Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/H6mr-7oZaxw4KMH8Iqbosks7it0.roa
File: H6mr-7oZaxw4KMH8Iqbosks7it0.roa (raw, json)
Hash identifier: DZnyd3ur5aQ8EvMtTsaG2847+ZuBtwFhI9WuX7JzJ4I=
Subject key identifier: 1F:A9:AB:FB:BA:19:6B:1C:38:28:C1:FC:22:A6:E8:B2:4B:3B:8A:DD
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 0197110B7C7F1D60D2A20E8462F086825F5B
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/H6mr-7oZaxw4KMH8Iqbosks7it0.roa
Signing time: Tue 27 May 2025 09:20:54 +0000
ROA not before: Tue 27 May 2025 09:20:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34828
IP address blocks: 45.15.22.0/24 maxlen: 24
185.210.92.0/24 maxlen: 24
185.210.93.0/24 maxlen: 24
185.210.94.0/24 maxlen: 24
185.210.95.0/24 maxlen: 24
2a0b:5540::/33 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 13:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:0b:7c:7f:1d:60:d2:a2:0e:84:62:f0:86:82:5f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: May 27 09:20:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fa9abfbba196b1c3828c1fc22a6e8b24b3b8add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:35:06:2e:e1:fa:ab:e0:1e:2d:c7:28:25:
6f:69:a3:b0:9a:30:a2:95:07:1b:a0:5c:14:28:50:
e1:ce:1d:21:30:e7:20:85:9f:f1:f9:f8:e3:50:97:
84:4f:d6:62:d8:17:59:04:5b:58:25:71:48:54:64:
05:35:08:5c:de:65:4b:eb:54:ce:7e:04:71:fb:10:
61:e8:58:66:fa:81:f1:50:8e:7f:1f:21:d6:3f:74:
f6:0c:d1:de:f0:74:ed:2a:01:b4:95:35:e9:1e:4c:
a5:a0:84:4c:d1:5b:43:a4:ba:15:f3:75:bb:54:01:
9d:66:4d:7f:14:7c:bb:6d:48:f2:53:51:c9:6a:1d:
b6:06:5c:9c:0c:5d:5c:47:c6:f1:d7:d3:4e:74:5f:
9f:47:42:8e:ee:e6:86:7a:f2:81:ee:ac:fd:9d:0d:
9d:bb:76:ab:d5:62:df:3d:c2:b9:0f:79:d8:26:9a:
d9:81:bc:e9:5c:8b:0d:bf:57:43:06:9d:15:26:68:
c1:19:be:0a:67:e5:9a:58:2a:5c:17:6e:86:2b:3f:
30:0a:fe:96:64:3d:7e:1e:eb:28:7a:7a:d5:d1:d1:
4b:6c:98:26:c7:b9:a3:89:a2:33:06:10:6c:4b:26:
e9:4d:24:ae:b6:db:cf:e4:b5:ef:c6:99:d2:b1:d8:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A9:AB:FB:BA:19:6B:1C:38:28:C1:FC:22:A6:E8:B2:4B:3B:8A:DD
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/H6mr-7oZaxw4KMH8Iqbosks7it0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.22.0/24
185.210.92.0/22
IPv6:
2a0b:5540::/33
Signature Algorithm: sha256WithRSAEncryption
53:2e:b4:ca:bd:e6:59:de:78:e4:d6:9c:0a:c2:30:94:8f:fb:
ca:a8:7d:89:39:3e:37:5c:e2:4b:5e:3e:c4:1b:80:1f:8d:51:
cb:d7:90:8c:37:58:0f:d9:1a:60:58:0e:8f:3b:cb:63:78:9a:
04:f8:e9:d8:2b:cb:61:4a:c3:c4:d0:8c:53:6c:70:ab:a9:75:
68:bb:43:d3:7f:28:62:2f:2b:d7:31:58:5c:b4:04:1b:02:61:
10:6c:ed:99:f5:4c:9b:53:85:1e:94:98:7b:e0:89:97:68:ff:
45:98:74:f1:44:59:1b:1f:3f:14:25:5b:4f:36:a5:6c:59:0a:
d9:d8:c3:18:1d:ff:39:f8:4e:3a:c4:b2:41:cc:65:69:04:34:
09:b2:8e:47:89:24:0f:5e:f6:a6:8d:2d:68:b1:89:23:3a:bb:
0c:30:8c:9c:9a:65:75:38:60:6c:87:18:7c:3c:93:94:f0:20:
c5:13:72:b1:e4:95:7b:7b:72:e2:12:19:fc:15:94:aa:6d:e6:
95:a2:66:59:3e:3a:1d:f3:31:6a:11:97:46:1c:81:6b:36:26:
01:98:27:22:29:0c:ff:c3:a0:3f:73:f9:3b:a0:24:74:4a:31:
0d:ef:43:cd:59:90:89:7d:ca:5a:0b:b1:ac:40:2d:32:07:a6:
03:ff:f4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:38 2025 by rpki-client