Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/8q_1BK-O2fIK9-KquHb_06IGkaM.roa
File: 8q_1BK-O2fIK9-KquHb_06IGkaM.roa (raw, json)
Hash identifier: 7Y2Zr1GKLvyNVmt7xAxWKAUAhmZwDwQRmv2wu2Uuijk=
Subject key identifier: F2:AF:F5:04:AF:8E:D9:F2:0A:F7:E2:AA:B8:76:FF:D3:A2:06:91:A3
Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial: 0196F3B47CE6E1C747BA249BE14152A0F569
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/8q_1BK-O2fIK9-KquHb_06IGkaM.roa
Signing time: Wed 21 May 2025 16:36:53 +0000
ROA not before: Wed 21 May 2025 16:36:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214466
IP address blocks: 2a14:9400::/29 maxlen: 29
2a14:9400:230::/48 maxlen: 48
2a14:9400:1337::/48 maxlen: 48
2a14:9400:2000::/36 maxlen: 36
2a14:9400:3000::/36 maxlen: 36
2a14:9400:4000::/36 maxlen: 36
2a14:9400:5000::/36 maxlen: 36
2a14:9400:6000::/36 maxlen: 36
2a14:9400:a000::/36 maxlen: 36
2a14:9400:b000::/36 maxlen: 36
2a14:9400:c000::/36 maxlen: 36
2a14:9400:e000::/36 maxlen: 36
2a14:9400:f000::/36 maxlen: 36
2a14:9401::/36 maxlen: 36
2a14:9401:1000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sat 31 May 2025 13:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:b4:7c:e6:e1:c7:47:ba:24:9b:e1:41:52:a0:f5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Validity
Not Before: May 21 16:36:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2aff504af8ed9f20af7e2aab876ffd3a20691a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:e9:61:07:b2:47:f6:a4:8d:fa:ad:d8:46:
9c:f9:1e:8f:d6:d0:48:32:2b:fb:9e:90:e4:27:64:
1e:df:d6:5f:8d:5d:11:0a:d6:5b:ef:c4:15:f0:d1:
db:17:7d:e3:c3:5c:7b:8f:01:b8:c7:48:87:dc:31:
4f:0d:5a:0b:98:3a:ef:5e:9f:5e:91:56:f3:c6:00:
53:7c:9b:1b:fa:2a:8a:72:7c:ee:75:c5:eb:28:19:
78:cf:78:f9:8a:27:5e:89:f9:63:79:a3:ce:60:d1:
b9:42:fe:0d:6d:13:4c:e6:f7:df:ab:95:1f:19:57:
15:e2:30:4c:3f:9d:ed:db:8b:c5:50:55:3b:db:58:
fb:b4:cc:a0:18:0f:5b:9d:c3:d3:cf:d2:fc:fa:22:
6c:c4:2c:75:2c:05:4d:08:80:b6:96:31:44:98:54:
a1:89:d4:33:fe:e0:79:58:ba:d8:6f:9c:a9:6b:87:
73:5f:fa:e2:7f:76:b7:c3:58:b6:52:b5:81:dc:49:
f6:e2:a7:4e:cb:4e:a0:dd:59:b1:b0:a7:08:f3:ff:
7e:30:43:ad:6e:d5:a7:4b:fa:c8:ea:62:e8:ca:45:
69:21:46:c0:9e:98:f0:6c:cb:f1:03:4b:7c:90:17:
c2:34:51:95:89:e9:9f:53:8c:24:4a:4a:4a:9d:73:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AF:F5:04:AF:8E:D9:F2:0A:F7:E2:AA:B8:76:FF:D3:A2:06:91:A3
X509v3 Authority Key Identifier:
keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/8q_1BK-O2fIK9-KquHb_06IGkaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9400::/29
Signature Algorithm: sha256WithRSAEncryption
2c:30:64:4c:e5:8d:d7:62:91:06:da:eb:2a:16:68:8c:71:9e:
68:b5:12:c7:37:fe:1d:bf:5a:04:d8:ca:dd:10:03:05:1b:ea:
0f:df:4d:9f:f5:0a:18:e8:13:e0:55:04:0e:7a:2a:df:24:02:
98:c0:8a:a3:44:ec:60:69:25:4c:5b:c0:f4:b1:cf:b0:5a:c9:
1f:a6:f9:43:45:d6:ae:f0:76:b2:60:30:78:63:28:d8:05:7e:
55:24:c6:d5:1f:17:cb:f8:e4:16:3c:35:67:4f:02:43:81:15:
02:7d:84:9c:7a:b5:92:20:29:11:79:0c:f0:8a:7c:62:9b:22:
01:d3:2f:39:8c:bf:3e:fc:dd:0b:d7:f7:d7:0d:eb:7b:ea:b2:
1e:c3:81:93:93:8d:0a:33:33:72:3c:1d:70:4c:93:a8:3b:53:
08:f4:60:21:c5:71:73:e7:dd:c7:c3:c5:d3:0f:a2:46:c9:79:
2b:69:65:23:57:a6:87:a0:89:d6:b3:76:b5:24:0c:53:f5:05:
f1:56:28:f0:c1:cb:c8:ab:58:65:d0:44:c6:5e:14:b9:15:39:
48:b3:97:11:40:7f:0c:c2:16:60:a9:ec:8d:e6:01:a5:d5:00:
af:af:83:98:63:bc:28:f7:07:87:6f:dc:6f:e0:8d:d0:e2:be:
94:39:04:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:33:23 2025 by rpki-client