![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/eFWwu1N7ETNvKAAudkieZnDwlRw.roa
File: eFWwu1N7ETNvKAAudkieZnDwlRw.roa (raw, json)
Hash identifier: BBa9sq8RB/68nbW46VaFqrnxCB4IyS/awvwTo0jPVgo=
Subject key identifier: 78:55:B0:BB:53:7B:11:33:6F:28:00:2E:76:48:9E:66:70:F0:95:1C
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 03FA5319
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/eFWwu1N7ETNvKAAudkieZnDwlRw.roa
Signing time: Sat 01 Jan 2022 01:52:25 +0000
ROA not before: Sat 01 Jan 2022 01:52:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31083
IP address blocks: 87.118.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66736921 (0x3fa5319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 01:52:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7855b0bb537b11336f28002e76489e6670f0951c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:0f:37:ca:c5:f6:27:0e:17:34:11:be:04:
fb:04:0f:02:a9:fb:4a:12:49:f0:4d:01:d6:51:1b:
0c:64:6d:ed:75:fa:88:67:68:5c:27:26:2f:cc:a5:
56:df:a0:fb:3a:81:8d:8c:61:05:6d:ce:d9:4d:36:
85:0c:61:e2:ee:0f:18:2f:da:5e:98:ba:7b:d0:71:
df:55:f9:b8:cb:89:b8:cf:65:ef:05:9a:44:01:9d:
68:9f:d6:64:91:fc:6f:e6:49:cc:a9:5d:5c:4e:36:
90:bb:6d:28:7c:b5:1d:29:6c:5c:79:f0:31:94:8d:
c9:b8:60:4e:3a:97:50:aa:9f:80:28:49:6b:01:46:
0e:1b:a8:c2:cc:da:d9:41:96:e1:97:37:da:86:12:
73:6b:97:1d:07:ae:0d:fc:82:cc:e1:20:43:5b:b5:
2a:86:c6:e7:71:89:c6:ba:57:9d:3e:f5:f2:7f:b1:
4f:da:e7:07:07:a0:dc:90:a2:5f:14:24:d0:4e:2e:
86:e6:a1:bc:14:c4:78:9d:99:ae:22:05:03:81:56:
62:3a:fe:0f:55:78:1f:e2:e1:cd:24:3a:13:33:81:
0f:ab:c6:25:c8:9a:a4:b5:4e:5c:5d:64:ae:4c:6d:
c8:7d:9e:fa:2d:67:f9:2f:cd:2f:89:f2:64:34:9f:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:55:B0:BB:53:7B:11:33:6F:28:00:2E:76:48:9E:66:70:F0:95:1C
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/eFWwu1N7ETNvKAAudkieZnDwlRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.140.0/24
Signature Algorithm: sha256WithRSAEncryption
08:55:d9:7d:ac:77:9c:11:2f:a1:26:57:ed:79:4c:5b:89:65:
3c:c1:cc:99:d5:f5:8f:ae:2f:b2:4c:dd:37:b0:ad:3f:6e:95:
b3:15:b4:0f:57:41:92:cd:1a:25:7b:d0:6a:23:d6:1f:db:83:
44:37:97:1b:e0:5c:28:0f:de:50:22:0d:d5:6e:ed:37:df:45:
e6:61:24:7f:eb:09:a0:f4:95:6d:32:41:52:1c:23:f2:8a:0f:
b2:40:e2:71:8f:55:4c:74:e5:67:2d:70:88:40:f1:ef:79:f4:
47:73:23:37:e8:8e:d4:c8:4d:a4:2c:22:88:3a:9e:a6:c0:b9:
08:6a:f8:42:84:3b:c2:14:d4:b0:70:87:0e:c6:2a:56:47:f2:
72:eb:1c:3e:17:48:cc:65:05:2c:5a:7b:7b:ad:aa:65:19:fb:
98:9a:b2:af:81:c4:07:5c:e4:7d:15:4c:8a:8b:8e:3a:bd:f2:
9f:85:d3:2e:46:a0:d7:2b:8b:33:05:ca:c7:e9:29:24:3b:f2:
fb:e9:2d:c6:6a:71:77:ed:4c:be:38:2c:3d:8d:27:8f:3f:89:
9c:8a:46:0c:1b:8e:67:65:c9:4e:6d:dc:17:b9:7c:c2:c7:0c:
ea:ae:10:9e:05:7b:aa:9b:64:8f:10:65:f7:02:43:b3:72:e2:
eb:a5:03:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:13 2025 by rpki-client