![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/V8PtWNH07b2wkrdi-RzwIDBFGmI.roa
File: V8PtWNH07b2wkrdi-RzwIDBFGmI.roa (raw, json)
Hash identifier: f8ZmuYOi4HhnA3nzw8cWpvYcgwEOdEcyDzbZoejY1qc=
Subject key identifier: 57:C3:ED:58:D1:F4:ED:BD:B0:92:B7:62:F9:1C:F0:20:30:45:1A:62
Certificate issuer: /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial: 0143D57A
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/V8PtWNH07b2wkrdi-RzwIDBFGmI.roa
Signing time: Sat 01 Jan 2022 12:03:59 +0000
ROA not before: Sat 01 Jan 2022 12:03:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57167
IP address blocks: 84.246.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21222778 (0x143d57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Validity
Not Before: Jan 1 12:03:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57c3ed58d1f4edbdb092b762f91cf02030451a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:27:87:56:e0:f5:7d:ec:00:81:7b:38:77:
dd:c0:04:bd:7c:78:4f:13:14:82:17:65:74:8f:65:
60:59:1f:a4:90:e9:f3:6a:cc:a8:89:33:2c:e2:47:
37:ce:c4:b8:57:5e:43:1e:12:f8:74:ce:7b:6a:a3:
11:32:a8:14:1e:56:0f:26:c3:16:b2:14:05:84:79:
dc:52:4a:7c:39:43:1b:1d:8f:bf:a5:7e:bc:9c:0b:
fa:bc:78:a2:52:22:af:20:40:2f:37:8b:33:1c:05:
24:2b:5e:2f:11:e7:00:27:e2:6d:5b:32:e9:b1:98:
9d:eb:99:82:ee:0b:b2:07:8c:fe:8b:45:8d:f7:f4:
e4:d1:18:7b:45:8d:5e:fe:1f:fa:2d:91:f2:e0:8b:
7b:51:45:6e:67:a7:e8:d4:91:f5:8a:c3:e2:31:85:
8e:0a:89:33:0f:e7:a9:da:da:6f:ba:0d:03:02:bc:
09:3b:61:21:10:bc:0b:54:77:94:58:78:d1:76:12:
92:ce:29:81:b6:07:bf:a4:f7:ba:55:b1:69:38:d4:
44:2b:ea:f8:66:16:09:ff:33:b3:ff:1e:27:31:a5:
b0:b0:2e:f0:83:64:a8:fb:82:64:15:e8:7f:ff:3c:
2f:d3:0b:15:2a:56:1e:34:68:3c:00:74:c9:ab:cb:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C3:ED:58:D1:F4:ED:BD:B0:92:B7:62:F9:1C:F0:20:30:45:1A:62
X509v3 Authority Key Identifier:
keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/V8PtWNH07b2wkrdi-RzwIDBFGmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.80.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e0:32:dd:71:00:6e:fd:4e:29:db:c8:65:6a:e1:94:f4:5b:
de:a6:00:64:a5:98:ba:2c:52:ac:75:30:f0:b7:9a:9f:b5:08:
d8:2f:61:2d:c6:30:93:58:ed:31:be:cc:18:46:a2:9f:30:93:
5c:06:a5:53:05:0c:bd:18:74:b2:00:9b:2c:22:bf:9a:db:15:
25:c2:f8:8d:5d:12:c9:36:11:2e:8d:5f:d9:4f:3b:0a:03:09:
26:ee:7c:ad:d3:a4:8e:9c:84:ba:64:13:53:de:5e:23:7e:6d:
6d:19:7c:09:92:6f:e7:56:00:0f:f8:ab:0a:11:fc:30:68:b4:
d5:66:0f:36:27:42:9c:db:6f:0e:a8:fb:d3:2b:90:45:68:dd:
da:a3:2f:bd:c6:06:9c:79:87:f8:10:0a:bc:ac:5c:6a:39:97:
89:4f:12:4f:6e:4f:59:58:a5:43:46:ad:46:7c:7e:77:0b:31:
d6:73:55:cb:7e:2b:1f:ba:df:33:65:01:49:40:6b:e2:3a:68:
c0:4f:ea:ec:40:f1:2b:53:07:8a:6e:0c:b1:e5:e7:41:38:21:
bc:fb:da:80:ef:df:52:d1:36:76:35:97:f4:31:ee:93:c8:83:
26:b8:a4:5b:d1:69:1d:f3:74:7e:0d:7e:4c:8f:a9:18:ec:91:
bc:cd:9a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:34 2025 by rpki-client