Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HR58naLLakvPFfFkIcOPEDDbllg.roa
File: HR58naLLakvPFfFkIcOPEDDbllg.roa (raw, json)
Hash identifier: 65GPd5ZgvN5Oxn8vEgdjZFHCBL/KyOEE+bBczqiXmI8=
Subject key identifier: 1D:1E:7C:9D:A2:CB:6A:4B:CF:15:F1:64:21:C3:8F:10:30:DB:96:58
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01980C7F57C8EF121DC5EE6CD63AF9200A3D
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HR58naLLakvPFfFkIcOPEDDbllg.roa
Signing time: Tue 15 Jul 2025 05:12:08 +0000
ROA not before: Tue 15 Jul 2025 05:12:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.152.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Jul 2025 12:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0c:7f:57:c8:ef:12:1d:c5:ee:6c:d6:3a:f9:20:0a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jul 15 05:12:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d1e7c9da2cb6a4bcf15f16421c38f1030db9658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:3b:ec:af:53:9a:8a:e3:95:3c:bf:da:af:
d3:6d:87:5f:66:00:88:a8:38:1b:e8:20:a3:5c:7d:
bf:6e:8d:46:0c:45:0d:e2:3a:81:dc:57:6a:b8:b4:
0e:fb:ff:98:52:a9:b9:2e:a8:96:e7:be:fb:67:15:
a7:a2:7c:76:1c:3b:39:3d:57:be:5c:0c:64:ce:64:
a3:73:d4:ac:f7:7c:26:cb:9c:9d:4b:80:64:ae:da:
22:c8:f6:6b:1d:a6:75:96:4a:26:29:84:ec:f2:c8:
f0:7f:0b:30:1e:03:1d:03:31:c6:ed:d8:5a:79:88:
9f:5c:60:ad:fb:c3:c1:fa:81:2a:0c:af:72:42:15:
2a:e6:82:60:c0:97:c8:88:15:b6:c7:11:d5:0c:62:
79:20:4a:d6:07:15:7a:2f:42:6d:68:ec:bf:fd:a4:
0f:37:59:d0:1a:f7:a2:76:91:5a:76:30:6f:d5:f7:
48:72:52:57:91:d1:d5:c8:42:07:26:0a:81:34:b8:
b1:b7:ba:95:04:a5:95:48:f2:f2:7f:83:72:8b:5b:
a0:70:6f:29:21:f4:d3:9e:a9:59:9b:f1:9c:2f:40:
2e:ea:4e:cb:29:15:bf:05:65:72:ce:64:52:76:f8:
c4:d8:24:8d:5c:d2:72:81:ac:f4:65:4d:e8:95:d8:
a6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1E:7C:9D:A2:CB:6A:4B:CF:15:F1:64:21:C3:8F:10:30:DB:96:58
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HR58naLLakvPFfFkIcOPEDDbllg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:16:db:65:5d:45:20:71:59:a7:cf:0e:25:0f:a1:43:27:0e:
cf:54:39:9b:6b:e4:cb:a8:a5:70:a0:ae:a7:56:c9:c7:8d:e9:
f9:5c:c5:e0:17:49:fc:dc:60:34:8b:98:9a:3b:13:ac:85:ae:
62:5c:17:d6:11:01:78:b5:4d:88:c3:f9:59:20:23:aa:f4:af:
7f:db:eb:e2:2f:2d:bf:1d:eb:fe:bb:f3:bd:1a:10:91:9f:45:
e7:3c:4e:62:23:d5:3e:79:34:eb:2a:39:6f:6e:84:f1:64:fc:
72:b4:30:af:e0:70:f1:05:e8:60:6e:c1:06:5a:2a:b4:01:e3:
09:ea:11:04:a5:90:c3:c0:4d:43:3f:45:2c:11:e6:d5:a1:38:
31:54:1a:90:a2:ac:d1:77:17:99:ca:7f:e9:71:0b:5b:c7:b5:
8c:58:ef:9a:cb:5d:3c:c6:c1:3b:e9:9b:31:4b:2e:d6:0b:24:
3d:e4:17:19:05:8b:0f:9a:61:79:10:22:79:48:43:af:90:5a:
52:22:68:8d:32:40:6d:f1:dc:14:33:20:1e:ec:6b:d4:18:fa:
df:6d:60:ce:cb:57:8d:d0:9a:49:5c:8a:8f:b4:e8:93:3a:c6:
10:18:29:3d:1c:05:7f:47:0e:8a:04:fa:d5:05:17:ea:61:bb:
49:b0:ba:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:20:25 2025 by rpki-client