Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/SoTGl7C8ipFtS5LldJGMjOTdils.roa
File: SoTGl7C8ipFtS5LldJGMjOTdils.roa (raw, json)
Hash identifier: B10IdZFg4Y5IllhcdLypGfLAnphzrDG0k/OheRJNLYI=
Subject key identifier: 4A:84:C6:97:B0:BC:8A:91:6D:4B:92:E5:74:91:8C:8C:E4:DD:8A:5B
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A1237CAB569424A28A513F5DF210AE09EF
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/SoTGl7C8ipFtS5LldJGMjOTdils.roa
Signing time: Sat 10 Oct 2026 01:45:35 +0000
ROA not before: Sat 10 Oct 2026 01:45:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 2a14:c380:31::/48 maxlen: 48
2a14:c380:32::/48 maxlen: 48
2a14:c380:33::/48 maxlen: 48
2a14:c380:36::/48 maxlen: 48
2a14:c380:3000::/40 maxlen: 40
2a14:c380:4000::/40 maxlen: 40
2a14:c380:5000::/40 maxlen: 40
2a14:c380:6000::/40 maxlen: 40
2a14:c381::/32 maxlen: 32
2a14:c382::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 05 Nov 2026 13:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:7c:ab:56:94:24:a2:8a:51:3f:5d:f2:10:ae:09:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Oct 10 01:45:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a84c697b0bc8a916d4b92e574918c8ce4dd8a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1f:58:ca:e6:9d:65:2f:dd:fc:1f:43:f5:5e:
e5:1b:5f:29:8b:24:d1:af:16:c4:42:05:a9:e3:bf:
b8:95:18:07:55:bf:66:55:dc:99:b8:d6:ba:8d:e3:
d7:c4:88:0d:cd:b1:77:6f:b0:76:4a:7a:ba:bc:93:
cc:6c:0a:36:d7:ed:81:07:4a:67:c8:93:79:cc:95:
53:6a:c6:5b:1e:74:de:06:fd:eb:cf:56:8c:d1:e3:
a2:4f:35:16:0c:1c:46:83:93:b2:dc:3c:be:b8:82:
52:bd:20:20:6a:cb:8e:89:fa:df:e2:94:11:4b:0c:
09:e6:41:70:cb:21:a8:ca:4a:57:2f:1c:2c:52:4b:
ac:64:ed:bc:24:55:c8:33:51:58:b2:df:b7:92:4c:
89:6a:72:14:fc:3f:90:6b:c5:e0:e4:bb:11:36:20:
60:7f:99:ae:39:3f:8e:60:7f:6a:b8:a2:b2:d8:3e:
be:d2:8f:66:d6:58:6e:c1:c6:36:16:2a:d3:eb:17:
2f:a3:1f:f3:a1:90:a8:ef:8a:60:21:4d:fc:47:26:
89:99:da:c0:1c:85:21:68:ff:e1:70:01:f6:55:d1:
f0:70:10:84:73:7a:b5:17:00:79:bf:64:96:32:bf:
f9:2c:c9:0c:d3:18:4d:72:80:06:88:c0:80:d1:12:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:84:C6:97:B0:BC:8A:91:6D:4B:92:E5:74:91:8C:8C:E4:DD:8A:5B
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/SoTGl7C8ipFtS5LldJGMjOTdils.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:31::-2a14:c380:33:ffff:ffff:ffff:ffff:ffff
2a14:c380:36::/48
2a14:c380:3000::/40
2a14:c380:4000::/40
2a14:c380:5000::/40
2a14:c380:6000::/40
2a14:c381::-2a14:c382:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6c:7d:68:68:e7:45:fc:41:e7:78:4e:da:38:61:f4:c4:24:20:
7d:05:c4:32:e0:d3:b8:a5:66:ec:6c:62:a4:f6:04:7c:ba:4b:
32:b5:cf:41:d3:3c:55:5f:cf:fc:4b:e5:a3:3b:57:c9:48:15:
68:b1:9d:84:cc:60:64:b1:1e:6e:25:b6:21:03:13:9f:07:95:
64:0c:48:f9:e1:fe:07:6f:6b:67:b8:ec:06:89:f6:17:65:dd:
f7:c0:98:70:cd:93:51:89:af:de:16:42:67:e8:51:fc:e8:08:
86:3c:9f:72:0f:03:10:d0:62:50:25:8f:11:3c:61:7c:eb:a5:
af:14:fe:39:2d:cc:8a:0a:5f:d0:bc:9e:07:61:1b:22:fc:4f:
0e:f5:3b:70:b8:14:c5:d4:f5:50:1e:a6:a8:ff:d7:1b:a6:41:
e3:19:e5:12:51:e5:8e:51:b5:ca:87:8c:5c:44:75:d6:d6:f0:
f2:b1:21:55:fe:b7:89:47:3b:c2:38:22:6f:ba:5a:80:ef:b1:
ee:bf:45:d3:27:ef:f7:ea:33:75:87:b0:ec:16:07:e5:72:6b:
61:e2:9c:f3:70:f3:a6:82:66:d7:1d:9b:2f:99:96:ab:98:ed:
3f:b1:2b:9d:42:85:86:5b:86:d8:a1:19:55:e9:8d:ab:9c:a1:
00:ba:52:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:39:44 2026 by rpki-client