![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/WRBLUG7xBlKOFU9k0HtLBYWabJU.roa
File: WRBLUG7xBlKOFU9k0HtLBYWabJU.roa (raw, json)
Hash identifier: 2VM9+6YoMGwLXc/ncHGGKgyDPsK6xcLTtN2JWGBCaeg=
Subject key identifier: 59:10:4B:50:6E:F1:06:52:8E:15:4F:64:D0:7B:4B:05:85:9A:6C:95
Certificate issuer: /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial: 40AC55
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/WRBLUG7xBlKOFU9k0HtLBYWabJU.roa
Signing time: Tue 04 Jan 2022 23:36:58 +0000
ROA not before: Tue 04 Jan 2022 23:36:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57436
IP address blocks: 185.19.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4238421 (0x40ac55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
Validity
Not Before: Jan 4 23:36:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59104b506ef106528e154f64d07b4b05859a6c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:73:95:a4:e5:66:1c:78:8f:e8:bd:14:58:
b8:55:b9:9d:52:32:3b:f0:65:3c:4a:a8:f8:c1:5e:
0e:7a:d0:ec:7d:90:7f:ca:98:30:8f:64:ca:4a:cc:
ea:2c:5b:db:ae:1c:b9:88:71:23:65:67:7f:e1:67:
e3:30:0b:06:2e:31:30:84:a4:ff:b9:4c:66:c4:07:
70:22:09:e5:31:d5:5e:da:4e:88:5b:a1:11:0f:13:
d8:6d:c6:47:d6:0d:c5:36:bc:11:e7:8e:c8:30:22:
e5:d4:d6:e2:a1:e1:95:76:dc:fb:a1:ca:55:82:0f:
12:55:f7:2a:4c:a1:d8:04:d3:e2:90:9b:65:b5:41:
ce:7c:ce:f4:cb:3c:74:aa:1d:40:fa:49:72:f9:76:
21:3f:69:e7:44:54:c9:a7:ca:f3:d0:26:8b:e0:a6:
42:4e:cc:75:08:0d:2d:a1:c1:51:d4:7d:04:e1:91:
d7:8c:bb:4e:30:91:94:8a:8f:90:66:b6:83:5a:aa:
ad:5e:19:f6:ee:76:fe:9d:c1:aa:23:3d:62:4a:7c:
7b:ac:0b:ed:97:eb:59:9b:25:d1:dc:91:80:26:b0:
4e:ce:98:d3:e3:59:08:43:a9:76:d0:cd:db:bd:be:
af:5e:13:8d:e2:9b:25:d6:fa:ef:50:32:a9:1f:e2:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:10:4B:50:6E:F1:06:52:8E:15:4F:64:D0:7B:4B:05:85:9A:6C:95
X509v3 Authority Key Identifier:
keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/WRBLUG7xBlKOFU9k0HtLBYWabJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:dd:e0:05:a7:6c:bf:bc:1c:fc:75:ad:e0:1a:19:cb:05:b5:
b5:61:e0:a3:d8:27:fc:4e:7d:ea:2e:c5:0b:d8:56:59:65:5c:
e1:b9:71:4d:a4:1d:5a:e1:05:55:55:09:65:f3:bf:65:fa:37:
d6:5f:7f:1d:36:d1:03:3d:7b:df:5c:40:91:45:a0:07:e9:b6:
18:bf:6a:8c:a3:ca:ed:ff:81:24:13:02:87:dc:5e:4d:de:c6:
9e:cb:73:ca:fc:01:54:4e:e7:f2:86:2e:3d:87:29:d9:26:79:
11:73:49:f0:c0:2c:7e:5b:48:68:99:59:b9:0a:e3:67:72:1d:
5a:91:34:43:09:ad:37:f4:e7:ac:20:9d:54:fe:db:46:9a:7a:
8d:42:83:f3:d8:e4:1f:a2:f5:91:b5:0e:3c:ab:85:5f:85:a7:
b6:54:e1:27:bc:ad:d3:ac:41:01:ac:55:3b:6c:10:b8:89:da:
fe:75:9a:9c:bc:e1:e1:99:1c:6f:11:da:99:ed:f3:e5:d6:75:
64:b8:e5:2d:e5:e2:80:14:29:94:53:10:6e:8e:8b:60:a6:93:
bd:ef:34:f9:30:8e:d1:2a:f7:7e:9f:8a:cd:5a:6e:4c:e2:21:
a8:73:45:29:a5:0f:2e:b0:7d:ae:4f:36:ac:1a:97:3c:21:a5:
46:9e:bf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:30 2025 by rpki-client