![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/N7CattkCDitqGXEzmYTLVm979eM.roa
File: N7CattkCDitqGXEzmYTLVm979eM.roa (raw, json)
Hash identifier: ZAQyCCoQrdM3n93/0SSJySrlIETarlM3f0mOZKpn/Yo=
Subject key identifier: 37:B0:9A:B6:D9:02:0E:2B:6A:19:71:33:99:84:CB:56:6F:7B:F5:E3
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 019165BC43F175A5CC2B20889ABA27AE8315
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/N7CattkCDitqGXEzmYTLVm979eM.roa
Signing time: Sun 18 Aug 2024 13:45:22 +0000
ROA not before: Sun 18 Aug 2024 13:45:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60423
IP address blocks: 5.145.113.0/24 maxlen: 24
5.145.114.0/24 maxlen: 24
5.145.117.0/24 maxlen: 24
5.145.118.0/24 maxlen: 24
5.145.119.0/24 maxlen: 24
185.24.252.0/24 maxlen: 24
185.24.253.0/24 maxlen: 24
185.24.255.0/24 maxlen: 24
2a04:2f00::/48 maxlen: 48
2a04:2f00:1::/48 maxlen: 48
2a04:2f00:2::/48 maxlen: 48
2a04:2f00:3::/48 maxlen: 48
2a04:2f00:d::/48 maxlen: 48
2a04:2f00:e::/48 maxlen: 48
2a04:2f00:ff01::/48 maxlen: 48
2a04:2f00:ff02::/48 maxlen: 48
2a04:2f00:ff03::/48 maxlen: 48
2a04:2f00:ff06::/48 maxlen: 48
2a04:2f00:ff08::/48 maxlen: 48
2a04:2f00:ff09::/48 maxlen: 48
2a04:2f01:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 Aug 2024 08:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:65:bc:43:f1:75:a5:cc:2b:20:88:9a:ba:27:ae:83:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Aug 18 13:45:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37b09ab6d9020e2b6a1971339984cb566f7bf5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:26:be:cb:7d:90:1f:53:7c:fd:5f:ac:8a:
54:de:51:fd:b2:71:88:e7:96:51:ec:4b:ae:e3:9a:
60:f4:72:d5:e0:ac:63:d4:18:e2:d4:64:d3:c8:1a:
e0:f9:53:e1:9f:9f:69:c6:6a:a3:df:0d:69:a3:88:
d3:4a:9f:1e:6b:e1:52:18:c2:e0:8b:d9:9b:d4:93:
3d:3a:e1:58:b4:cd:1c:f3:35:3f:90:d6:86:c7:d8:
27:e7:06:34:e5:6a:61:bf:c1:a8:64:8b:7a:5d:e7:
fb:7e:14:df:56:99:84:54:de:72:a0:4d:34:3d:3f:
d5:a0:b5:86:3f:a8:f5:05:4f:ec:87:1a:30:f5:d9:
7b:9b:96:21:c0:65:0e:70:61:c9:70:1f:1a:99:a4:
7c:50:02:b7:8f:9a:8b:59:59:46:6a:35:b0:de:96:
3b:43:42:95:d2:a3:09:a7:26:2f:8f:89:28:c7:84:
b7:1b:70:ef:12:7c:6a:0c:a8:46:ed:63:95:c9:87:
18:b4:a1:64:05:7c:53:2f:b5:25:ec:2c:fb:4a:5f:
88:c9:a8:53:5e:c8:9f:de:1f:f4:06:4b:81:89:a8:
a2:92:eb:cf:ba:b2:12:12:90:d5:95:fb:49:b1:27:
72:db:05:a8:d1:7a:9b:79:cf:7b:f8:54:14:a0:1f:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B0:9A:B6:D9:02:0E:2B:6A:19:71:33:99:84:CB:56:6F:7B:F5:E3
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/N7CattkCDitqGXEzmYTLVm979eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.113.0-5.145.114.255
5.145.117.0-5.145.119.255
185.24.252.0/23
185.24.255.0/24
IPv6:
2a04:2f00::/46
2a04:2f00:d::-2a04:2f00:e:ffff:ffff:ffff:ffff:ffff
2a04:2f00:ff01::-2a04:2f00:ff03:ffff:ffff:ffff:ffff:ffff
2a04:2f00:ff06::/48
2a04:2f00:ff08::/47
2a04:2f01:3::/48
Signature Algorithm: sha256WithRSAEncryption
44:96:5b:35:44:2d:78:26:cf:2e:6f:d3:f4:76:96:96:4b:30:
85:ad:44:eb:47:b0:6e:a2:1a:b1:f8:e4:a7:b8:d3:13:ea:e2:
55:08:1d:99:1e:55:6e:85:06:a5:1f:51:c4:c7:17:1f:55:b5:
a5:a0:06:be:80:b6:8f:66:7e:9d:40:3a:90:76:c1:03:ad:5c:
53:fa:90:9c:95:2a:bd:e9:39:a9:dc:00:d9:1f:c9:c2:91:32:
a7:6a:71:70:23:4b:ce:18:bd:c6:09:b6:36:ee:ec:dd:d0:6f:
af:6c:07:02:f5:be:b6:4a:cb:c2:71:20:50:b4:d4:e3:e0:b5:
45:75:de:77:57:3f:c8:0d:01:33:46:56:06:f5:7a:66:40:2e:
be:d1:ef:fa:3a:d3:ef:35:8e:6f:36:ac:ed:fb:99:84:02:9e:
42:27:3d:4b:6a:48:2e:56:1d:02:cc:c2:56:f5:98:f1:2d:9d:
c6:81:29:e3:6f:79:db:2b:52:41:ea:03:ed:b6:80:70:5b:a3:
d4:39:e0:c4:b2:a9:11:01:20:72:b3:5a:a3:fe:5c:05:d4:ce:
e3:ae:10:53:7d:ae:e7:a9:1d:94:cb:46:54:94:93:2a:f1:6e:
bb:e2:8c:36:a8:88:01:c9:7f:60:64:21:5d:f5:00:63:16:9c:
2a:b0:5e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:52 2025 by rpki-client