![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/EuKpLrDKsc4w6O9-WUNLh1S2IDk.roa
File: EuKpLrDKsc4w6O9-WUNLh1S2IDk.roa (raw, json)
Hash identifier: gtaZ2sTkkW7+hbUfypLfJzzJyr0Vc8SS0aVXTerQftU=
Subject key identifier: 12:E2:A9:2E:B0:CA:B1:CE:30:E8:EF:7E:59:43:4B:87:54:B6:20:39
Certificate issuer: /CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Certificate serial: 019039551153D4578E63540B597DDF57F268
Authority key identifier: 46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/EuKpLrDKsc4w6O9-WUNLh1S2IDk.roa
Signing time: Fri 21 Jun 2024 05:46:34 +0000
ROA not before: Fri 21 Jun 2024 05:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203995
IP address blocks: 2a05:9cc0::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 24 Jun 2024 06:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:55:11:53:d4:57:8e:63:54:0b:59:7d:df:57:f2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Validity
Not Before: Jun 21 05:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12e2a92eb0cab1ce30e8ef7e59434b8754b62039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:f3:ab:c6:f2:52:b6:99:b2:64:5c:b6:ff:
ff:ed:be:bc:9d:e0:f2:e7:17:af:95:c7:89:61:e7:
d9:f3:bb:a6:ab:10:a5:27:4e:7e:d4:da:82:71:a0:
f0:a4:d1:e2:65:e4:31:f8:2d:d8:ca:37:92:c1:35:
99:63:46:0e:ec:18:65:ea:b1:c7:bd:e7:ed:54:bd:
c6:5c:2e:16:31:6d:77:d6:2a:69:96:5d:c3:dc:4c:
6d:64:98:12:5e:cd:71:92:75:89:ad:7d:01:92:75:
38:10:d2:84:07:49:ff:c0:22:7b:86:83:d8:af:09:
10:ee:04:48:87:39:79:8c:22:e3:db:5a:1b:9e:30:
fa:0a:53:07:3c:eb:53:79:3a:7b:ec:3a:fc:bf:95:
11:76:e0:37:4e:a9:43:6c:e1:72:95:dc:ca:b9:fc:
17:4e:d7:0f:b7:ea:94:16:ae:c1:3e:8f:09:15:2c:
52:4c:40:c9:09:b4:bc:68:0f:25:24:0c:3d:32:5e:
91:77:e1:86:85:70:31:9b:6a:24:db:ee:d9:61:fc:
09:a7:bf:74:9e:a4:ad:d3:aa:ad:ad:bc:8e:c6:22:
5c:ce:f7:ba:e8:34:6f:28:11:25:db:58:a4:65:64:
50:43:00:77:d2:55:81:7c:7e:de:83:01:11:4b:5c:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E2:A9:2E:B0:CA:B1:CE:30:E8:EF:7E:59:43:4B:87:54:B6:20:39
X509v3 Authority Key Identifier:
keyid:46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/EuKpLrDKsc4w6O9-WUNLh1S2IDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
74:3f:7f:23:41:56:cc:25:a7:96:84:a3:d4:6f:1f:dc:ef:9b:
c8:c2:0d:8e:1d:0e:bb:2d:65:a6:47:ff:70:36:b6:f7:03:b9:
8f:22:53:a5:58:34:71:3e:45:6b:50:11:f1:4f:d4:77:a9:f4:
3f:d3:a6:8a:45:cd:b1:7e:72:0d:1d:93:38:fd:00:e5:b8:8e:
e3:d1:7c:39:b0:7f:1a:70:41:92:18:7f:ba:28:e8:46:36:30:
ec:20:22:28:7a:36:5f:36:1d:b3:ea:4b:24:28:4c:3e:50:ae:
cc:12:dc:1f:41:26:d5:32:64:c9:1f:fb:e5:d1:ca:46:a6:f0:
1c:63:f9:ea:4d:09:d1:53:2b:d1:2c:43:44:dc:e3:f2:cf:98:
66:38:68:57:b8:6d:54:94:6c:67:f0:91:34:08:ab:05:a4:6b:
26:cb:67:3d:db:4e:46:51:e7:02:78:ae:14:65:98:7e:5a:c4:
e1:6e:a4:40:5f:75:9a:af:64:01:42:01:e1:b9:6f:c7:4f:71:
f7:fb:12:cd:2a:f1:d9:91:9b:9e:20:e0:9f:62:3a:2d:4b:bf:
a8:ca:4d:d8:ef:97:82:9e:28:e7:a7:97:94:26:20:5a:e5:34:
07:3c:03:c1:6d:4b:1a:ce:c7:42:4f:7e:3a:a0:bb:2c:f7:eb:
41:54:5c:7c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZA5VRFT1FeOY1QLWX3fV/JoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YmI4MjE1YjIyNjZkYTNjMGY2Y2E1NWNjN2JhODAwZTlh
ZGUyYTIwHhcNMjQwNjIxMDU0NjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmUyYTkyZWIwY2FiMWNlMzBlOGVmN2U1OTQzNGI4NzU0YjYyMDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8Tzq8byUraZsmRctv//7b68neDy
5xevlceJYefZ87umqxClJ05+1NqCcaDwpNHiZeQx+C3YyjeSwTWZY0YO7Bhl6rHH
veftVL3GXC4WMW131ippll3D3ExtZJgSXs1xknWJrX0BknU4ENKEB0n/wCJ7hoPY
rwkQ7gRIhzl5jCLj21obnjD6ClMHPOtTeTp77Dr8v5URduA3TqlDbOFyldzKufwX
TtcPt+qUFq7BPo8JFSxSTEDJCbS8aA8lJAw9Ml6Rd+GGhXAxm2ok2+7ZYfwJp790
nqSt06qtrbyOxiJczve66DRvKBEl21ikZWRQQwB30lWBfH7egwERS1wbXQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBLiqS6wyrHOMOjvfllDS4dUtiA5MB8GA1UdIwQY
MBaAFEa7ghWyJm2jwPbKVcx7qADpreKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82YTMyMTUtNmI2Mi00MzYzLTlhYmMt
N2E1NGRiNTllYzJkLzEvRXVLcExyREtzYzR3Nk85LVdVTkxoMVMySURrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny82YTMyMTUtNmI2Mi00MzYzLTlhYmMtN2E1NGRiNTllYzJk
LzEvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgWcwDAN
BgkqhkiG9w0BAQsFAAOCAQEAdD9/I0FWzCWnloSj1G8f3O+byMINjh0Ouy1lpkf/
cDa29wO5jyJTpVg0cT5Fa1AR8U/Ud6n0P9OmikXNsX5yDR2TOP0A5biO49F8ObB/
GnBBkhh/uijoRjYw7CAiKHo2XzYds+pLJChMPlCuzBLcH0Em1TJkyR/75dHKRqbw
HGP56k0J0VMr0SxDRNzj8s+YZjhoV7htVJRsZ/CRNAirBaRrJstnPdtORlHnAniu
FGWYflrE4W6kQF91mq9kAUIB4blvx09x9/sSzSrx2ZGbniDgn2I6LUu/qMpN2O+X
gp4o56eXlCYgWuU0BzwDwW1LGs7HQk9+OqC7LPfrQVRcfA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:44 2025 by rpki-client