![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/Deu7l3_rR_xY7orVTndgrVG8DZQ.roa
File: Deu7l3_rR_xY7orVTndgrVG8DZQ.roa (raw, json)
Hash identifier: CFcTwpmOTerNxTCqt9RojAnxFundvwBDrZgZkThAp+Q=
Subject key identifier: 0D:EB:BB:97:7F:EB:47:FC:58:EE:8A:D5:4E:77:60:AD:51:BC:0D:94
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 018CC5DBE35C2E864BE3F0E4EEC9528D0AAD
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/Deu7l3_rR_xY7orVTndgrVG8DZQ.roa
Signing time: Mon 01 Jan 2024 16:29:31 +0000
ROA not before: Mon 01 Jan 2024 16:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216435
IP address blocks: 2a10:500:fe01::/48 maxlen: 48
2a10:500:200::/40 maxlen: 40
2a10:500:9400::/40 maxlen: 40
2a10:500:ce00::/40 maxlen: 40
2a10:500:9800::/40 maxlen: 40
2a10:500:1800::/40 maxlen: 40
2a10:500:9500::/40 maxlen: 40
2a10:500:1500::/40 maxlen: 40
2a10:500:f000::/40 maxlen: 40
2a10:500:1a00::/40 maxlen: 40
2a10:500:2400::/40 maxlen: 40
2a10:500:1300::/40 maxlen: 40
2a10:500:4900::/40 maxlen: 40
2a10:500:c300::/40 maxlen: 40
2a10:500:8d00::/40 maxlen: 40
2a10:500:9e00::/40 maxlen: 40
2a10:500:1e00::/40 maxlen: 40
2a10:500:7c00::/40 maxlen: 40
2a10:500:1000::/40 maxlen: 40
2a10:500:2100::/40 maxlen: 40
2a10:500:5600::/40 maxlen: 40
2a10:500:b100::/40 maxlen: 40
2a10:500:1d00::/40 maxlen: 40
2a10:500:6700::/40 maxlen: 40
2a10:500:6000::/40 maxlen: 40
2a10:500:1900::/40 maxlen: 40
2a10:500::/32 maxlen: 48
2a10:500:1600::/40 maxlen: 40
2a10:500:9600::/40 maxlen: 40
2a10:500:1c00::/40 maxlen: 40
2a10:500:1100::/40 maxlen: 40
2a10:500:2200::/40 maxlen: 40
2a10:500:8e00::/40 maxlen: 40
2a10:500:3600::/40 maxlen: 40
2a10:500::/40 maxlen: 48
2a10:500:8b00::/40 maxlen: 40
2a10:500:7a00::/40 maxlen: 40
2a10:500:1f00::/40 maxlen: 40
2a10:500:1b00::/40 maxlen: 40
2a10:500:fe00::/40 maxlen: 40
2a10:500:7e00::/40 maxlen: 40
2a10:500:2000::/40 maxlen: 40
2a10:500:1200::/40 maxlen: 40
2a10:500:4800::/40 maxlen: 40
2a10:500:2300::/40 maxlen: 40
2a10:500:100::/40 maxlen: 40
2a10:500:5c00::/40 maxlen: 40
2a10:500:2600::/40 maxlen: 40
2a10:500:2500::/40 maxlen: 40
2a10:500:4d00::/40 maxlen: 40
2a10:500:de00::/40 maxlen: 40
2a10:500:1700::/40 maxlen: 40
2a10:500:1400::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 22 Aug 2024 22:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e3:5c:2e:86:4b:e3:f0:e4:ee:c9:52:8d:0a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Jan 1 16:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0debbb977feb47fc58ee8ad54e7760ad51bc0d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:e6:2c:39:86:1f:22:41:3e:d1:b9:8b:c9:
b3:15:96:34:19:d4:1a:be:85:0a:a5:2f:45:73:25:
b6:ee:f6:e2:7f:2e:57:14:6c:51:83:ef:2b:0d:c6:
ed:e6:fe:88:d1:0b:d9:71:9a:54:a5:d2:48:8c:7d:
31:bf:7b:eb:79:5b:eb:cc:32:3e:03:89:47:5c:98:
41:57:e0:ae:9e:cd:d6:38:d2:70:9d:c7:f5:7c:a7:
0c:90:eb:41:00:e8:d3:e6:cd:7f:da:cf:68:80:6a:
5a:07:bd:99:75:f3:60:c1:90:ce:f8:f2:ac:c6:29:
05:5d:bd:20:77:25:a1:af:95:b3:d7:18:41:5e:1b:
c5:9f:de:48:06:2f:67:e7:bf:83:51:fb:64:bc:96:
06:10:5b:61:8c:ad:d5:7e:5e:49:ce:54:af:3a:e0:
bc:30:67:8e:f0:c6:0f:8a:b0:08:25:43:71:b7:c8:
b2:d1:55:18:63:d4:04:f2:c4:a6:b8:5d:32:93:57:
da:73:41:3f:d6:da:b6:e9:b0:d4:8e:92:e2:8c:c4:
17:db:76:31:6b:81:1c:20:a4:66:e5:24:4f:1d:61:
a7:18:5d:0c:c7:75:f9:8b:0d:a8:83:a9:04:cf:b0:
79:e1:5c:be:0f:fb:96:e7:eb:9f:ae:f6:17:ae:d7:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:BB:97:7F:EB:47:FC:58:EE:8A:D5:4E:77:60:AD:51:BC:0D:94
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/Deu7l3_rR_xY7orVTndgrVG8DZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:500::/32
Signature Algorithm: sha256WithRSAEncryption
86:fc:a1:24:65:ee:9f:ef:8c:8b:c3:8b:c6:f7:27:40:95:f6:
29:e8:fa:8c:d4:69:a2:84:e1:09:07:fa:2d:3e:63:6f:a3:aa:
74:c6:37:f3:b0:33:ac:04:4c:1d:b4:6a:c2:81:a6:66:19:79:
fb:b3:3b:8e:20:15:17:20:3a:f9:93:33:3a:be:73:fe:f9:67:
14:81:14:6c:08:36:9d:d6:0d:02:45:67:2b:ac:13:77:67:22:
a7:aa:ba:eb:fc:b3:be:64:e3:8c:21:97:e6:7d:7f:3d:8f:24:
eb:99:77:0e:b1:8d:5a:32:d5:39:2f:d4:44:cd:0e:fc:1c:77:
db:12:1a:78:ba:9f:d1:bf:f8:2c:b8:1c:c9:c1:a5:32:15:ec:
7e:37:aa:35:c6:c4:02:81:28:d0:d3:29:70:20:b5:d2:86:33:
53:71:06:1e:bf:71:e7:78:a2:d2:bd:64:d2:72:ae:89:d4:52:
63:f9:e4:df:ba:48:46:63:3c:e6:42:f2:7f:2c:cc:e7:90:f1:
90:89:74:77:67:f8:22:2c:86:32:91:d9:ff:06:24:f6:40:fa:
4c:07:51:2e:d3:d7:25:71:23:ad:f0:e7:33:9b:54:3b:d4:6a:
a9:aa:87:0b:d3:fd:67:61:db:b4:c6:e3:1d:9c:02:a4:65:58:
35:53:75:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:50 2025 by rpki-client