![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/n7IPEvcv4Jl3Txhk4JhN-TdjBt8.roa
File: n7IPEvcv4Jl3Txhk4JhN-TdjBt8.roa (raw, json)
Hash identifier: CsBTJCMmq3vsRojFyEosC5btbKgD5Pkg1XOBKcjZH0U=
Subject key identifier: 9F:B2:0F:12:F7:2F:E0:99:77:4F:18:64:E0:98:4D:F9:37:63:06:DF
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2CADFD39
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/n7IPEvcv4Jl3Txhk4JhN-TdjBt8.roa
Signing time: Sat 01 Jan 2022 04:59:40 +0000
ROA not before: Sat 01 Jan 2022 04:59:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197474
IP address blocks: 77.79.230.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749600057 (0x2cadfd39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 1 04:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fb20f12f72fe099774f1864e0984df9376306df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:e0:cd:f5:dc:e9:ed:af:dc:34:08:dc:0b:
58:c4:ac:cb:3b:a8:88:95:d3:c3:b4:75:50:9d:98:
f0:8e:6c:f8:a6:c2:a8:71:1f:b9:24:15:63:8b:8d:
09:58:cb:77:c5:41:d7:41:15:3a:25:ea:4c:54:dc:
81:b2:95:ec:5b:83:7d:97:9a:f3:1a:99:00:82:b9:
6c:c5:f4:fc:cb:73:35:7d:ae:be:63:b6:e6:8d:30:
57:15:ee:9a:fb:c1:9a:95:20:0a:86:63:6f:13:91:
71:e8:1a:8a:4a:22:42:64:90:b7:28:d3:0f:44:6a:
10:bd:ce:3e:a4:04:13:a6:2b:7b:34:02:c1:39:cd:
b2:93:ff:9a:3b:0c:a1:a6:fc:8a:5d:3b:5b:8d:24:
6e:52:2b:39:ea:a9:00:10:84:fd:be:e6:68:b7:0e:
29:5f:60:4f:b5:85:49:39:cc:fa:31:ae:99:3e:da:
75:8f:f8:6b:bf:bf:91:d8:36:27:5e:1a:dc:39:b8:
8c:05:fc:08:1a:d9:a5:52:4a:d1:fe:92:07:4c:75:
f3:71:92:f4:6a:1b:7f:b1:21:95:24:6d:45:4e:ad:
44:27:b8:3d:2e:f6:84:d2:65:04:a4:a1:1e:d9:45:
28:94:bc:5e:13:83:d7:ae:ae:e7:4e:f2:77:27:38:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B2:0F:12:F7:2F:E0:99:77:4F:18:64:E0:98:4D:F9:37:63:06:DF
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/n7IPEvcv4Jl3Txhk4JhN-TdjBt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.230.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:39:3c:cf:fc:40:4d:b2:4b:b3:f1:e4:d7:16:54:48:07:1a:
b5:4e:92:44:82:2e:39:45:fa:09:07:a1:da:d2:07:42:be:0b:
29:aa:61:a3:9b:b8:95:95:3d:2d:93:ce:ed:3f:d3:22:2a:96:
f2:79:1e:91:35:a9:47:77:95:0f:af:32:0e:b2:af:55:98:85:
9e:fe:29:3b:95:bc:69:27:06:c9:73:e2:48:66:a2:6b:0e:d6:
fa:f2:bb:f4:99:0c:58:10:6d:8e:40:9c:6a:b6:47:d1:b3:68:
6b:48:70:96:0c:da:50:53:de:ee:ca:b2:50:1c:df:50:25:9c:
49:de:df:ce:b7:89:d1:f0:44:00:0c:50:bc:e9:68:ae:ba:eb:
2d:f5:c0:94:ba:74:83:44:43:a7:72:13:b3:21:3e:f4:36:fa:
08:25:e2:35:89:41:b9:64:32:f1:c5:e9:0b:3e:23:68:a0:f4:
25:37:b3:1a:31:20:b0:3a:3b:bf:ca:2a:19:20:d9:d2:51:04:
d6:7b:9b:5f:1a:2b:64:06:0e:0e:6e:a1:8c:97:71:44:ef:5d:
13:d3:ce:c0:68:19:50:d2:6b:51:fd:bf:0c:57:77:7c:e2:7a:
b9:1b:4b:0a:79:14:f4:16:f6:c2:a9:0e:5c:e2:a3:b4:f3:6a:
77:a0:ef:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:50 2025 by rpki-client