![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ETjLTY5_uSf2Omnfis_EsflU4Dg.roa
File: ETjLTY5_uSf2Omnfis_EsflU4Dg.roa (raw, json)
Hash identifier: BZmRcxsMPTQFvmN0UCp0NgBkLuMLSRTXoDdwyXIrmTk=
Subject key identifier: 11:38:CB:4D:8E:7F:B9:27:F6:3A:69:DF:8A:CF:C4:B1:F9:54:E0:38
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 05DAF5AB
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ETjLTY5_uSf2Omnfis_EsflU4Dg.roa
Signing time: Thu 10 Feb 2022 11:04:27 +0000
ROA not before: Thu 10 Feb 2022 11:04:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25211
IP address blocks: 94.26.79.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.47.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
94.26.76.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98235819 (0x5daf5ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Feb 10 11:04:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1138cb4d8e7fb927f63a69df8acfc4b1f954e038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:de:e3:06:f8:dd:18:c5:c7:7d:ef:f9:0a:
85:b1:2a:b4:55:a2:98:1d:81:dd:65:46:35:87:44:
41:e5:22:df:b6:6e:b7:87:3b:64:d0:cd:b8:c1:87:
e7:b7:0f:e7:2a:93:bb:c6:3a:a4:0a:dc:b8:df:ef:
7f:6f:13:8f:fa:64:e6:fe:68:01:80:67:1c:ee:6d:
b2:2d:ac:3c:43:a9:9b:0b:33:9d:82:5e:86:71:91:
00:cd:c5:39:05:03:b9:b1:ba:ea:d9:a6:38:e0:27:
30:6b:88:f5:26:06:4d:b3:74:01:3c:41:99:84:1d:
41:b3:52:c7:65:3e:4e:6c:22:6c:22:48:08:41:7d:
1f:f8:4a:5b:50:9d:2c:ef:15:e7:50:cf:01:ba:3d:
c5:a5:9a:73:20:48:bf:f6:c4:f3:74:e6:47:d9:c2:
91:96:cb:2d:50:c1:95:7d:63:ab:b8:37:06:90:3c:
19:b7:01:62:a5:ec:db:fc:78:82:5a:19:ff:6b:98:
32:35:85:2c:7c:3d:fb:14:cb:5f:5a:e3:8d:04:99:
b9:cb:14:c7:1a:a8:89:52:fc:2e:ae:4f:b4:6a:e9:
52:21:82:23:8d:18:6a:32:31:0d:e0:6f:fc:15:39:
7b:73:5f:16:12:87:44:46:37:54:1c:1c:e9:08:ab:
d4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:38:CB:4D:8E:7F:B9:27:F6:3A:69:DF:8A:CF:C4:B1:F9:54:E0:38
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ETjLTY5_uSf2Omnfis_EsflU4Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0-78.159.158.255
91.92.33.0/24
91.92.35.0/24
91.92.40.0/21
91.92.49.0-91.92.53.255
93.152.212.0-93.152.216.255
93.152.220.0/23
93.152.224.0/23
94.26.28.0/23
94.26.76.0/22
185.96.252.0/23
185.96.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:c9:34:29:50:33:23:6e:17:18:8d:f3:22:d4:8b:5b:e5:ed:
6b:15:c8:17:0b:2b:c0:1d:f5:66:e4:74:45:f4:b0:d4:f0:79:
4b:7d:e5:db:57:f8:e7:04:cd:b7:5b:ea:39:83:39:4b:d8:aa:
97:ad:63:61:45:4b:6a:ff:f8:68:8c:d7:ae:0d:7b:ee:83:29:
79:d3:fe:d5:23:89:0f:9c:91:03:03:72:e7:b3:b4:34:77:dd:
66:6a:00:e5:cb:bf:41:b0:41:7e:02:1e:61:09:77:46:73:f5:
20:d6:21:df:e8:2d:6f:3b:a2:be:08:41:19:73:cc:a0:55:29:
bf:19:35:63:ff:f1:92:18:d9:18:03:57:78:fe:3f:ca:5f:c3:
4e:f0:4e:c0:95:19:e8:36:d2:04:52:43:e6:a1:a6:56:e8:ac:
be:1c:3b:b1:5e:2a:02:ee:b4:4c:03:62:ea:f5:73:58:26:eb:
c4:c3:5b:21:56:4a:d4:07:ad:77:a3:de:4f:19:6c:ed:ba:2a:
d4:05:b8:78:54:a7:c3:01:0e:46:39:ff:85:67:91:17:5a:98:
c7:d4:bf:19:31:b6:fc:fe:b1:e1:b9:fd:29:c7:e0:1b:e6:cb:
05:a6:ba:7c:a8:44:b2:e6:97:ca:21:77:10:08:c4:ee:f8:52:
80:f9:21:f3
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIEBdr1qzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZDFjYWE2OTM1OGY4Yzk4ZjdhNzE5ZjI1OTdkNWRhZGRiZDAwMThjMB4XDTIyMDIx
MDExMDQyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTEzOGNiNGQ4ZTdm
YjkyN2Y2M2E2OWRmOGFjZmM0YjFmOTU0ZTAzODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANY43uMG+N0Yxcd97/kKhbEqtFWimB2B3WVGNYdEQeUi37Zu
t4c7ZNDNuMGH57cP5yqTu8Y6pArcuN/vf28Tj/pk5v5oAYBnHO5tsi2sPEOpmwsz
nYJehnGRAM3FOQUDubG66tmmOOAnMGuI9SYGTbN0ATxBmYQdQbNSx2U+TmwibCJI
CEF9H/hKW1CdLO8V51DPAbo9xaWacyBIv/bE83TmR9nCkZbLLVDBlX1jq7g3BpA8
GbcBYqXs2/x4gloZ/2uYMjWFLHw9+xTLX1rjjQSZucsUxxqoiVL8Lq5PtGrpUiGC
I40YajIxDeBv/BU5e3NfFhKHREY3VBwc6Qir1G0CAwEAAaOCAogwggKEMB0GA1Ud
DgQWBBQROMtNjn+5J/Y6ad+Kz8Sx+VTgODAfBgNVHSMEGDAWgBQtHKppNY+MmPen
GfJZfV2t29ABjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xSeXFhVFdQakpqM3B4bnlXWDFkcmR2UUFZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGYvYTkzNjk5LTE4OGItNDcwYS05NmI3LTI5YjA4NWRkMjNhZC8x
L0VUakxUWTVfdVNmMk9tbmZpc19Fc2ZsVTREZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYv
YTkzNjk5LTE4OGItNDcwYS05NmI3LTI5YjA4NWRkMjNhZC8xL0xSeXFhVFdQakpq
M3B4bnlXWDFkcmR2UUFZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
nQYIKwYBBQUHAQcBAf8EgY0wgYowgYcEAgABMIGAAwQBTp+AAwQATp+DAwQCTp+I
MAwDBABOn5UDBABOn5YwDAMEA06fmAMEAE6fngMEAFtcIQMEAFtcIwMEA1tcKDAM
AwQAW1wxAwQBW1w0MAwDBAJdmNQDBABdmNgDBAFdmNwDBAFdmOADBAFeGhwDBAJe
GkwDBAG5YPwDBAC5YP8wDQYJKoZIhvcNAQELBQADggEBAKDJNClQMyNuFxiN8yLU
i1vl7WsVyBcLK8Ad9WbkdEX0sNTweUt95dtX+OcEzbdb6jmDOUvYqpetY2FFS2r/
+GiM164Ne+6DKXnT/tUjiQ+ckQMDcueztDR33WZqAOXLv0GwQX4CHmEJd0Zz9SDW
Id/oLW87or4IQRlzzKBVKb8ZNWP/8ZIY2RgDV3j+P8pfw07wTsCVGeg20gRSQ+ah
plborL4cO7FeKgLutEwDYur1c1gm68TDWyFWStQHrXej3k8ZbO26KtQFuHhUp8MB
DkY5/4VnkRdamMfUvxkxtvz+seG5/SnH4BvmywWmunyoRLLml8ohdxAIxO74UoD5
IfM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:48 2025 by rpki-client