Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rhJPD6vc2GRTaS50gEo7RnbI2sA.roa
File: rhJPD6vc2GRTaS50gEo7RnbI2sA.roa (raw, json)
Hash identifier: JPM0LU36KzJrj5CqLoW3u44XeL8Yb66MJG5pVqlm/yU=
Subject key identifier: AE:12:4F:0F:AB:DC:D8:64:53:69:2E:74:80:4A:3B:46:76:C8:DA:C0
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0197F488667A9008EB93373A62745FCBCAA7
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rhJPD6vc2GRTaS50gEo7RnbI2sA.roa
Signing time: Thu 10 Jul 2025 13:31:09 +0000
ROA not before: Thu 10 Jul 2025 13:31:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 45.15.178.0/23 maxlen: 24
45.15.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Jul 2025 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:88:66:7a:90:08:eb:93:37:3a:62:74:5f:cb:ca:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 10 13:31:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae124f0fabdcd86453692e74804a3b4676c8dac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b3:99:ee:1c:1b:3a:a0:9a:37:f2:99:4f:ac:
c1:7c:62:07:a2:6f:3a:6c:a7:b1:37:a3:99:e3:ea:
ed:d1:d5:4c:44:5d:17:dd:1a:8e:c6:b9:a0:fc:b4:
aa:ab:f2:d8:e2:ab:3b:f0:73:a9:00:de:cb:00:19:
9d:64:70:76:69:4b:33:0c:79:a4:df:f9:fb:c2:5c:
b2:68:d7:92:0b:d3:93:80:b0:7e:af:d4:1d:01:9d:
b5:ae:69:14:d4:6c:0e:b3:7c:c1:55:71:7e:3d:14:
06:8e:21:c7:c6:5b:09:c6:89:7d:07:02:22:9c:f9:
eb:d8:b0:d8:7b:5b:51:90:42:03:bd:c8:9e:d3:32:
ad:d8:bc:56:50:00:ba:bc:29:8b:52:07:ad:b8:74:
2e:30:bf:2b:a8:5c:c6:e9:ea:b6:dc:4c:9c:11:67:
7f:fa:b6:00:29:f2:8e:7a:77:01:17:bf:d6:c2:b8:
8b:54:ea:f4:cc:ba:d7:9f:2c:1a:5f:0a:0d:b6:d2:
b7:28:dd:b7:23:62:e9:15:5c:ab:e9:a7:a3:9e:29:
8b:3d:00:a9:ab:a6:99:b6:54:7f:e4:77:6a:22:b5:
80:05:99:ce:ae:73:f0:cd:45:64:ad:7c:83:f6:e8:
50:2d:d2:03:6d:09:52:f0:ed:21:f9:d1:92:47:20:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:12:4F:0F:AB:DC:D8:64:53:69:2E:74:80:4A:3B:46:76:C8:DA:C0
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rhJPD6vc2GRTaS50gEo7RnbI2sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.178.0/23
45.15.184.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:1a:49:9a:ec:a5:d8:41:ba:66:d2:77:f4:0e:b2:28:df:15:
fb:7c:2a:6f:41:49:4e:c7:0c:4d:4b:d3:c5:84:5e:2d:dd:ca:
e1:88:3b:26:d8:f3:32:63:2b:8c:a6:10:e5:b0:b9:ee:11:01:
23:b7:ec:a3:05:a1:8d:c8:af:89:fc:dc:9d:e8:c1:f5:9a:70:
3f:18:1c:a8:f2:1b:20:77:92:50:92:b6:eb:ff:fe:ec:1b:5e:
ce:72:0e:03:f3:0b:37:61:56:79:74:3d:ad:89:ae:73:da:41:
85:81:e9:3d:b4:67:2a:15:f6:97:cd:c4:7a:65:c1:6b:b6:30:
50:fd:a9:2c:5c:4d:91:e2:af:e4:1c:5f:0b:dc:1a:da:78:0b:
8e:f1:0f:c8:6b:52:ee:e2:22:a3:79:75:98:35:1b:71:d9:f8:
ae:be:ab:34:d5:e1:d7:88:03:5e:ec:ce:13:06:81:40:7b:c1:
28:70:bf:e6:20:de:5b:14:e8:b4:67:f1:cb:81:0d:8c:75:00:
18:50:3f:b2:88:4b:2c:96:6e:c9:8d:5e:11:d0:b3:bf:23:17:
f6:02:16:32:54:fd:66:47:c1:2a:d7:5d:35:30:de:e8:1c:41:
fd:ed:90:a8:f2:0f:96:23:e5:f3:38:e0:3a:50:79:c6:94:97:
59:8b:0a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:25:09 2025 by rpki-client