![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Pk_x_RaMkYv0odPxv3FKGrjlTvE.roa
File: Pk_x_RaMkYv0odPxv3FKGrjlTvE.roa (raw, json)
Hash identifier: qGai3wu0nz1ujn5bYUT7PNJeXAPbStRAyUvN0+mZjXM=
Subject key identifier: 3E:4F:F1:FD:16:8C:91:8B:F4:A1:D3:F1:BF:71:4A:1A:B8:E5:4E:F1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0191AF77B1768EBE180C3261827E41136D41
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Pk_x_RaMkYv0odPxv3FKGrjlTvE.roa
Signing time: Sun 01 Sep 2024 21:22:22 +0000
ROA not before: Sun 01 Sep 2024 21:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.8.205.0/24 maxlen: 24
85.208.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 19:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:af:77:b1:76:8e:be:18:0c:32:61:82:7e:41:13:6d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 1 21:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e4ff1fd168c918bf4a1d3f1bf714a1ab8e54ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:97:23:48:ca:99:eb:18:45:37:8b:a6:b8:
e7:8d:94:69:8d:dd:e7:77:0d:02:4c:a1:a3:ad:ef:
89:5c:91:dd:ee:f7:5f:ff:8a:e3:34:2d:be:d8:97:
f1:4d:81:44:3e:3b:46:5c:48:66:af:3b:e8:4d:18:
74:1b:a0:9d:65:bf:69:eb:4e:b9:64:29:1d:35:ee:
6f:81:0e:b6:ec:67:a2:7a:de:ab:ff:64:03:5b:ba:
56:4c:56:c2:61:24:f1:eb:99:d5:0e:07:d6:66:49:
07:c6:fb:99:e5:bc:dd:97:89:d5:2e:d6:ab:d4:fc:
4a:1c:8a:f8:6d:97:2c:cf:f1:19:33:e8:02:75:26:
0c:d7:a7:21:26:a8:60:58:3d:6a:3b:fc:8e:24:bf:
cc:49:c4:c4:4a:e2:42:11:e6:7f:c6:9e:91:00:68:
ea:36:0d:5a:ed:71:83:4e:96:5f:8e:69:84:0e:34:
88:d0:7e:d8:08:9c:bd:85:b7:4c:1c:c9:5b:02:67:
a1:c8:2f:98:c4:b9:ed:9f:b8:25:fc:f5:74:e6:03:
a4:c0:99:5f:98:83:4e:26:ac:75:f7:81:b9:41:3c:
5a:ad:61:48:0a:d0:c2:a7:2d:b2:a9:6e:df:0c:d0:
ef:b7:e1:ec:49:3c:21:c2:d7:7f:50:f3:b4:b7:b6:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4F:F1:FD:16:8C:91:8B:F4:A1:D3:F1:BF:71:4A:1A:B8:E5:4E:F1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Pk_x_RaMkYv0odPxv3FKGrjlTvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
85.208.105.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:59:ac:67:cd:a7:97:61:d1:25:77:df:34:e3:26:a2:5c:93:
16:37:f2:f4:d9:7b:85:a5:f2:d5:71:60:0c:8e:51:29:80:6e:
4c:e7:56:59:57:95:0c:c0:40:b2:1e:b7:83:e9:79:81:70:f2:
3c:a3:85:c6:d2:04:87:cb:09:91:cf:ec:ef:d9:70:11:02:a6:
0a:07:eb:84:0b:04:7b:dc:95:5a:21:16:b2:28:9d:dd:a6:f4:
b9:c5:66:38:d1:ec:d2:54:78:b4:24:fc:a0:d0:76:30:f8:f3:
96:e9:4b:7c:46:0e:68:da:d9:05:c8:9e:20:73:78:8d:cf:38:
2c:ec:86:3d:ea:09:94:77:26:52:33:01:f7:bd:eb:be:3b:5c:
f3:8e:f2:f5:d0:67:87:94:ea:c7:28:d7:fb:cc:07:c0:8c:3f:
55:c9:2f:5b:6a:09:fe:04:25:8a:15:42:2b:96:32:b7:87:aa:
0e:af:b8:50:41:a3:f4:99:57:2e:89:cf:83:61:91:2f:75:17:
0b:13:c9:dc:ee:b2:d9:2d:ba:13:c2:d9:c9:51:38:6e:71:93:
06:16:18:3e:75:f7:6d:1b:a4:5e:f8:e5:62:8b:ab:dc:65:a2:
cb:59:73:4e:43:41:9a:c7:01:41:aa:c9:65:e4:85:f6:2e:34:
dd:1b:f1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:37 2025 by rpki-client