![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/OTiG2Zne8XX2ul66mF_WPGjpGMo.roa
File: OTiG2Zne8XX2ul66mF_WPGjpGMo.roa (raw, json)
Hash identifier: vUZ+DFClQcliABYxVrEPM6ui3l71LGt8GEbspHYbUxw=
Subject key identifier: 39:38:86:D9:99:DE:F1:75:F6:BA:5E:BA:98:5F:D6:3C:68:E9:18:CA
Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial: 018CC64B4FAD5D7858E9D14D14227C1AA5D5
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/OTiG2Zne8XX2ul66mF_WPGjpGMo.roa
Signing time: Mon 01 Jan 2024 18:31:13 +0000
ROA not before: Mon 01 Jan 2024 18:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48714
IP address blocks: 83.119.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:4f:ad:5d:78:58:e9:d1:4d:14:22:7c:1a:a5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
Validity
Not Before: Jan 1 18:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=393886d999def175f6ba5eba985fd63c68e918ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:9e:11:e5:77:82:2e:8a:99:25:e1:71:82:
65:01:f5:8c:85:4f:fd:c3:3f:b8:bb:6a:e2:2b:82:
28:f7:f5:b9:43:fc:7f:11:44:f1:e9:2b:3a:3c:fd:
70:55:30:ef:0f:5f:0e:d0:1a:5c:69:cc:16:11:c1:
78:1e:48:0b:13:22:44:9b:1e:85:20:81:d1:be:37:
0d:33:78:3a:64:80:5c:6c:36:a0:c9:65:b2:a1:e7:
ba:be:09:0c:a8:1b:65:bd:30:1e:20:03:f8:cf:f5:
fe:7f:dc:5c:c6:1d:ad:75:cf:10:1b:a1:61:ba:e5:
5d:24:c8:54:9b:d2:f6:9b:72:a5:7f:f4:b7:17:93:
ef:e9:6d:cf:4e:c2:dc:1a:c7:7e:75:e7:8d:f8:fa:
63:a5:49:98:be:e8:cf:c6:63:06:80:28:b3:73:89:
c1:d2:8d:8c:dd:7e:3d:f3:6f:f6:68:5a:15:3b:2d:
a6:47:14:5c:e7:84:f2:c1:e0:b7:66:d2:2a:8f:b1:
62:af:78:ec:c4:12:ea:41:d6:50:32:1f:51:18:42:
49:5e:82:80:bf:61:98:ea:ad:a5:c3:f0:20:2f:a9:
96:e4:ef:06:87:06:e3:be:e6:31:ab:d0:92:98:34:
1c:a4:3d:68:f5:47:d3:d6:75:34:5b:65:82:57:fb:
2a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:38:86:D9:99:DE:F1:75:F6:BA:5E:BA:98:5F:D6:3C:68:E9:18:CA
X509v3 Authority Key Identifier:
keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/OTiG2Zne8XX2ul66mF_WPGjpGMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.7.0/24
Signature Algorithm: sha256WithRSAEncryption
55:fe:0c:fb:74:5f:6b:0d:b0:d7:3c:e7:73:26:60:80:16:2c:
a3:e6:c6:25:e2:64:20:ee:80:2e:91:96:e5:9c:ac:7f:a7:21:
36:c8:b7:27:c8:cc:a3:a8:43:25:bd:70:ed:60:11:e1:b8:e8:
33:9c:08:11:6d:b7:24:d3:9e:c8:dc:b5:ca:af:2a:3b:dc:89:
b8:0c:0f:b6:7c:f2:ec:3b:02:18:a4:aa:fd:97:17:27:3e:d7:
82:e4:f7:ad:c0:6b:f3:8c:4a:d5:68:2c:5b:e2:b7:3a:0d:cc:
c1:4c:3b:55:e7:ca:30:49:2f:0c:f8:30:7b:9e:43:3e:75:ab:
fd:67:52:78:81:33:5d:e5:d6:da:59:5a:8c:b7:ab:58:31:96:
62:75:38:63:1c:79:b4:df:f3:c2:77:42:87:06:42:e2:b3:46:
02:f5:59:06:27:69:fb:ea:71:2c:c6:05:59:17:5c:1b:14:7a:
82:61:f5:36:82:64:ed:08:ee:39:7a:9e:4e:d9:72:5e:ef:da:
d7:44:b3:22:d4:41:3e:f6:85:33:5e:c3:33:f3:33:7f:0c:e8:
d5:3f:ff:32:f2:ad:e1:e3:f5:d6:b5:9c:fc:5f:3c:fd:68:a0:
0d:c3:bf:b5:dc:91:73:eb:12:7f:5e:26:46:31:69:bd:cd:11:
e7:a1:36:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS0+tXXhY6dFNFCJ8GqXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NTk2Y2VjYzIxZGQwMjY3N2E3MjdlZjM3ZjA2ODk1NDZl
YTUwOTcwHhcNMjQwMTAxMTgzMTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTM4ODZkOTk5ZGVmMTc1ZjZiYTVlYmE5ODVmZDYzYzY4ZTkxOGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuWeEeV3gi6KmSXhcYJlAfWMhU/9
wz+4u2riK4Io9/W5Q/x/EUTx6Ss6PP1wVTDvD18O0BpcacwWEcF4HkgLEyJEmx6F
IIHRvjcNM3g6ZIBcbDagyWWyoee6vgkMqBtlvTAeIAP4z/X+f9xcxh2tdc8QG6Fh
uuVdJMhUm9L2m3Klf/S3F5Pv6W3PTsLcGsd+deeN+PpjpUmYvujPxmMGgCizc4nB
0o2M3X4982/2aFoVOy2mRxRc54TyweC3ZtIqj7Fir3jsxBLqQdZQMh9RGEJJXoKA
v2GY6q2lw/AgL6mW5O8GhwbjvuYxq9CSmDQcpD1o9UfT1nU0W2WCV/sqyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDk4htmZ3vF19rpeuphf1jxo6RjKMB8GA1UdIwQY
MBaAFElZbOzCHdAmd6cn7zfwaJVG6lCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUt
ODk3ZDAwOTc3ZmYyLzEvT1RpRzJabmU4WFgydWw2Nm1GX1dQR2pwR01vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUtODk3ZDAwOTc3ZmYy
LzEvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU3cHMA0G
CSqGSIb3DQEBCwUAA4IBAQBV/gz7dF9rDbDXPOdzJmCAFiyj5sYl4mQg7oAukZbl
nKx/pyE2yLcnyMyjqEMlvXDtYBHhuOgznAgRbbck057I3LXKryo73Im4DA+2fPLs
OwIYpKr9lxcnPteC5PetwGvzjErVaCxb4rc6DczBTDtV58owSS8M+DB7nkM+dav9
Z1J4gTNd5dbaWVqMt6tYMZZidThjHHm03/PCd0KHBkLis0YC9VkGJ2n76nEsxgVZ
F1wbFHqCYfU2gmTtCO45ep5O2XJe79rXRLMi1EE+9oUzXsMz8zN/DOjVP/8y8q3h
4/XWtZz8Xzz9aKANw7+13JFz6xJ/XiZGMWm9zRHnoTYX
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:02 2025 by rpki-client