Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214420.roa
File: AS214420.roa (raw, json)
Hash identifier: JF0fVSkK/8KO3fAPNwZV7Dx/9YqbFAqAC0DJULgyJtg=
Subject key identifier: 6A:F9:E5:C6:CD:AE:C4:4B:44:EE:4B:14:A4:53:1D:8E:79:00:5B:34
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 3428825C796A3F22BD657C28D400A41418586F01
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214420.roa
Signing time: Fri 13 Feb 2026 18:10:27 +0000
ROA not before: Fri 13 Feb 2026 18:05:27 +0000
ROA not after: Fri 12 Feb 2027 18:10:27 +0000
asID: 214420
IP address blocks: 2a0f:6284:4100::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 15 Feb 2026 08:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:28:82:5c:79:6a:3f:22:bd:65:7c:28:d4:00:a4:14:18:58:6f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Feb 13 18:05:27 2026 GMT
Not After : Feb 12 18:10:27 2027 GMT
Subject: CN=6AF9E5C6CDAEC44B44EE4B14A4531D8E79005B34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:0f:96:66:31:3d:45:9e:9b:62:3a:5f:6a:
5f:65:b4:a6:19:10:d7:54:96:56:24:58:ef:d7:79:
bd:e2:7f:47:ee:f4:a7:da:4f:e6:97:b2:36:16:49:
41:86:c6:f0:28:98:80:85:0d:ac:a8:c3:6e:10:60:
38:55:27:61:2b:b7:7e:8a:7e:91:e0:1e:44:e5:7c:
22:74:40:2c:a3:42:85:10:26:ac:fc:f0:14:39:49:
a3:ab:0d:29:71:b6:f9:12:64:f6:3f:64:bc:0d:09:
d6:ae:18:2c:b8:e4:52:54:9b:44:a6:b3:8a:5e:61:
42:f2:ce:61:12:b8:dc:dc:c4:98:b7:04:a3:eb:2a:
56:c4:b9:c3:a4:9c:20:13:d4:87:3b:fe:8b:db:f5:
f8:98:56:e4:68:ee:ac:35:e6:ed:ec:68:e1:dc:11:
48:71:6b:52:0c:9b:3f:83:66:03:44:7a:86:21:44:
79:a3:40:1b:e1:f7:d2:74:a7:c6:9e:88:0f:74:f5:
c3:9d:f6:bd:ae:06:c5:ae:c7:47:64:02:11:29:50:
82:0e:0b:22:3b:fc:db:90:74:34:cf:57:43:07:f7:
1c:cc:19:02:08:e5:ec:13:f4:05:38:bd:0c:97:cd:
f2:b1:01:95:ec:d1:bc:5c:e4:3a:a3:a2:3a:ae:28:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F9:E5:C6:CD:AE:C4:4B:44:EE:4B:14:A4:53:1D:8E:79:00:5B:34
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214420.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:4100::/48
Signature Algorithm: sha256WithRSAEncryption
3a:4d:55:dd:bf:a8:ad:ad:3b:f3:32:26:55:db:17:7b:c7:40:
c1:f1:aa:37:29:03:3f:0f:fd:84:50:2a:48:fc:79:4b:d5:c8:
b7:fa:c9:ff:8b:c2:db:43:0e:b3:ee:7b:8d:c5:74:8b:a0:8d:
fb:a7:40:0f:f9:fa:05:c2:b5:74:b1:52:29:f7:30:46:30:1b:
33:de:48:c8:44:71:4c:b6:19:78:94:0b:8b:4f:2d:d8:65:ba:
48:33:a2:e4:83:60:4e:f9:d5:0b:f8:74:4c:86:48:9d:4b:70:
6c:0d:e3:be:9f:25:a4:62:a6:05:b7:d4:d6:14:0e:b3:99:d8:
6b:58:44:8a:e3:b5:46:bb:6c:94:22:76:43:fd:96:f4:6a:45:
71:4f:90:d0:95:a3:85:ae:da:e3:e9:c1:74:4e:d3:1d:d3:a7:
87:48:86:9c:57:7e:0c:0d:28:6c:18:b4:37:4e:93:3e:08:78:
a3:27:1f:16:30:07:db:33:05:61:20:98:33:84:94:d6:50:ff:
9f:c1:ee:6b:57:4f:0d:56:ed:60:39:d0:2e:9c:1c:32:7c:5c:
49:82:ce:a3:37:fe:11:62:89:5c:33:76:a5:e4:0b:f2:f4:ea:
00:67:f5:df:7c:c8:ec:e0:6f:4a:cc:7e:ef:1a:a0:ca:3a:c7:
c6:c7:66:36
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUNCiCXHlqPyK9ZXwo1ACkFBhYbwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjAyMTMxODA1MjdaFw0yNzAyMTIxODEwMjdaMDMxMTAvBgNV
BAMTKDZBRjlFNUM2Q0RBRUM0NEI0NEVFNEIxNEE0NTMxRDhFNzkwMDVCMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO9w+WZjE9RZ6bYjpfal9ltKYZ
ENdUllYkWO/Xeb3if0fu9KfaT+aXsjYWSUGGxvAomICFDayow24QYDhVJ2Ert36K
fpHgHkTlfCJ0QCyjQoUQJqz88BQ5SaOrDSlxtvkSZPY/ZLwNCdauGCy45FJUm0Sm
s4peYULyzmESuNzcxJi3BKPrKlbEucOknCAT1Ic7/ovb9fiYVuRo7qw15u3saOHc
EUhxa1IMmz+DZgNEeoYhRHmjQBvh99J0p8aeiA909cOd9r2uBsWux0dkAhEpUIIO
CyI7/NuQdDTPV0MH9xzMGQII5ewT9AU4vQyXzfKxAZXs0bxc5DqjojquKF81AgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUavnlxs2uxEtE7ksUpFMdjnkAWzQwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ0MjAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq
D2KEQQAwDQYJKoZIhvcNAQELBQADggEBADpNVd2/qK2tO/MyJlXbF3vHQMHxqjcp
Az8P/YRQKkj8eUvVyLf6yf+LwttDDrPue43FdIugjfunQA/5+gXCtXSxUin3MEYw
GzPeSMhEcUy2GXiUC4tPLdhlukgzouSDYE751Qv4dEyGSJ1LcGwN476fJaRipgW3
1NYUDrOZ2GtYRIrjtUa7bJQidkP9lvRqRXFPkNCVo4Wu2uPpwXRO0x3Tp4dIhpxX
fgwNKGwYtDdOkz4IeKMnHxYwB9szBWEgmDOElNZQ/5/B7mtXTw1W7WA50C6cHDJ8
XEmCzqM3/hFiiVwzdqXkC/L06gBn9d98yOzgb0rMfu8aoMo6x8bHZjY=
-----END CERTIFICATE-----
Generated at Thu Mar 5 11:56:56 2026 by rpki-client