:
bc:2d:aa:77:c3:41:12:47:39:b4:ee:15:39:cb:06:
da:47:d2:3a:6f:ad:29:e5:f1:67:c5:b8:1f:3c:85:
f0:1f:a7:8c:e7:79:09:9e:04:d8:a4:82:21:fb:d6:
fa:19:50:7d:ba:05:6d:16:b9:50:5a:2c:cf:4d:c7:
ea:0e:8f:dc:0a:a4:90:fe:2e:b7:62:7c:16:66:d2:
a8:7d:1b:65:51:ed:a3:36:08:e6:4e:6a:38:9d:6c:
a1:3c:f1:bc:2f:bc:61:65:e5:a3:77:4f:3e:31:84:
b0:ac:bd:e2:e5:a3:9c:90:74:f6:b8:54:9d:a3:e9:
4b:0c:4f:37:58:b8:48:df:6d:f5:a9:8e:9f:d2:41:
0c:95:cc:b1:7d:3d:3c:59:30:0b:6d:aa:0a:66:8d:
42:c2:40:26:51:cf:f9:40:77:a4:40:9c:80:27:84:
ea:85:ca:42:92:c7:33:58:66:0d:07:a3:a1:60:0c:
92:c6:a6:e9:63:7e:da:fb:1a:6e:9a:4f:cf:18:f7:
bd:cc:f4:80:d7:08:ee:c9:98:6b:b3:0f:c0:ff:6b:
de:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7A:5E:B7:AA:46:70:07:9C:3A:A8:10:A8:CE:E1:78:06:DD:62:53
X509v3 Authority Key Identifier:
keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/pHpet6pGcAecOqgQqM7heAbdYlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:d100:f000::/47
2a14:d100:f010::-2a14:d100:f012:ffff:ffff:ffff:ffff:ffff
2a14:d107::/43
Signature Algorithm: sha256WithRSAEncryption
9c:9e:77:83:14:a4:ff:42:13:fc:67:d9:e5:89:58:c6:41:92:
2a:f0:b7:ab:93:77:b1:e5:d1:de:cc:9e:5b:41:61:7c:a0:18:
9b:6d:f3:d2:df:73:ef:0d:b6:07:ab:a3:24:06:1b:7f:8e:c0:
ab:86:2f:4b:f8:e3:1e:e1:6d:60:9c:e9:a5:3a:1c:08:59:8f:
87:34:3a:e7:5e:93:ed:5e:d4:6e:39:ed:82:80:62:1b:09:f5:
9b:ec:56:da:16:97:4f:9f:bb:b9:7c:1b:57:f5:29:9e:c0:a2:
42:b1:97:45:73:9f:a8:17:4e:72:3f:4b:9c:11:3d:07:6b:94:
03:30:3a:73:06:57:07:bc:1c:a3:84:cd:0f:12:bc:17:90:5b:
2d:f7:19:88:cc:3c:27:7d:fa:70:2b:78:7d:c0:46:f7:c8:93:
a9:bf:80:7e:74:35:6c:10:82:c4:a0:78:1b:e9:66:e9:5f:2e:
ba:68:ca:db:e2:99:b8:5c:9d:e4:82:9a:0a:29:53:68:28:94:
ad:33:37:2b:d4:77:ed:13:2d:f0:77:d3:f5:86:58:ed:47:56:
5e:33:10:5b:e8:96:7c:79:2b:ff:64:2d:67:f8:47:4a:5a:cd:
02:2e:ae:14:b4:b8:31:ca:a8:c8:34:cf:d5:4b:33:cf:1a:86:
71:b8:37:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:48:51 2025 by rpki-client