![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/EycoxCNOnqpIj4e9EBL-95I3iaY.roa
File: EycoxCNOnqpIj4e9EBL-95I3iaY.roa (raw, json)
Hash identifier: kySPOGan10/nFQ6rSFzkGIv47OMB5IARRpxo+u62OWs=
Subject key identifier: 13:27:28:C4:23:4E:9E:AA:48:8F:87:BD:10:12:FE:F7:92:37:89:A6
Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial: 018CC349010CE87DCE2075E29512747E38BE
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/EycoxCNOnqpIj4e9EBL-95I3iaY.roa
Signing time: Mon 01 Jan 2024 04:29:50 +0000
ROA not before: Mon 01 Jan 2024 04:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47952
IP address blocks: 185.225.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 08:45:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:01:0c:e8:7d:ce:20:75:e2:95:12:74:7e:38:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Validity
Not Before: Jan 1 04:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=132728c4234e9eaa488f87bd1012fef7923789a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:46:9a:42:db:49:44:fa:29:87:d7:f9:16:
d9:86:c3:99:d2:5d:a0:7d:a0:56:8e:c8:e3:7d:03:
1f:03:4f:e9:a5:6b:03:2e:51:eb:6c:f7:61:f1:5b:
87:22:50:37:71:f3:88:c2:16:ee:84:dd:f6:4a:f9:
40:2a:b1:3d:b6:e2:da:19:38:56:a5:eb:0c:bb:c4:
0c:b7:b3:08:5c:a1:97:30:e6:56:ae:37:d5:24:07:
89:05:6a:8e:0e:5b:18:67:96:f5:ef:00:3a:4e:34:
10:1c:00:22:a5:a5:7c:52:44:0c:84:cd:ef:47:a4:
6f:62:61:61:7c:bb:df:d8:c4:09:cb:c6:a1:8d:9f:
09:c2:66:55:aa:70:23:c5:f2:f2:7b:78:15:2b:1c:
83:03:57:ea:35:d2:a4:67:cf:de:63:ea:56:66:bc:
96:58:62:a2:bd:34:05:9f:d0:c4:a9:69:5f:a0:e1:
1b:10:33:e0:54:ee:4b:20:2f:71:e0:f2:4a:f7:2c:
47:cd:a9:08:b6:53:73:0b:b8:ec:23:de:7d:3d:cc:
8d:b0:84:60:fb:c8:91:c8:c6:4f:33:e0:e4:fd:c1:
63:f1:19:f2:ba:4f:16:98:00:f0:d5:e3:60:6e:7f:
64:0f:8a:76:d6:67:ad:c2:e9:45:3b:b7:5b:37:11:
fc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:27:28:C4:23:4E:9E:AA:48:8F:87:BD:10:12:FE:F7:92:37:89:A6
X509v3 Authority Key Identifier:
keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/EycoxCNOnqpIj4e9EBL-95I3iaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.167.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:62:29:af:fe:9c:4b:4e:72:79:22:3a:2c:b1:3f:09:d6:fe:
e0:07:bb:d9:d4:32:77:8a:6e:5b:27:fd:99:35:6a:bf:ad:2c:
73:23:f3:60:a3:4d:df:d6:6f:40:b5:b0:eb:96:42:0e:cf:ab:
14:60:4f:a2:31:2e:94:83:86:5e:42:4c:18:96:f7:55:8a:44:
bc:95:76:3f:1e:4e:28:d3:aa:36:ab:87:5c:b2:8f:eb:eb:c1:
f2:57:fa:f4:d8:28:61:b9:84:64:0d:ec:23:37:b7:d1:e0:ee:
7c:bf:29:a3:33:22:86:1b:d7:99:6b:36:aa:1e:05:d8:aa:99:
87:70:e6:45:fb:94:ca:d0:92:cd:51:14:12:76:6d:15:53:47:
b0:75:9f:a8:23:26:7f:f1:64:aa:16:11:11:5b:b8:64:43:16:
6a:c7:cd:77:11:95:6c:05:eb:b0:52:b1:bc:01:e2:18:58:3c:
2e:a9:ba:fd:95:84:97:cb:c1:af:14:9a:ad:ea:62:91:97:68:
7a:a1:29:b0:56:8a:f3:96:be:55:51:3c:08:0d:56:9c:b4:29:
42:31:3d:18:56:35:db:7e:00:0e:01:fe:b6:d9:14:81:2b:cf:
4c:9a:84:8b:be:12:a2:31:d5:45:76:14:f5:97:ae:fe:ba:ca:
72:a7:93:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSQEM6H3OIHXilRJ0fji+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NGJmNTgxMTljZmU5OWYxNzQ5YmNkOWJkMTI0NzAyYmE5
Y2I3MTMwHhcNMjQwMTAxMDQyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzI3MjhjNDIzNGU5ZWFhNDg4Zjg3YmQxMDEyZmVmNzkyMzc4OWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh5GmkLbSUT6KYfX+RbZhsOZ0l2g
faBWjsjjfQMfA0/ppWsDLlHrbPdh8VuHIlA3cfOIwhbuhN32SvlAKrE9tuLaGThW
pesMu8QMt7MIXKGXMOZWrjfVJAeJBWqODlsYZ5b17wA6TjQQHAAipaV8UkQMhM3v
R6RvYmFhfLvf2MQJy8ahjZ8JwmZVqnAjxfLye3gVKxyDA1fqNdKkZ8/eY+pWZryW
WGKivTQFn9DEqWlfoOEbEDPgVO5LIC9x4PJK9yxHzakItlNzC7jsI959PcyNsIRg
+8iRyMZPM+Dk/cFj8Rnyuk8WmADw1eNgbn9kD4p21metwulFO7dbNxH82wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBMnKMQjTp6qSI+HvRAS/veSN4mmMB8GA1UdIwQY
MBaAFEVL9YEZz+mfF0m82b0SRwK6nLcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNmQwOTItY2M2MC00YTUxLWIwMTAt
MGE2ZTZkZmJkMmUzLzEvRXljb3hDTk9ucXBJajRlOUVCTC05NUkzaWFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jNmQwOTItY2M2MC00YTUxLWIwMTAtMGE2ZTZkZmJkMmUz
LzEvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueGnMA0G
CSqGSIb3DQEBCwUAA4IBAQB7Yimv/pxLTnJ5IjossT8J1v7gB7vZ1DJ3im5bJ/2Z
NWq/rSxzI/Ngo03f1m9AtbDrlkIOz6sUYE+iMS6Ug4ZeQkwYlvdVikS8lXY/Hk4o
06o2q4dcso/r68HyV/r02ChhuYRkDewjN7fR4O58vymjMyKGG9eZazaqHgXYqpmH
cOZF+5TK0JLNURQSdm0VU0ewdZ+oIyZ/8WSqFhERW7hkQxZqx813EZVsBeuwUrG8
AeIYWDwuqbr9lYSXy8GvFJqt6mKRl2h6oSmwVorzlr5VUTwIDVactClCMT0YVjXb
fgAOAf622RSBK89MmoSLvhKiMdVFdhT1l67+uspyp5MR
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:42 2025 by rpki-client