Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/psEkiy_SCoiNkyGhgf3i_r9ggmc.roa
File: psEkiy_SCoiNkyGhgf3i_r9ggmc.roa (raw, json)
Hash identifier: W9MAIcN346bIYTmo/eFcM1Fe7Ir02n/guaajDCowFoY=
Subject key identifier: A6:C1:24:8B:2F:D2:0A:88:8D:93:21:A1:81:FD:E2:FE:BF:60:82:67
Certificate issuer: /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial: 019B78348C1AD2AAEF8C8679266F16E3D7F7
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/psEkiy_SCoiNkyGhgf3i_r9ggmc.roa
Signing time: Thu 01 Jan 2026 06:17:48 +0000
ROA not before: Thu 01 Jan 2026 06:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207510
IP address blocks: 2a14:d100:f001::/48 maxlen: 48
2a14:d100:f010::/48 maxlen: 48
2a14:d100:f011::/48 maxlen: 48
2a14:d100:f012::/48 maxlen: 48
2a14:d107::/43 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 Jan 2026 11:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:8c:1a:d2:aa:ef:8c:86:79:26:6f:16:e3:d7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Validity
Not Before: Jan 1 06:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6c1248b2fd20a888d9321a181fde2febf608267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bf:4d:1d:d6:e3:05:6f:59:dc:52:ca:9f:64:
8f:26:26:a1:4e:5b:e1:19:23:e0:89:e9:f7:55:b8:
55:28:e9:f5:94:bd:31:1b:ad:28:3a:00:72:3a:3a:
82:aa:ad:f5:e2:b8:b7:2d:9f:50:ed:a3:c1:75:83:
c3:b9:65:0b:84:01:8b:aa:51:a1:8c:08:d2:63:47:
55:92:a5:7b:df:11:4a:e0:db:9d:62:d7:50:ea:75:
8c:e3:5d:bc:fd:9c:b6:89:26:55:cf:e3:03:9c:8e:
c9:59:b3:24:48:eb:8b:fb:fc:f0:cc:d1:5e:b0:d0:
6c:7b:9c:e3:9d:3d:73:58:7c:2f:43:e9:48:2e:75:
74:52:93:6f:b9:14:7d:9f:b8:43:0e:8a:e2:d4:c1:
a4:49:c6:01:60:37:2b:73:02:2c:27:15:be:99:48:
ad:09:f6:0d:e9:00:01:45:0d:dd:74:98:b4:f9:e6:
95:ea:c0:9e:ab:d1:b0:44:34:b1:c8:70:ac:87:8a:
c1:2d:06:c3:68:e4:74:65:3b:3d:5c:69:28:79:30:
fa:73:70:9d:32:21:e5:ae:8b:e0:cb:67:87:34:b4:
6b:10:37:c1:ad:68:fb:4e:bd:ee:bc:ec:51:0a:3d:
83:f3:43:5a:8d:64:8b:91:8c:20:11:4f:1e:e0:dd:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C1:24:8B:2F:D2:0A:88:8D:93:21:A1:81:FD:E2:FE:BF:60:82:67
X509v3 Authority Key Identifier:
keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/psEkiy_SCoiNkyGhgf3i_r9ggmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:d100:f001::/48
2a14:d100:f010::-2a14:d100:f012:ffff:ffff:ffff:ffff:ffff
2a14:d107::/43
Signature Algorithm: sha256WithRSAEncryption
7b:ae:66:9c:aa:28:96:19:9c:d9:42:be:d6:bf:0a:f8:c5:80:
7a:ef:f9:12:2f:03:90:da:f7:36:d4:f0:f8:40:6d:eb:7b:a3:
70:0f:ea:9b:f2:79:44:29:42:d6:18:f9:6f:8c:74:b8:cc:dc:
4c:48:87:0b:51:ad:0e:54:87:f9:9f:79:d7:b8:10:d1:b0:19:
2e:c1:d3:18:ca:aa:15:36:5a:b1:28:bf:c1:e5:e8:74:7a:dc:
b1:50:ab:ac:a0:c4:b9:05:86:4f:df:8a:67:05:3a:e3:16:91:
6c:3b:17:88:5e:5c:d0:38:a9:b3:a2:b1:c3:d3:52:b2:76:e3:
77:8b:86:36:59:18:80:a5:1e:be:b8:20:3b:83:5b:67:d4:6c:
8d:70:44:0d:37:5b:b9:fb:88:19:dc:99:36:06:15:6c:66:7c:
65:90:5d:40:f2:f8:63:85:b1:a1:32:56:51:97:d2:8b:21:0a:
fb:89:16:f3:e7:e4:85:af:f9:2c:d5:1b:0e:8e:7d:7a:a3:4a:
87:b7:90:4e:31:fe:1e:ab:a7:ce:c9:8b:3d:b1:3f:6d:0d:a4:
2b:86:6a:04:c7:d3:e2:c4:13:74:59:36:28:5e:d2:85:d6:5f:
de:e3:e7:83:20:23:c2:da:3c:3e:73:ab:a2:93:09:b8:8f:74:
3c:62:8b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:13:20 2026 by rpki-client