![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/5vuEoottKw4qA32FTKEfSEHxMmM.roa
File: 5vuEoottKw4qA32FTKEfSEHxMmM.roa (raw, json)
Hash identifier: 0G9SSSCSlT1J/P/zx7d9l/Fn7ohqqTnOveQQwVyVX9U=
Subject key identifier: E6:FB:84:A2:8B:6D:2B:0E:2A:03:7D:85:4C:A1:1F:48:41:F1:32:63
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 01933020B469128CB62523AF83658D7C689F
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/5vuEoottKw4qA32FTKEfSEHxMmM.roa
Signing time: Fri 15 Nov 2024 14:01:09 +0000
ROA not before: Fri 15 Nov 2024 14:01:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44029
IP address blocks: 45.81.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:30:20:b4:69:12:8c:b6:25:23:af:83:65:8d:7c:68:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Nov 15 14:01:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6fb84a28b6d2b0e2a037d854ca11f4841f13263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:fc:db:41:00:da:89:4e:f4:4b:c7:f4:3c:
61:b1:72:5e:e8:23:a0:e3:88:1d:86:3c:c1:63:a8:
2a:d4:49:18:1c:b5:57:99:bb:f6:b7:5a:00:73:2b:
e3:73:59:28:40:e6:3c:23:74:37:92:73:b2:f0:6f:
b3:f3:f2:66:e3:da:8d:4f:1e:e0:3b:2e:65:05:ab:
49:9c:e0:8c:26:20:bf:7c:d8:5f:39:a5:6c:13:76:
5d:51:af:48:1c:06:ac:43:21:1e:ce:c9:a7:66:26:
98:c4:87:55:1a:c1:ee:18:01:c9:c7:47:0c:bd:11:
8a:28:d7:f0:8b:44:4b:7c:28:0a:99:45:3c:b5:76:
16:26:e1:d9:a6:26:19:f6:89:f7:86:b1:7a:3b:bb:
e3:aa:5a:18:6d:10:ad:70:4f:1b:90:e7:36:3d:5b:
e3:c3:6a:61:f4:f7:2d:d2:c8:bb:70:4f:91:53:70:
89:e9:ab:c6:ee:99:a1:70:a3:4b:59:42:b3:62:9a:
48:ed:30:3f:1d:3e:ab:17:e1:51:e8:ca:e1:39:f4:
a9:6e:a4:94:eb:a7:ed:11:02:48:ad:0f:c1:31:9f:
28:24:d4:2f:c7:9f:ef:3b:0d:2b:6b:e5:b8:29:8b:
5a:e6:8d:15:6f:bc:2e:78:04:d8:97:c6:d4:2d:7f:
c0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FB:84:A2:8B:6D:2B:0E:2A:03:7D:85:4C:A1:1F:48:41:F1:32:63
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/5vuEoottKw4qA32FTKEfSEHxMmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.108.0/22
Signature Algorithm: sha256WithRSAEncryption
93:8a:8f:25:7b:64:b6:9b:34:65:da:82:8f:f1:af:fb:17:bf:
4b:66:b1:96:2b:39:ec:8c:a3:d0:2d:7b:63:68:89:12:ce:88:
fe:36:31:da:17:3f:8f:75:0f:d0:26:3d:ca:5a:da:83:93:72:
62:21:3b:79:fd:f5:f2:84:8d:2d:64:a4:dd:71:33:87:4c:cc:
b1:05:da:72:bd:da:65:65:f0:1a:81:f8:30:e1:76:f4:a2:28:
33:06:70:e0:c3:f9:37:6b:fe:80:c9:94:0f:cd:dd:2b:3a:75:
5d:9a:97:01:1c:c8:09:ed:76:39:19:6e:1b:12:e6:4f:33:29:
bb:47:86:f3:6a:91:36:dc:cb:b5:47:88:7a:9b:4c:78:ae:66:
ad:fb:1c:8c:3b:b7:a9:2c:21:2a:1e:7f:85:73:7a:a9:8f:ec:
94:7c:2d:32:b6:52:46:a2:ce:7f:eb:1e:17:0c:aa:7a:bc:0c:
ba:a6:25:5e:c9:6d:4e:2c:e5:8f:00:6b:52:2f:d2:d2:b5:9a:
be:e7:6d:d7:f6:1f:76:d5:e3:9e:a6:fc:91:ee:f4:2d:79:b0:
3f:8b:17:c7:c6:05:63:d4:16:4b:33:b8:3b:b3:cf:e5:2a:25:
91:bb:4d:bc:5d:63:35:fe:a3:43:d9:b4:cf:79:01:42:25:46:
f5:28:6e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:31 2025 by rpki-client