![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/cPnQInP0Pqb6D5l6PE8oSs1Dj_E.roa
File: cPnQInP0Pqb6D5l6PE8oSs1Dj_E.roa (raw, json)
Hash identifier: bdZ0K+9nBOUR3zTyugj5WLKD5nBOGi3vsIcdwh6dHvo=
Subject key identifier: 70:F9:D0:22:73:F4:3E:A6:FA:0F:99:7A:3C:4F:28:4A:CD:43:8F:F1
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 01862C79410330A78363CD1F8F6EDAE7499A
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/cPnQInP0Pqb6D5l6PE8oSs1Dj_E.roa
Signing time: Tue 07 Feb 2023 15:23:09 +0000
ROA not before: Tue 07 Feb 2023 15:23:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48582
IP address blocks: 217.147.178.0/24 maxlen: 24
217.147.177.0/24 maxlen: 24
217.147.179.0/24 maxlen: 24
217.147.176.0/24 maxlen: 24
217.147.182.0/24 maxlen: 24
217.147.181.0/24 maxlen: 24
217.147.183.0/24 maxlen: 24
217.147.180.0/24 maxlen: 24
193.118.192.0/24 maxlen: 24
193.118.196.0/24 maxlen: 24
193.118.195.0/24 maxlen: 24
193.118.198.0/24 maxlen: 24
193.118.194.0/24 maxlen: 24
193.118.193.0/24 maxlen: 24
193.118.199.0/24 maxlen: 24
193.118.201.0/24 maxlen: 24
193.118.206.0/24 maxlen: 24
193.118.203.0/24 maxlen: 24
193.118.202.0/24 maxlen: 24
193.118.205.0/24 maxlen: 24
193.118.204.0/24 maxlen: 24
193.118.200.0/24 maxlen: 24
193.118.210.0/24 maxlen: 24
193.118.209.0/24 maxlen: 24
193.118.212.0/24 maxlen: 24
193.118.211.0/24 maxlen: 24
193.118.208.0/24 maxlen: 24
193.118.207.0/24 maxlen: 24
193.118.213.0/24 maxlen: 24
193.118.217.0/24 maxlen: 24
193.118.216.0/24 maxlen: 24
193.118.219.0/24 maxlen: 24
193.118.218.0/24 maxlen: 24
193.118.215.0/24 maxlen: 24
193.118.214.0/24 maxlen: 24
209.213.49.0/24 maxlen: 24
209.213.48.0/24 maxlen: 24
209.213.50.0/24 maxlen: 24
193.118.220.0/24 maxlen: 24
209.213.51.0/24 maxlen: 24
209.213.55.0/24 maxlen: 24
209.213.56.0/24 maxlen: 24
209.213.57.0/24 maxlen: 24
209.213.52.0/24 maxlen: 24
209.213.54.0/24 maxlen: 24
209.213.53.0/24 maxlen: 24
209.213.58.0/24 maxlen: 24
209.213.63.0/24 maxlen: 24
209.213.62.0/24 maxlen: 24
209.213.59.0/24 maxlen: 24
209.213.61.0/24 maxlen: 24
209.213.60.0/24 maxlen: 24
193.118.136.0/24 maxlen: 24
193.118.137.0/24 maxlen: 24
193.118.139.0/24 maxlen: 24
193.118.138.0/24 maxlen: 24
193.118.133.0/24 maxlen: 24
193.118.135.0/24 maxlen: 24
193.118.134.0/24 maxlen: 24
193.118.140.0/24 maxlen: 24
193.118.142.0/24 maxlen: 24
193.118.141.0/24 maxlen: 24
193.118.144.0/24 maxlen: 24
193.118.143.0/24 maxlen: 24
193.118.145.0/24 maxlen: 24
193.118.152.0/24 maxlen: 24
193.118.151.0/24 maxlen: 24
193.118.150.0/24 maxlen: 24
193.118.147.0/24 maxlen: 24
193.118.149.0/24 maxlen: 24
193.118.148.0/24 maxlen: 24
193.118.146.0/24 maxlen: 24
193.118.154.0/24 maxlen: 24
193.118.153.0/24 maxlen: 24
193.118.156.0/24 maxlen: 24
193.118.155.0/24 maxlen: 24
193.118.158.0/24 maxlen: 24
193.118.157.0/24 maxlen: 24
193.118.159.0/24 maxlen: 24
193.118.128.0/24 maxlen: 24
193.118.130.0/24 maxlen: 24
193.118.129.0/24 maxlen: 24
193.118.132.0/24 maxlen: 24
193.118.131.0/24 maxlen: 24
138.43.28.0/22 maxlen: 22
185.170.161.0/24 maxlen: 24
185.170.163.0/24 maxlen: 24
185.170.162.0/24 maxlen: 24
63.142.4.0/24 maxlen: 24
63.142.1.0/24 maxlen: 24
63.142.3.0/24 maxlen: 24
63.142.2.0/24 maxlen: 24
63.142.0.0/24 maxlen: 24
63.142.5.0/24 maxlen: 24
63.142.6.0/24 maxlen: 24
63.142.11.0/24 maxlen: 24
63.142.8.0/24 maxlen: 24
63.142.7.0/24 maxlen: 24
63.142.10.0/24 maxlen: 24
63.142.9.0/24 maxlen: 24
63.142.15.0/24 maxlen: 24
63.142.14.0/24 maxlen: 24
63.142.12.0/24 maxlen: 24
63.142.13.0/24 maxlen: 24
217.147.178.0/23 maxlen: 23
217.147.176.0/23 maxlen: 23
217.147.182.0/23 maxlen: 23
193.118.204.0/23 maxlen: 23
193.118.200.0/22 maxlen: 22
193.118.216.0/22 maxlen: 22
193.118.214.0/23 maxlen: 23
209.213.48.0/22 maxlen: 22
209.213.48.0/20 maxlen: 20
209.213.56.0/22 maxlen: 22
209.213.52.0/22 maxlen: 22
209.213.60.0/22 maxlen: 22
193.118.138.0/23 maxlen: 23
193.118.134.0/23 maxlen: 23
193.118.144.0/22 maxlen: 22
193.118.150.0/23 maxlen: 23
193.118.152.0/23 maxlen: 23
193.118.128.0/23 maxlen: 23
193.118.132.0/23 maxlen: 23
138.43.4.0/24 maxlen: 24
138.43.0.0/24 maxlen: 24
138.43.8.0/24 maxlen: 24
138.43.7.0/24 maxlen: 24
138.43.10.0/24 maxlen: 24
138.43.9.0/24 maxlen: 24
138.43.6.0/24 maxlen: 24
138.43.5.0/24 maxlen: 24
138.43.11.0/24 maxlen: 24
138.43.15.0/24 maxlen: 24
138.43.14.0/24 maxlen: 24
138.43.13.0/24 maxlen: 24
138.43.12.0/24 maxlen: 24
138.43.31.0/24 maxlen: 24
138.43.29.0/24 maxlen: 24
138.43.28.0/24 maxlen: 24
138.43.30.0/24 maxlen: 24
138.43.26.0/24 maxlen: 24
63.142.6.0/23 maxlen: 23
63.142.14.0/23 maxlen: 23
2a0b:2900:3140::/42 maxlen: 42
2a0b:2900:3240::/42 maxlen: 42
2a0b:2900:1140::/42 maxlen: 42
2a0b:2900:6140::/42 maxlen: 42
2a0b:2900:2140::/42 maxlen: 42
2a0b:2900:216c::/48 maxlen: 48
2a0b:2900:7f::/48 maxlen: 48
2a0b:2900:6100::/42 maxlen: 42
2a0b:2900:3100::/42 maxlen: 42
2a0b:2900:2100::/42 maxlen: 42
2a0b:2900:3200::/42 maxlen: 42
2a0b:2900:1100::/42 maxlen: 42
2a0b:2900:52b4::/47 maxlen: 47
2a0b:2900:4100::/41 maxlen: 41
2a0b:2900:5200::/41 maxlen: 41
2a0b:2900:1100::/41 maxlen: 41
2a0b:2900:2200::/41 maxlen: 42
2a0b:2900:3100::/41 maxlen: 41
2a0b:2900:6200::/41 maxlen: 41
2a0b:2900:3200::/41 maxlen: 41
2a0b:2900:2100::/41 maxlen: 41
2a0b:2900:1000::/41 maxlen: 42
2a0b:2900:4200::/41 maxlen: 41
2a0b:2900:2300::/41 maxlen: 42
2a0b:2900:1200::/41 maxlen: 42
2a0b:2900:61c0::/42 maxlen: 42
2a0b:2900:12c0::/42 maxlen: 42
2a0b:2900:31c0::/42 maxlen: 42
2a0b:2900:21c0::/42 maxlen: 42
2a0b:2900:32c0::/42 maxlen: 42
2a0b:2900:11c0::/42 maxlen: 42
2a0b:2900:1f00::/40 maxlen: 40
2a0b:2900:3180::/42 maxlen: 42
2a0b:2900:1180::/42 maxlen: 42
2a0b:2900:6180::/42 maxlen: 42
2a0b:2900:3280::/42 maxlen: 42
2a0b:2900:2180::/42 maxlen: 42
2a0b:2900:5234::/47 maxlen: 47
2a0b:2900:1280::/41 maxlen: 42
2a0b:2900:1180::/41 maxlen: 41
2a0b:2900:2280::/41 maxlen: 42
2a0b:2900:6280::/41 maxlen: 41
2a0b:2900:2380::/41 maxlen: 42
2a0b:2900:4280::/41 maxlen: 41
2a0b:2900:3180::/41 maxlen: 41
2a0b:2900:3280::/41 maxlen: 41
2a0b:2900:2180::/41 maxlen: 41
2a0b:2900:1080::/41 maxlen: 42
2a0b:2900:4180::/41 maxlen: 41
2a0b:2900:5280::/41 maxlen: 41
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:79:41:03:30:a7:83:63:cd:1f:8f:6e:da:e7:49:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Feb 7 15:23:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70f9d02273f43ea6fa0f997a3c4f284acd438ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:61:f2:15:94:be:2f:8a:8c:1d:f7:33:8e:
7b:ce:59:3e:f9:00:da:75:c0:a2:59:93:3b:8d:82:
17:23:68:13:85:41:6c:5b:d2:fe:da:9c:87:b0:4d:
56:c5:19:4f:a7:5b:cf:c8:6d:6f:5d:b0:3c:64:37:
da:68:b8:45:0d:a5:c4:de:78:1a:4a:8d:44:40:99:
75:bf:58:84:9c:62:93:3f:72:ca:18:b7:38:fb:9d:
f1:3b:a6:37:09:5f:ec:a9:27:21:0c:3f:55:60:48:
53:a6:1e:13:fb:21:91:cd:21:23:c8:49:a5:a5:d7:
19:0b:51:9b:ac:0f:87:a3:ac:35:18:2f:ac:4d:83:
fe:c1:a0:66:55:b8:6d:83:7d:f7:bc:1e:fd:33:5b:
5b:c9:e3:05:74:5f:fa:8f:2c:c7:d6:3c:91:fc:bf:
ac:86:3d:49:23:65:76:b1:a8:c9:a1:d8:eb:c0:76:
2f:fb:9a:eb:b8:cf:01:70:e3:8a:34:8b:67:d8:ab:
3a:d5:10:0f:68:9d:2f:6a:f5:4d:40:b7:88:f9:7e:
ed:87:00:6a:e2:0f:3c:66:8a:6a:a2:ab:c7:2d:92:
c4:c0:7f:f9:01:7c:1e:da:9e:86:de:87:9a:c7:5c:
48:72:35:43:ce:a4:be:0c:63:d5:26:5e:61:c0:96:
f7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F9:D0:22:73:F4:3E:A6:FA:0F:99:7A:3C:4F:28:4A:CD:43:8F:F1
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/cPnQInP0Pqb6D5l6PE8oSs1Dj_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.142.0.0/20
138.43.0.0/24
138.43.4.0-138.43.15.255
138.43.26.0/24
138.43.28.0/22
185.170.161.0-185.170.163.255
193.118.128.0/19
193.118.192.0-193.118.196.255
193.118.198.0-193.118.220.255
209.213.48.0/20
217.147.176.0/21
IPv6:
2a0b:2900:7f::/48
2a0b:2900:1000::-2a0b:2900:12ff:ffff:ffff:ffff:ffff:ffff
2a0b:2900:1f00::/40
2a0b:2900:2100::-2a0b:2900:23ff:ffff:ffff:ffff:ffff:ffff
2a0b:2900:3100::-2a0b:2900:32ff:ffff:ffff:ffff:ffff:ffff
2a0b:2900:4100::-2a0b:2900:42ff:ffff:ffff:ffff:ffff:ffff
2a0b:2900:5200::/40
2a0b:2900:6100::-2a0b:2900:62ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0f:9c:36:56:ec:ba:90:46:c2:36:6d:eb:bd:8f:16:81:91:e0:
d9:63:e0:70:ca:9e:30:dc:1c:1d:4f:46:db:2c:23:82:88:a4:
8c:9d:cb:03:2d:b9:6b:81:05:25:f2:29:e8:aa:44:1b:f9:b0:
62:bf:03:d7:9f:f9:c7:5d:cf:5a:65:e3:12:d8:3a:46:87:b3:
c9:35:b0:0b:15:c4:d6:47:75:a0:bc:6f:8a:53:1c:3a:f5:44:
d5:db:d3:3f:16:7b:ad:6b:11:3a:13:77:b8:99:21:15:8f:0d:
a3:66:78:61:c1:b6:78:33:19:c9:fe:64:83:92:6b:f1:82:05:
d1:5e:76:16:f6:0f:72:c1:46:08:cb:9b:f2:0f:f0:c5:c8:6a:
6d:f0:85:13:72:9a:a0:2c:bf:5a:79:55:0a:4b:f9:c7:a3:42:
18:5d:84:91:b6:ac:2f:a2:fb:2b:04:d7:b9:07:8e:c3:5e:8a:
60:b5:fe:17:6f:c9:f6:3b:77:d1:ff:f8:3e:f9:b8:43:e6:dc:
71:ab:3f:d0:a2:2e:dc:15:b3:9c:5c:68:4b:2b:f1:72:41:b7:
f7:f9:c1:47:f2:e4:0e:52:3f:2a:1f:6f:3d:1e:3f:32:cf:ff:
06:c0:22:2d:8d:5a:8a:95:4e:cb:eb:06:1b:48:a3:6f:44:df:
16:30:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:11 2025 by rpki-client