Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/HHO53_yj-gUyn-8zCCkxCauCNsU.roa
File: HHO53_yj-gUyn-8zCCkxCauCNsU.roa (raw, json)
Hash identifier: nOSAETcFIvoCBQZUEWV56ffBMxPS3OP5rEEAlMzsh/A=
Subject key identifier: 1C:73:B9:DF:FC:A3:FA:05:32:9F:EF:33:08:29:31:09:AB:82:36:C5
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019701B0365AA0243B928C029DFEA89CF2D5
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/HHO53_yj-gUyn-8zCCkxCauCNsU.roa
Signing time: Sat 24 May 2025 09:46:54 +0000
ROA not before: Sat 24 May 2025 09:46:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 185.24.150.0/24 maxlen: 24
212.16.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 09:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:b0:36:5a:a0:24:3b:92:8c:02:9d:fe:a8:9c:f2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 24 09:46:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c73b9dffca3fa05329fef3308293109ab8236c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:62:24:d7:50:98:10:93:67:4b:d0:de:af:
3b:44:fb:fa:5c:6a:e9:0c:9e:a9:6f:17:a9:2e:a7:
1e:5a:08:3d:8d:39:88:e5:51:c8:e8:6a:a9:bf:74:
48:ba:de:1c:6d:57:82:2b:31:0a:f6:9a:b9:c7:17:
ba:14:66:9a:34:c4:b9:d5:38:fb:8d:60:b7:50:6b:
3c:40:d0:02:c8:55:52:cf:82:5a:3c:32:1f:36:24:
16:67:9e:16:9b:ed:a9:1e:33:53:2c:51:53:2c:e9:
d6:09:d2:fe:b9:d2:a4:21:96:d5:c3:a6:53:4b:12:
50:05:7d:86:4c:41:ac:6f:72:bd:63:87:82:2d:c9:
17:88:3f:83:a8:3e:38:78:88:fc:48:fc:4b:bc:c6:
f8:4e:45:12:72:0d:41:43:92:a7:34:94:07:39:72:
74:37:e6:b4:3c:29:b7:d0:9a:8b:68:38:70:1e:a3:
58:73:16:1b:7e:3b:52:51:98:43:13:9f:f5:62:7e:
de:05:a6:4f:2b:38:f5:5d:fa:1f:b0:fc:ef:5b:23:
86:87:70:fa:cb:bb:7b:40:ad:ef:2f:ae:64:bb:bb:
ca:58:97:b0:32:87:3c:ca:ce:43:dd:a4:6d:51:66:
64:4e:b9:d2:bf:80:eb:7d:6b:c4:13:c0:47:07:d3:
9e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:73:B9:DF:FC:A3:FA:05:32:9F:EF:33:08:29:31:09:AB:82:36:C5
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/HHO53_yj-gUyn-8zCCkxCauCNsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.150.0/24
212.16.94.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7b:b4:33:c6:39:7f:1e:ee:aa:47:2c:03:a4:be:04:4a:cc:
5b:db:30:7a:5d:9e:60:d9:dc:42:81:4e:a9:34:d3:90:d5:a6:
1c:1f:ab:c2:9a:03:65:25:13:b3:74:c3:5a:08:60:39:d4:8f:
b0:56:ab:a2:f2:21:12:c9:65:92:42:87:6d:78:f2:47:de:91:
7f:13:be:4c:c2:eb:3f:72:00:4a:8a:68:cf:ff:ff:16:c9:46:
8a:b0:00:aa:80:bd:1c:70:72:20:32:32:4d:4a:f3:09:f0:51:
ee:a7:b9:61:eb:d3:d6:04:1f:f8:5d:bf:fb:d9:47:91:53:98:
9d:91:1d:e2:4b:bb:27:8a:15:1d:bf:48:d1:c2:8d:f8:cd:86:
6c:2b:fe:e9:09:c4:0d:08:50:1c:70:32:b2:b7:14:f6:f5:65:
fd:20:db:a4:a8:9f:f9:08:3f:f8:e0:5b:14:78:22:09:9f:c2:
1f:bf:fe:be:9b:04:98:12:f3:1f:fc:55:ce:08:af:5f:0c:84:
23:b5:cc:e1:7d:ef:2d:38:f6:40:2f:f3:49:cf:08:eb:eb:2c:
22:80:b9:8b:36:37:d3:82:57:c0:a9:63:58:36:3a:94:98:6f:
81:c0:e3:5f:c8:18:37:3b:27:1b:02:a7:b9:7d:73:09:29:69:
d8:13:f8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:57:45 2025 by rpki-client