![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RPct9ynkBBvQblqUquhveEl0YdY.roa
File: RPct9ynkBBvQblqUquhveEl0YdY.roa (raw, json)
Hash identifier: qmzZIro0KsXGXTUBh/cGLWe5RTKjV8UoM9ZtdzGXSnY=
Subject key identifier: 44:F7:2D:F7:29:E4:04:1B:D0:6E:5A:94:AA:E8:6F:78:49:74:61:D6
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6271CA7D43CDFB4B8A67AEAB70C955
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RPct9ynkBBvQblqUquhveEl0YdY.roa
Signing time: Tue 25 Jun 2024 12:32:50 +0000
ROA not before: Tue 25 Jun 2024 12:32:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397203
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:71:ca:7d:43:cd:fb:4b:8a:67:ae:ab:70:c9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44f72df729e4041bd06e5a94aae86f78497461d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:66:87:31:ae:98:36:3e:64:88:71:79:38:
7d:04:90:26:9d:d3:38:1c:42:d3:21:53:fe:74:99:
fb:e6:7a:42:4f:43:cc:30:20:d5:ba:e2:31:19:dc:
96:39:b8:71:7e:9a:6b:1f:fc:e6:1d:5c:1a:9c:bc:
6e:bb:e9:a5:d1:39:fe:0b:bf:6c:95:a1:0d:2e:1e:
4d:cb:92:75:42:09:a4:29:ff:e2:e5:3a:de:89:89:
ea:88:04:aa:b9:3d:9e:7a:fe:af:e3:81:43:5c:5a:
3d:88:9c:21:91:2f:9e:5a:30:2f:f9:11:b1:53:c2:
76:20:b5:d2:40:1b:5d:40:a3:08:8d:0c:e1:0b:e9:
2e:49:21:04:01:81:1a:23:b6:81:46:8f:47:d8:ee:
1a:01:cb:cd:e4:d5:f3:e0:c1:b3:17:76:a1:73:c8:
9f:f1:ee:d0:26:0f:de:0f:93:b3:8c:5e:6f:b8:a2:
fd:14:fd:a6:02:df:8f:97:6f:d7:0b:55:aa:77:9e:
29:14:69:ff:81:ba:20:7d:bc:6c:e9:17:1b:96:b7:
ba:26:96:e8:7b:06:22:71:1d:42:b7:97:65:6d:6e:
1d:aa:1a:a0:c5:d5:c9:9f:7b:35:65:47:a0:1f:97:
00:ca:15:51:e3:b5:b1:c6:60:13:e4:03:e3:f4:2b:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F7:2D:F7:29:E4:04:1B:D0:6E:5A:94:AA:E8:6F:78:49:74:61:D6
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RPct9ynkBBvQblqUquhveEl0YdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
16:0f:01:08:11:af:41:5b:6e:f2:79:d9:cb:d8:8a:f5:11:1a:
4c:20:dc:c9:a5:9e:1a:35:40:7f:58:12:3d:61:0b:dc:5b:0d:
b1:70:cf:c9:1e:91:17:cb:fd:d4:7c:ea:e7:d4:24:e5:d7:02:
44:ae:f0:ac:20:61:fe:40:17:bc:5e:5c:64:23:ec:b7:70:35:
62:c6:c6:6e:64:e3:a9:ec:1b:fd:d6:11:dc:2a:6d:05:27:a9:
52:46:e5:4f:0b:f1:9a:10:6c:f7:97:c0:67:7a:bb:95:07:25:
00:cb:dc:99:18:8a:4f:a6:b9:17:c5:79:ae:ab:d4:40:f5:4a:
d0:80:ee:2a:df:ea:46:15:99:a6:ce:1d:1c:17:35:0c:17:cb:
a7:84:d1:94:4f:b8:52:c7:56:60:fb:c5:f8:bd:e8:a7:53:d7:
46:9f:a0:12:aa:b6:df:07:06:c8:5f:33:df:31:a1:29:83:62:
de:e6:02:05:93:5e:3f:90:dc:f2:e7:4f:ab:24:47:d3:b1:7e:
82:ea:62:ab:30:b9:42:4b:71:c8:16:a9:9c:b3:e8:91:c6:96:
ea:0b:f1:15:82:19:44:35:0c:5d:ef:cb:fb:a1:48:df:e3:d1:
53:cf:9e:94:33:5e:4d:6d:39:08:8a:80:e4:04:a2:06:6c:b6:
9e:5a:d6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:07 2025 by rpki-client