![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/UIEUtE5CBL40U8ul2sQbgiX9GVI.roa
File: UIEUtE5CBL40U8ul2sQbgiX9GVI.roa (raw, json)
Hash identifier: I6lHp5ERXIoa3uemlKT4YBxHcvT6T0gSiaTRs7I1L+s=
Subject key identifier: 50:81:14:B4:4E:42:04:BE:34:53:CB:A5:DA:C4:1B:82:25:FD:19:52
Certificate issuer: /CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Certificate serial: 1244AE1A
Authority key identifier: 6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/UIEUtE5CBL40U8ul2sQbgiX9GVI.roa
Signing time: Tue 01 Feb 2022 16:19:40 +0000
ROA not before: Tue 01 Feb 2022 16:19:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201849
IP address blocks: 185.62.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306490906 (0x1244ae1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Validity
Not Before: Feb 1 16:19:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=508114b44e4204be3453cba5dac41b8225fd1952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:27:63:df:fb:1e:ee:62:5c:e5:04:50:6a:
72:3c:33:8a:43:38:d6:42:7b:f0:b8:ce:f9:1d:7a:
ad:f0:fa:90:aa:69:e9:73:08:a3:a9:8c:df:61:88:
e4:66:ce:bf:33:3b:7b:cc:00:f7:28:74:39:ec:80:
25:df:df:19:f5:69:0c:f6:d9:d0:51:fa:06:38:ed:
ab:e1:2d:03:5d:c2:1a:fe:f1:e1:a0:82:a3:9e:a3:
1c:80:4b:a5:9e:03:6b:24:f4:fc:5d:0c:e9:a1:f7:
8f:4e:b7:26:34:7c:f2:30:c5:aa:d6:5e:6b:0a:09:
11:61:fd:38:c7:15:e5:79:af:91:15:ad:47:e6:43:
da:de:be:eb:48:d1:7d:38:d6:04:07:82:26:e8:0f:
3a:1d:61:3e:4c:4b:3a:ba:e2:48:d9:15:73:d1:05:
9f:4c:ee:c7:fb:b2:cd:e9:ad:42:ce:fb:5a:03:23:
ac:7d:06:f1:27:3f:b9:5d:9f:1a:37:98:23:b0:0e:
6d:c3:98:55:62:dd:37:70:6c:df:09:9c:da:3d:0f:
07:1f:39:16:fe:7d:f7:a6:44:69:98:ff:43:4b:80:
00:3f:13:7a:95:54:5a:ae:53:c3:fa:52:19:91:7b:
ac:91:f5:c0:26:f6:2d:27:55:68:fc:e8:f2:47:66:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:81:14:B4:4E:42:04:BE:34:53:CB:A5:DA:C4:1B:82:25:FD:19:52
X509v3 Authority Key Identifier:
keyid:6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/UIEUtE5CBL40U8ul2sQbgiX9GVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:96:7c:80:d6:11:c5:0d:a5:2c:9c:a0:06:af:f5:95:7f:81:
22:8c:f1:6a:7d:72:2d:f1:db:0d:35:76:07:cb:88:75:47:2f:
c3:dd:b6:01:76:87:93:49:1a:ce:f9:aa:96:e3:fa:4c:b9:33:
d4:aa:f8:ad:f9:42:d1:6d:93:8e:ca:72:58:84:5d:dd:6a:4e:
e7:90:de:f7:1e:6e:75:d8:7c:d9:49:aa:cf:eb:4f:03:99:cc:
19:ec:eb:00:29:3f:43:e1:87:98:80:98:45:7b:72:f9:47:b3:
bb:18:2d:4c:72:2d:8c:75:c6:6a:fc:03:7d:6a:ce:e8:e8:97:
2a:56:3e:85:42:85:7b:d7:31:e5:25:56:29:79:16:aa:b1:71:
18:db:11:b7:6b:66:e6:b7:84:cf:9b:40:52:7e:31:07:05:8e:
46:30:0d:c1:da:4d:10:b5:9e:ab:bb:f8:70:b7:b2:44:e7:b0:
4c:90:e7:2e:a1:f8:8c:3f:3e:8d:65:02:21:88:2f:a6:29:ec:
45:6a:ca:d3:bd:fa:4e:94:58:02:ae:6a:50:66:7f:6d:58:bb:
7b:f5:77:62:c9:06:73:26:b5:bd:f8:80:9b:dd:aa:e9:f5:69:
b5:07:1d:d9:ac:f5:1f:00:4d:b3:6e:5d:c7:37:3e:64:92:8e:
23:6f:37:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:45 2025 by rpki-client