![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9XIopGEFS0jQ9iurbazBQuEH8Ug.roa
File: 9XIopGEFS0jQ9iurbazBQuEH8Ug.roa (raw, json)
Hash identifier: hgILMQQcB/rObGEQ+0RH1hsRcMY1aRxbm73A4JuGUio=
Subject key identifier: F5:72:28:A4:61:05:4B:48:D0:F6:2B:AB:6D:AC:C1:42:E1:07:F1:48
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F623FA819C99320778D669588C68C49
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9XIopGEFS0jQ9iurbazBQuEH8Ug.roa
Signing time: Tue 25 Jun 2024 12:32:37 +0000
ROA not before: Tue 25 Jun 2024 12:32:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36631
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:3f:a8:19:c9:93:20:77:8d:66:95:88:c6:8c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f57228a461054b48d0f62bab6dacc142e107f148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1e:be:6b:27:fd:b6:9c:84:85:a2:c8:2e:82:
40:c5:bd:94:d3:6a:1b:1c:00:ff:41:0d:31:37:ec:
1e:9d:94:0a:77:fa:83:05:f6:b2:3f:b1:83:ce:1a:
68:73:13:9d:04:6d:87:34:db:7c:62:a5:af:be:b2:
4b:31:ca:fd:a4:40:56:9b:ce:9a:c1:58:fc:c0:81:
9b:42:30:a3:8f:d0:65:fa:50:6c:87:3e:af:d8:c7:
35:72:58:2b:1f:59:1d:6c:ea:3e:55:e7:e6:fb:e2:
49:b3:8d:b4:99:4a:d8:f6:88:3c:33:c7:b1:fd:29:
42:66:16:3e:cf:ad:4c:b5:7f:3f:2d:b6:78:5c:e7:
f4:f2:77:7c:6f:39:85:53:39:59:81:fa:14:93:10:
a8:67:f1:75:59:86:e8:5c:b2:7a:0f:bb:d7:fa:af:
b4:a9:08:d2:11:12:2f:6f:0d:b7:a2:33:06:45:b8:
cf:fb:da:93:ac:8b:5f:ec:bf:af:bf:57:5b:67:0b:
a3:77:52:fb:22:a5:7c:34:9e:e3:ae:f9:66:35:ee:
73:29:20:65:36:e2:60:cb:f8:6c:63:51:af:40:1c:
53:d6:04:24:14:ea:94:0f:94:ad:b4:61:5d:01:24:
7d:c5:17:a2:88:cc:bf:02:eb:3c:52:3d:76:78:4d:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:72:28:A4:61:05:4B:48:D0:F6:2B:AB:6D:AC:C1:42:E1:07:F1:48
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9XIopGEFS0jQ9iurbazBQuEH8Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
6a:42:52:8c:87:70:53:fe:38:03:5b:79:4d:6e:54:e7:13:1c:
94:40:bf:06:0c:ad:4b:4b:aa:3d:b6:13:f1:50:2d:78:aa:11:
78:66:87:aa:91:c4:04:f9:eb:88:7d:a1:42:04:4c:53:5c:2b:
44:6f:48:68:0a:f7:d8:5b:68:69:b5:0e:95:65:f4:09:9f:72:
74:55:63:ed:f9:01:00:7a:e6:28:c7:b0:e2:d6:53:98:ea:6b:
f0:5d:d3:ee:69:2f:46:14:12:cf:c4:5e:4b:a4:bb:10:d0:0e:
ad:28:20:65:c7:d6:7a:10:8f:7d:87:40:09:09:32:42:06:a7:
e2:df:33:c3:a1:35:3e:81:7d:76:6e:97:b1:e1:3e:91:7f:eb:
4f:08:52:f0:1c:4e:19:16:0d:d4:5c:dd:6f:30:aa:22:98:83:
f0:d7:5d:56:a7:3f:6c:86:08:00:26:8f:53:60:d0:66:a5:57:
c0:83:a6:3e:6a:13:d0:93:52:ac:e5:da:12:79:21:7d:02:3c:
c3:87:1e:f5:20:20:b7:31:02:c3:b6:b5:98:48:c8:34:6e:0b:
a6:64:bb:eb:0a:f6:5b:03:f0:da:5c:47:92:ac:04:63:c9:e5:
47:dd:c2:c0:33:12:6d:27:a7:10:63:e7:f6:f1:b7:da:42:9c:
21:5a:fe:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:05 2025 by rpki-client