![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/teY32oGRCANBHEAnCjnFn0hmRV8.roa
File: teY32oGRCANBHEAnCjnFn0hmRV8.roa (raw, json)
Hash identifier: INfqSyc+vuV2DcUWh0p58TyGno2vxeRHpgTuKIMxuaE=
Subject key identifier: B5:E6:37:DA:81:91:08:03:41:1C:40:27:0A:39:C5:9F:48:66:45:5F
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0193005F8A27751F63892C2B1950179F483F
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/teY32oGRCANBHEAnCjnFn0hmRV8.roa
Signing time: Wed 06 Nov 2024 07:28:01 +0000
ROA not before: Wed 06 Nov 2024 07:28:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 45.155.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:5f:8a:27:75:1f:63:89:2c:2b:19:50:17:9f:48:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Nov 6 07:28:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5e637da81910803411c40270a39c59f4866455f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:71:93:eb:00:0e:35:48:3e:22:17:49:27:
fb:96:7a:27:c9:c2:50:e1:d4:7e:bf:c0:91:66:a5:
1d:fa:da:38:9e:24:be:d9:e7:0f:0f:e0:3e:e8:8f:
0a:80:1f:cb:6b:90:cc:fc:83:d3:a8:b3:1e:0a:39:
ff:48:10:31:6c:b4:40:80:7f:64:99:c4:25:4b:77:
47:23:8b:cb:38:0e:45:2d:f6:bc:91:ab:e3:8f:62:
bc:a0:16:1f:a3:bf:39:81:e6:df:05:18:db:ed:52:
6e:09:9d:af:6a:c4:0b:83:0f:b5:03:85:c1:89:aa:
d7:09:c7:e7:af:5f:f7:57:42:83:38:8e:3b:a6:ca:
67:5d:e5:d9:62:d4:51:26:2b:32:2e:c3:10:03:0e:
40:f8:30:19:3d:ad:e0:a4:86:0f:e4:06:f1:25:4f:
77:a8:d9:35:9b:1c:fa:93:79:d3:4d:93:93:58:33:
57:81:7f:bd:09:06:d1:e6:77:6d:75:4e:89:d6:13:
52:29:fc:16:97:af:5a:0d:ac:c1:1c:5c:5b:96:85:
4e:fb:1f:95:d9:d9:bc:0e:be:fd:b7:1f:09:09:a3:
db:53:fa:e0:25:17:1f:27:76:64:e6:61:48:d9:6d:
b7:02:64:be:90:8a:46:43:71:e6:e2:16:e1:28:92:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E6:37:DA:81:91:08:03:41:1C:40:27:0A:39:C5:9F:48:66:45:5F
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/teY32oGRCANBHEAnCjnFn0hmRV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.243.0/24
Signature Algorithm: sha256WithRSAEncryption
79:df:a0:ab:e3:44:85:c1:ab:56:fe:10:39:90:c8:7b:43:e0:
fb:e9:3b:d6:25:6c:8a:87:eb:e5:95:77:ae:96:39:00:94:c2:
ee:5f:f1:62:4d:bd:2b:25:22:36:7d:c0:d9:8d:e8:8a:c7:c4:
b8:00:ec:ac:13:81:e2:86:e3:ee:45:00:67:ab:94:73:e9:94:
b6:24:4a:c9:d6:71:6e:fd:82:8c:9b:8c:65:2b:b0:3f:7e:39:
31:7d:f1:6b:b8:63:33:25:bc:de:04:00:42:34:40:01:64:66:
6e:4d:4b:57:03:4f:17:01:0c:8e:7f:ba:b3:47:33:74:0e:05:
b2:d3:a7:8a:fd:8f:b3:3f:19:72:68:84:56:88:10:d2:e9:36:
80:78:fc:72:ae:5c:07:55:1f:07:65:a0:af:03:9a:89:81:65:
b8:67:63:5a:ec:4d:7a:03:1a:fc:48:9e:be:a5:5a:aa:6a:42:
3b:d4:86:9a:bd:66:b9:42:ef:a0:13:6a:8e:bf:af:88:1e:81:
46:bd:77:db:50:40:c2:c4:4e:8d:e2:24:23:40:fe:73:78:7d:
8c:b7:72:53:b1:61:5f:b5:24:d8:b8:f6:98:48:2c:37:de:b0:
b7:3c:1f:57:82:e0:ae:de:d2:5a:69:27:79:40:59:12:41:29:
28:d9:53:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:03 2025 by rpki-client