Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/t6HVNos1jDmE-u_Fb3Bf9112QB4.roa
File: t6HVNos1jDmE-u_Fb3Bf9112QB4.roa (raw, json)
Hash identifier: saAOSBN32ZiDoCtg2TVrl+Ckvy8E5Ms6LcCf7x3JybU=
Subject key identifier: B7:A1:D5:36:8B:35:8C:39:84:FA:EF:C5:6F:70:5F:F7:5D:76:40:1E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D24EEFEE35CF8C8883DB4D023ECD81BD2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/t6HVNos1jDmE-u_Fb3Bf9112QB4.roa
Signing time: Wed 25 Mar 2026 12:18:55 +0000
ROA not before: Wed 25 Mar 2026 12:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 45.145.59.0/24 maxlen: 24
45.146.89.0/24 maxlen: 24
45.146.90.0/24 maxlen: 24
45.152.202.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
2a0a:2d06:104::/48 maxlen: 48
2a0f:2705::/32 maxlen: 32
2a0f:e7c2::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 27 Mar 2026 15:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:ee:fe:e3:5c:f8:c8:88:3d:b4:d0:23:ec:d8:1b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 25 12:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7a1d5368b358c3984faefc56f705ff75d76401e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:47:d8:e1:db:57:e3:97:d4:26:e9:5a:2e:
fa:10:c3:4b:0e:c1:68:d4:76:a6:1b:de:9d:58:64:
2c:5e:15:e3:0a:e8:61:dd:52:65:1e:a1:64:95:00:
3c:06:e8:1e:13:ab:25:3d:98:4d:c3:fe:07:57:a3:
ff:bf:fa:c8:b3:73:2f:5f:ce:94:e5:58:a5:8a:f9:
d1:08:6a:3f:fc:d6:c8:b3:40:86:e2:fe:01:df:50:
b7:7c:4c:ac:9f:6b:f2:c3:b7:bf:e0:05:15:18:01:
91:3a:a3:d4:10:23:c2:69:19:b0:e0:5a:4a:95:b6:
5e:ec:ef:eb:b8:ca:6d:66:68:a0:45:b6:c8:98:3d:
c2:66:5c:24:fa:9a:9d:28:7e:70:14:4a:25:a4:63:
14:ea:79:8c:2d:32:a7:98:be:7f:e5:a3:2f:9c:79:
ad:e2:27:2b:91:ad:21:58:1e:c6:a0:c9:16:12:c7:
9c:a7:eb:2f:71:a0:96:c5:21:1a:8a:48:f9:e1:7c:
c2:d1:ee:aa:4b:b4:dc:ca:38:1d:ff:b6:99:5b:24:
9c:c8:12:4f:4a:9d:65:bc:9e:bc:49:66:ff:6b:b8:
31:43:c1:4d:f0:c1:39:4f:05:d8:41:d1:20:52:ce:
95:3f:48:8a:70:57:39:65:c2:70:4b:2b:ef:67:e3:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A1:D5:36:8B:35:8C:39:84:FA:EF:C5:6F:70:5F:F7:5D:76:40:1E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/t6HVNos1jDmE-u_Fb3Bf9112QB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.59.0/24
45.146.89.0-45.146.90.255
45.152.202.0/24
193.39.143.0/24
IPv6:
2a0a:2d06:104::/48
2a0f:2705::/32
2a0f:e7c2::/32
Signature Algorithm: sha256WithRSAEncryption
11:c4:9a:e6:1d:c8:eb:ed:be:d9:d9:09:13:02:22:e7:ef:ba:
08:b8:1b:b3:18:d6:11:c9:4a:40:fa:e9:c9:f6:23:07:72:5f:
54:28:cb:ac:7f:b1:3e:2a:02:7b:41:37:76:c9:ab:27:0c:c7:
43:04:c4:cf:c0:6c:6d:51:56:b1:1c:0a:de:06:d2:9e:f0:b2:
70:cd:ab:15:1c:c3:97:7c:71:35:b3:f0:4e:36:c1:ca:66:7a:
49:e1:05:25:48:c6:3f:57:eb:3e:df:b2:c2:36:ea:1e:9f:fb:
c6:2a:fe:f8:a8:49:55:9d:a0:d8:64:e3:8f:0c:f4:6e:9f:82:
bb:9a:60:8d:89:30:03:4e:84:41:d7:b7:81:99:a0:cd:20:fd:
fd:78:68:04:5d:b4:71:dd:52:4d:5e:91:a9:c6:d8:0f:31:a4:
c1:bd:41:24:d8:e0:d8:8a:41:95:58:b4:f4:6c:6f:f3:76:0a:
81:d4:08:ce:40:14:94:bf:74:d6:c8:d1:6f:28:cb:a3:9b:e1:
6e:8e:50:00:da:f2:73:44:d1:07:95:16:f2:23:a6:d8:11:80:
87:4e:8b:f7:fd:42:af:b8:6c:ae:b6:e2:02:3b:a6:31:04:3f:
07:bd:ad:5d:5c:b4:90:4c:38:e5:a6:b9:4f:fc:fc:f9:d7:14:
87:5b:03:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:29 2026 by rpki-client