Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/hLT-GzNt3QOj94TyOM46hfvj7hA.roa
File: hLT-GzNt3QOj94TyOM46hfvj7hA.roa (raw, json)
Hash identifier: Am9YOvoiM665MyKEAui4gCnxp6Wqr9jFsajrpZ8qMM8=
Subject key identifier: 84:B4:FE:1B:33:6D:DD:03:A3:F7:84:F2:38:CE:3A:85:FB:E3:EE:10
Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial: 019662792C4300EDAC17659DF18A38D954F9
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/hLT-GzNt3QOj94TyOM46hfvj7hA.roa
Signing time: Wed 23 Apr 2025 11:47:10 +0000
ROA not before: Wed 23 Apr 2025 11:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213659
IP address blocks: 45.156.116.0/24 maxlen: 24
45.156.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 May 2025 19:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:79:2c:43:00:ed:ac:17:65:9d:f1:8a:38:d9:54:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
Validity
Not Before: Apr 23 11:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84b4fe1b336ddd03a3f784f238ce3a85fbe3ee10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d9:04:11:7f:67:05:d0:69:42:d5:f3:cc:73:
84:a7:0a:2a:46:01:2e:ee:62:bc:d8:d5:f3:1f:14:
32:bd:31:10:d1:91:86:f6:57:8b:04:54:2e:1a:91:
71:e9:bc:45:71:05:ad:69:94:e9:17:c3:9f:48:aa:
9f:69:53:35:66:0f:6f:40:ed:84:c8:46:40:ea:22:
13:e9:98:0f:11:e3:bf:78:a7:b1:e0:ed:60:a7:76:
04:e9:98:f3:30:93:bd:45:ee:24:36:35:b1:4f:a3:
15:7b:3f:a1:8e:d1:36:b0:22:0a:96:04:14:87:5d:
71:7f:b1:e8:48:32:8f:ae:84:5f:72:9e:91:82:69:
20:cc:19:f0:dd:27:1b:6f:0d:93:ee:da:db:9e:d1:
15:04:cf:72:36:ac:e3:8e:81:ea:8a:36:94:f6:3c:
c8:83:8b:d5:30:fc:d6:e1:1f:f4:38:9e:07:bf:0f:
fa:b7:7b:4e:9e:f1:c8:8e:88:2d:7c:9a:e1:45:e5:
15:5f:42:a3:ea:03:6e:9b:c7:cd:66:31:71:39:2a:
35:4e:93:96:53:04:3d:dd:97:79:cd:ad:1d:43:aa:
0c:e6:62:bc:9e:97:69:32:1d:51:2b:40:98:de:10:
91:4d:cc:77:95:d4:6f:49:71:8e:90:9f:98:7f:a2:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B4:FE:1B:33:6D:DD:03:A3:F7:84:F2:38:CE:3A:85:FB:E3:EE:10
X509v3 Authority Key Identifier:
keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/hLT-GzNt3QOj94TyOM46hfvj7hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.116.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:4c:86:72:64:8c:70:92:33:0b:52:cf:7c:cd:89:5c:1c:44:
41:28:0e:23:6c:b2:5e:d1:9a:fe:c3:ba:53:e1:60:95:7c:3a:
ee:42:cd:ae:d2:6a:7d:95:32:39:dd:47:db:e0:d2:41:e3:95:
e8:fa:ca:e8:be:7f:f5:0d:fa:db:82:30:36:a5:d6:3a:81:77:
f5:6b:ef:4c:a5:3c:e7:1f:1a:71:b2:6a:8f:e2:4c:d3:96:a1:
c6:dc:b7:e7:ef:24:93:13:1b:b1:18:0f:94:ab:55:62:db:44:
a3:44:c1:4f:6d:2f:88:f6:6d:4a:5b:ee:3c:9a:7d:47:da:36:
af:16:66:2e:0c:b5:d9:0c:c6:69:d6:80:48:17:2d:54:8d:9f:
80:58:ed:4b:b8:83:b7:fe:50:b7:39:67:c7:ba:a3:61:01:18:
ab:99:e3:cd:e7:10:42:f3:ba:b1:4b:87:98:5f:94:3f:c2:5f:
6d:59:5f:ff:74:10:70:03:ad:a5:36:9b:a0:f9:f4:97:2e:2d:
95:fd:24:7c:08:8a:78:88:df:b3:33:b6:0a:66:6b:14:53:60:
04:60:2b:bf:ef:df:2f:11:ba:bd:22:fe:22:f5:31:5a:7b:e1:
25:6a:1f:0d:8f:30:5e:7d:4f:ec:e1:c9:54:cb:0f:06:a8:e6:
1e:57:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:34 2025 by rpki-client