![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RZyO56BCHpeI7u1p9_dRKGlZmXI.roa
File: RZyO56BCHpeI7u1p9_dRKGlZmXI.roa (raw, json)
Hash identifier: yccU+HVNg6eLoyKcvoseovRoq1U1nzS3aywQbBXZwiQ=
Subject key identifier: 45:9C:8E:E7:A0:42:1E:97:88:EE:ED:69:F7:F7:51:28:69:59:99:72
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6262536D5C7835FD0D1CBB7F81A726
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RZyO56BCHpeI7u1p9_dRKGlZmXI.roa
Signing time: Tue 25 Jun 2024 12:32:46 +0000
ROA not before: Tue 25 Jun 2024 12:32:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396603
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:62:53:6d:5c:78:35:fd:0d:1c:bb:7f:81:a7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=459c8ee7a0421e9788eeed69f7f7512869599972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:a9:8a:2c:dc:41:d1:7b:72:b3:0d:9a:a0:
54:41:70:b0:17:18:c2:76:94:eb:e7:ec:30:47:2a:
ef:7b:8b:83:5e:af:0d:25:91:20:17:62:70:7f:4a:
36:83:c3:8a:1b:73:fa:9b:27:f6:fd:71:fc:b8:25:
0a:4a:82:bc:ad:2e:99:e6:c2:48:dc:ca:f8:11:ff:
9b:04:f5:42:da:5c:96:60:81:4b:85:78:a5:9a:a6:
80:12:7b:33:d2:4e:6d:ef:85:58:5b:30:44:54:ee:
2e:82:10:24:fe:1c:d6:aa:23:e7:a5:0e:a7:fb:97:
38:98:0f:ee:3b:5f:a7:a9:d7:87:0f:02:4f:fc:44:
53:03:be:10:ee:52:f1:44:a5:d7:1e:a8:81:2c:5d:
33:17:76:97:cd:a5:24:2c:5d:43:d7:50:5b:7b:50:
ce:73:c7:3a:f9:6e:96:91:31:e8:23:20:6f:db:df:
0f:6b:e9:78:b2:0f:47:10:bf:ec:dc:99:9e:be:4f:
17:23:03:18:a2:4d:76:b4:e4:c5:08:ce:9f:41:75:
26:3d:ad:ec:81:6d:6b:66:5f:68:f6:4b:d7:3a:68:
b5:f5:9b:86:70:3e:05:ad:b1:01:93:d8:b3:3f:58:
21:3a:24:3f:f5:40:58:e3:c7:6d:74:9b:49:15:7e:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9C:8E:E7:A0:42:1E:97:88:EE:ED:69:F7:F7:51:28:69:59:99:72
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RZyO56BCHpeI7u1p9_dRKGlZmXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
58:e8:e3:2a:cb:92:ab:f0:da:cd:1c:4d:72:09:f1:43:f3:a5:
41:a8:65:36:0c:82:49:5a:3b:c8:39:ba:f8:5e:9d:24:2b:3d:
eb:26:38:2a:8e:93:f5:29:e0:00:33:ad:a1:0c:81:4f:14:fd:
a1:bd:c4:7f:07:63:23:01:b9:6c:5a:f1:de:d2:7f:c7:db:36:
c3:11:14:e8:ef:92:49:6a:f8:de:5a:98:d4:33:1d:fb:c0:55:
2c:5c:a3:70:08:f0:56:29:b1:ee:af:75:67:ce:fe:31:4f:28:
e4:84:d9:3b:75:c0:bf:b0:67:42:06:fc:cb:49:6a:fe:12:18:
27:71:d7:75:31:b7:e0:73:5b:7c:37:62:b8:4a:27:bf:59:11:
6f:7d:22:a4:21:d5:bc:40:20:5f:2a:19:bf:c5:4a:6d:07:95:
3f:15:eb:7f:54:1c:07:15:ff:e2:cc:61:e6:66:d3:2c:ae:99:
1b:89:95:12:5b:04:d7:80:2a:da:79:d3:d6:1a:f7:ab:12:39:
5c:06:dd:e6:f0:30:bd:d5:ee:a6:8b:90:a0:74:37:37:13:c4:
bc:c2:89:50:58:dd:af:1a:0d:a9:99:55:a1:76:7f:8d:19:6f:
0a:07:a1:6a:ca:f7:fd:3b:8a:d0:d4:19:0d:10:ee:d8:18:3f:
34:16:8d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:45 2025 by rpki-client