Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/ju8Ac6YzB8sDxroCvHXAJKvoMNM.roa
File: ju8Ac6YzB8sDxroCvHXAJKvoMNM.roa (raw, json)
Hash identifier: YPlkPMIz3VxZpFAdLFghDNGxBe2w+XyaiPRNfWUqnW4=
Subject key identifier: 8E:EF:00:73:A6:33:07:CB:03:C6:BA:02:BC:75:C0:24:AB:E8:30:D3
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01983BC11069BD208AF0E0C94893DBB18429
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/ju8Ac6YzB8sDxroCvHXAJKvoMNM.roa
Signing time: Thu 24 Jul 2025 09:26:05 +0000
ROA not before: Thu 24 Jul 2025 09:26:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401835
IP address blocks: 2a14:c380:320::/44 maxlen: 44
2a14:c380:32a::/48 maxlen: 48
2a14:c380:32b::/48 maxlen: 48
2a14:c380:32c::/48 maxlen: 48
2a14:c380:32d::/48 maxlen: 48
2a14:c380:32e::/48 maxlen: 48
2a14:c380:32f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 24 Jul 2025 10:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:c1:10:69:bd:20:8a:f0:e0:c9:48:93:db:b1:84:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jul 24 09:26:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eef0073a63307cb03c6ba02bc75c024abe830d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:30:0f:bd:c1:5d:e3:a7:0d:95:13:b1:57:53:
ac:27:d5:9d:9d:7e:78:75:e5:89:c5:fc:f1:1a:bc:
ec:86:19:84:ad:cc:74:36:f6:a3:ef:d9:f3:ad:a4:
3e:9e:88:cb:ca:d1:9b:1b:05:16:44:95:9b:fb:85:
3f:de:bf:a3:9c:2a:b3:b5:d4:cc:58:54:65:92:a4:
3d:ad:cc:e2:35:3b:54:bc:b2:62:d4:8e:ea:92:cf:
38:82:a7:98:a9:9d:97:23:f6:e4:28:e2:9e:3a:b0:
2f:84:68:39:07:b4:b3:d4:b2:82:77:58:97:b7:93:
97:84:10:13:49:4a:3f:00:31:0b:d5:25:86:97:03:
f9:0b:ab:29:47:9c:47:0d:bb:90:3d:59:d7:ca:44:
59:91:71:40:0f:c8:cc:fe:76:ee:22:3a:c6:c0:09:
04:94:18:58:0b:e5:ec:e1:cb:89:b5:5c:1b:d4:2b:
1f:78:97:04:b4:37:4d:de:30:a8:80:f7:37:a4:cc:
50:c9:e8:3c:d5:1a:96:03:92:8c:cc:49:96:b6:d6:
68:6a:4f:00:1e:84:da:27:c6:63:cb:9f:38:85:ff:
6b:b5:db:71:98:0d:18:04:1d:62:b7:8b:1e:54:13:
df:49:b6:7f:31:bd:59:f3:a5:fa:52:d4:f0:02:47:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EF:00:73:A6:33:07:CB:03:C6:BA:02:BC:75:C0:24:AB:E8:30:D3
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/ju8Ac6YzB8sDxroCvHXAJKvoMNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:320::/44
Signature Algorithm: sha256WithRSAEncryption
13:59:3c:47:5e:38:39:f4:84:d3:ab:78:35:e4:05:d6:4b:b1:
35:0f:3b:3e:87:1b:ed:5b:c6:b0:97:13:62:ef:2e:ac:25:33:
2d:a3:6f:6d:89:4c:36:5b:47:4c:75:3a:48:92:ed:dc:0d:07:
56:51:94:c4:5d:a6:c5:60:c1:5b:04:0d:29:c8:7d:53:a7:59:
c8:e8:c7:d3:bb:54:25:bb:53:59:fa:6e:f1:82:99:5c:a8:9a:
6a:fd:e6:1b:d9:69:51:ad:d3:47:d9:7c:8d:3a:dc:71:3d:89:
91:73:43:ea:5a:e3:54:07:55:a5:34:60:11:fb:5e:7c:52:2e:
b1:bb:7a:4f:e2:0b:34:09:8a:92:9d:0d:62:d9:94:c8:64:c2:
6b:b4:83:26:b8:34:61:8a:d4:e4:1f:08:0a:e1:a3:5e:a8:83:
4e:64:85:c4:23:6e:04:c8:7b:80:96:d7:83:71:08:a1:c8:60:
ae:5e:6e:fe:c7:f0:d0:d3:ab:a1:76:1b:a4:25:65:d7:c7:10:
2b:7f:60:ff:e1:c7:ac:fd:42:cb:1f:79:c6:64:db:39:99:5c:
6a:b8:6f:96:06:cc:4f:f8:08:b7:71:08:37:ac:14:b4:ac:8a:
74:19:87:e1:8d:b3:f3:07:ad:a5:5f:36:3d:64:69:95:80:b2:
30:74:85:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:44:43 2025 by rpki-client