![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/UxHDEEHFEk2bfJXdcnR_Lp0Dzqk.roa
File: UxHDEEHFEk2bfJXdcnR_Lp0Dzqk.roa (raw, json)
Hash identifier: CC+9hdzW4rEUxXQNISWUjG3qBoLX8TT0Gt/Bn4uhRv8=
Subject key identifier: 53:11:C3:10:41:C5:12:4D:9B:7C:95:DD:72:74:7F:2E:9D:03:CE:A9
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0C0CF0C1
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/UxHDEEHFEk2bfJXdcnR_Lp0Dzqk.roa
Signing time: Thu 03 Feb 2022 08:19:45 +0000
ROA not before: Thu 03 Feb 2022 08:19:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 195.180.148.0/24 maxlen: 24
195.180.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202174657 (0xc0cf0c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Feb 3 08:19:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5311c31041c5124d9b7c95dd72747f2e9d03cea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:2e:73:86:6c:d6:e2:23:73:86:d3:cf:51:
c3:11:1e:ad:5c:d2:41:3f:92:05:4d:36:33:48:29:
f4:65:df:13:20:ed:90:76:8d:0f:e4:af:de:a2:a3:
34:ff:df:0f:ee:55:6e:4b:63:1a:f2:44:3e:51:17:
47:5b:af:8f:09:b7:7b:ca:81:a7:4a:77:d0:ad:e1:
0e:4c:ca:d5:93:9b:08:24:a9:b0:a8:2e:94:43:e1:
fd:a7:0c:dd:ea:3d:7c:89:d0:b0:55:61:ec:be:db:
b3:9a:4f:81:bc:7b:91:c1:0a:7b:72:04:4c:0e:bb:
23:d4:eb:e4:47:97:4d:0c:5f:9e:95:c5:78:cf:0c:
95:14:f9:1a:c5:7e:95:0f:b0:6f:ef:7c:71:42:04:
56:6f:43:f3:19:9c:ea:09:44:e5:53:ea:6b:38:1d:
38:60:24:8c:1c:b0:6c:79:2f:c7:d5:bc:65:c8:ec:
e3:d2:5a:08:1b:74:55:51:eb:8d:42:59:24:cf:01:
8a:2e:4a:b6:6f:bb:b8:9e:93:d4:ac:0c:f5:a6:df:
ab:ac:c4:5d:f3:a2:19:0c:3a:ef:b8:e0:bb:a2:0f:
90:9f:55:e2:e9:d6:38:44:54:bc:88:99:40:a0:44:
db:8d:e9:9c:5f:84:74:b4:0d:91:51:5a:a7:b9:0a:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:11:C3:10:41:C5:12:4D:9B:7C:95:DD:72:74:7F:2E:9D:03:CE:A9
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/UxHDEEHFEk2bfJXdcnR_Lp0Dzqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.148.0/24
195.180.158.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:53:72:10:8e:7a:87:5f:4b:44:8c:60:89:a3:f5:a6:20:cf:
78:6e:dc:73:81:38:6f:75:af:58:c0:1c:cb:65:64:89:ff:ff:
42:9e:fd:0d:6b:64:1e:bb:3b:a0:db:64:a7:a0:83:dc:a5:bb:
cd:3d:4e:b3:66:4d:7a:65:4f:18:c9:34:6f:96:13:e8:72:1d:
f5:74:16:70:bc:95:df:c3:3f:7f:47:b2:7f:ca:aa:fa:8e:73:
60:27:e5:17:5c:6e:91:ea:db:fd:95:f9:e4:12:04:ca:ba:af:
87:dc:d9:b6:4c:3e:e3:72:1d:95:e0:57:30:58:e2:8f:bc:57:
dd:0e:80:d2:1a:a0:d1:2d:89:33:b5:3a:a4:c5:e6:d2:af:36:
5b:58:43:f8:7c:3d:7d:ba:05:2a:98:be:25:41:a2:63:ce:87:
5a:58:1a:54:fd:1c:1a:77:ab:60:77:59:8e:fa:57:a8:cd:ad:
6e:60:41:11:94:81:69:f7:6a:c6:64:7a:4c:53:0b:4a:ad:67:
a8:bc:60:d6:b5:29:c7:f6:27:b3:ac:67:e1:4d:dd:ff:1c:37:
01:e8:04:db:3e:e5:e3:72:ba:69:ac:df:98:17:2e:08:63:ae:
b3:39:12:da:8c:44:5c:39:3d:72:82:c6:0e:d9:a7:45:fe:47:
43:08:d8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:37 2025 by rpki-client