![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/kGZq3bx5E_TizQ1KI3nVHlR6Oug.roa
File: kGZq3bx5E_TizQ1KI3nVHlR6Oug.roa (raw, json)
Hash identifier: 99e40W0dO7Xs14MZaQy2RYQ+fXPnK1QqKmZtPzEP84w=
Subject key identifier: 90:66:6A:DD:BC:79:13:F4:E2:CD:0D:4A:23:79:D5:1E:54:7A:3A:E8
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 1838EEB6
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/kGZq3bx5E_TizQ1KI3nVHlR6Oug.roa
Signing time: Sat 01 Jan 2022 10:01:33 +0000
ROA not before: Sat 01 Jan 2022 10:01:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24961
IP address blocks: 193.47.99.0/24 maxlen: 24
2001:67c:192c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406384310 (0x1838eeb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Jan 1 10:01:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90666addbc7913f4e2cd0d4a2379d51e547a3ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d0:ff:8e:78:db:5c:b3:fc:ee:04:50:cc:81:
d6:04:4b:b0:06:72:86:94:fa:56:76:97:9e:84:10:
7b:2f:66:b8:c9:0a:88:02:3b:0e:22:45:85:fb:92:
f5:91:45:f1:fb:43:77:76:99:fb:18:4e:8d:34:b9:
78:bc:03:9b:2b:99:57:fe:c8:b2:0f:bf:bc:1d:4e:
f6:c4:3f:98:e5:87:7b:62:43:4c:fe:52:75:48:cd:
9c:cc:99:39:40:58:2e:12:dd:57:b6:77:83:5f:0e:
01:ad:e0:af:95:db:62:92:6e:41:93:f2:06:52:a0:
e0:9b:3f:0a:90:c5:c8:c1:04:69:92:d5:af:4c:60:
bb:67:dc:be:02:16:0a:cf:c6:db:7f:ca:2a:78:59:
10:51:1b:7a:6e:b5:1c:92:a4:18:9a:f0:a5:de:32:
b9:a8:d2:6b:b8:28:64:64:c5:41:2f:3b:e7:2d:f7:
48:bb:af:d8:ea:6e:3a:8b:d3:68:0e:41:ef:8e:27:
7a:d0:70:d7:bc:23:d6:aa:1b:cf:d9:dc:49:33:7c:
4b:d4:b8:ea:a2:53:29:ac:7f:69:a0:23:a9:7c:ca:
4c:78:37:ab:76:b3:b8:36:af:49:06:76:00:df:f5:
d6:a6:f8:8e:79:8a:f9:0a:28:c2:8f:19:e0:d5:18:
ed:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:66:6A:DD:BC:79:13:F4:E2:CD:0D:4A:23:79:D5:1E:54:7A:3A:E8
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/kGZq3bx5E_TizQ1KI3nVHlR6Oug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.99.0/24
IPv6:
2001:67c:192c::/48
Signature Algorithm: sha256WithRSAEncryption
ad:dd:cf:fd:c3:72:9b:a0:87:20:b1:29:6a:7f:3a:3c:04:19:
a7:90:50:04:dc:e6:29:70:fe:98:2f:a4:f3:ff:63:14:07:10:
ab:b1:e8:72:52:83:a5:47:e4:23:bf:3c:c1:93:d9:6a:19:cb:
30:d1:42:31:05:24:bd:5e:79:80:f1:49:03:81:e0:32:25:17:
20:42:6c:c6:7d:75:82:41:1f:19:c8:67:25:1a:72:d5:8c:43:
5e:83:55:e2:f3:67:04:4c:57:3d:b7:eb:bc:fa:f5:69:c3:e9:
9f:18:c9:f9:6e:84:3f:45:57:30:36:6b:91:6f:fd:9d:16:82:
e3:e4:14:25:fd:72:f0:fc:ae:d3:50:a3:d0:ba:85:97:3b:66:
dc:e6:23:82:24:4b:15:94:70:12:ff:ad:93:08:f1:e6:7f:fe:
78:3d:f5:4e:c9:fc:99:08:dd:b8:46:1a:56:2c:70:85:8f:86:
88:90:01:f8:4a:53:1d:e6:9c:81:66:36:3a:22:be:14:ff:20:
2d:f2:e6:16:c0:c2:bc:62:e5:41:4d:6e:c4:9a:ff:26:6f:cb:
02:24:95:04:aa:c7:43:24:72:53:0f:f3:61:93:5c:57:8c:5c:
f6:fb:31:1f:5e:5f:11:9a:ee:1c:d9:5f:78:11:a4:e1:d0:53:
c7:23:03:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:26 2025 by rpki-client