Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/nmsVEaSQup7e-IGJrXXPRQUKrJ0.roa
File: nmsVEaSQup7e-IGJrXXPRQUKrJ0.roa (raw, json)
Hash identifier: lrhnGUF1rBnYtpBF14W2vhkCLuXZvYl3BnltKOCPErQ=
Subject key identifier: 9E:6B:15:11:A4:90:BA:9E:DE:F8:81:89:AD:75:CF:45:05:0A:AC:9D
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A3DB522
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/nmsVEaSQup7e-IGJrXXPRQUKrJ0.roa
Signing time: Sat 01 Jan 2022 14:56:16 +0000
ROA not before: Sat 01 Jan 2022 14:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16018
IP address blocks: 5.160.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 977122594 (0x3a3db522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e6b1511a490ba9edef88189ad75cf45050aac9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:52:ed:ce:49:54:47:d0:6c:f8:bd:c7:0c:e3:
60:d5:fa:1d:71:fa:a7:4f:5c:05:34:48:94:6f:ab:
65:1c:eb:60:42:ce:50:f6:d5:3e:9a:81:3f:73:72:
ed:63:81:ae:23:2f:14:23:29:94:fc:4c:e1:d9:1e:
1b:05:b0:9a:cb:ad:f1:67:2f:70:0d:82:8b:1d:67:
59:73:07:47:bb:21:b6:45:74:0b:52:71:d6:41:d9:
78:00:1f:b5:b0:98:ac:92:d0:cb:c5:73:a0:db:b9:
d4:8d:95:76:61:21:cd:ba:2e:24:9f:02:bc:cd:b1:
6e:3e:6a:57:ed:87:ee:97:36:62:c3:a7:4e:3b:d2:
be:89:75:a2:39:b5:21:b6:24:1f:ca:5d:11:4f:93:
af:ac:1f:f8:c9:13:8a:a1:e0:52:14:03:83:2a:b8:
43:5e:40:85:0c:82:2c:b3:6d:d1:e6:4c:8a:26:1f:
42:c8:69:63:18:e3:97:04:cc:fd:cf:ae:31:e1:45:
20:07:db:a5:92:21:15:5d:70:ac:e4:be:51:bd:c7:
73:cf:da:c6:15:92:3b:88:cf:bd:ee:db:d0:18:3f:
fc:31:a4:d5:ea:c1:fe:51:4f:fa:17:a1:22:6a:05:
f1:b2:6e:6c:80:4e:82:06:bf:69:2d:fc:55:f9:0b:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6B:15:11:A4:90:BA:9E:DE:F8:81:89:AD:75:CF:45:05:0A:AC:9D
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/nmsVEaSQup7e-IGJrXXPRQUKrJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f0:9b:b6:76:6f:0e:3b:9b:86:3d:5c:92:14:33:1d:36:c7:
12:f2:30:9e:ef:8a:6b:ef:ee:f2:38:3a:28:65:80:80:83:40:
03:22:1a:cc:b0:05:6f:bb:ae:6f:51:56:b2:a8:0e:ef:c8:be:
64:b5:0c:7a:e0:91:82:9f:f0:69:91:66:b2:38:9a:24:7c:21:
00:37:16:34:7e:4a:5d:65:7b:ac:fc:66:c3:7b:11:74:41:64:
9e:cc:50:ae:87:7d:68:02:b7:a2:19:e8:36:7a:0c:07:78:f4:
c4:0e:97:83:b1:4c:ac:d6:a8:c8:57:c2:c4:ea:8c:55:b5:6d:
46:4f:fe:23:08:44:e4:87:f0:f3:e4:7d:94:66:5c:4c:4e:ea:
69:6f:4e:db:89:da:be:0b:cd:6f:04:a3:b1:1d:39:17:b4:a9:
18:14:05:6e:d2:00:27:21:dc:69:af:8d:c2:39:5e:e2:d0:2a:
17:34:30:21:e1:4a:50:fd:a2:ea:6e:79:08:3c:32:db:3e:c8:
98:2b:90:77:db:e7:72:ad:33:8e:99:03:47:9a:7c:92:6b:74:
af:86:8e:3e:21:54:1f:32:da:86:26:8b:b5:84:84:4d:ea:13:
3b:b7:14:62:cf:34:ed:b1:20:ef:9f:78:36:bd:1f:a3:bd:ec:
bd:63:0f:d9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOj21IjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MWNjYTlmMTVlMTkyMTk1M2E2MjhjOGFkMmFjNGJlOTc3YjZjMzAzMB4XDTIyMDEw
MTE0NTYxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWU2YjE1MTFhNDkw
YmE5ZWRlZjg4MTg5YWQ3NWNmNDUwNTBhYWM5ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOtS7c5JVEfQbPi9xwzjYNX6HXH6p09cBTRIlG+rZRzrYELO
UPbVPpqBP3Ny7WOBriMvFCMplPxM4dkeGwWwmsut8WcvcA2Cix1nWXMHR7shtkV0
C1Jx1kHZeAAftbCYrJLQy8VzoNu51I2VdmEhzbouJJ8CvM2xbj5qV+2H7pc2YsOn
TjvSvol1ojm1IbYkH8pdEU+Tr6wf+MkTiqHgUhQDgyq4Q15AhQyCLLNt0eZMiiYf
QshpYxjjlwTM/c+uMeFFIAfbpZIhFV1wrOS+Ub3Hc8/axhWSO4jPve7b0Bg//DGk
1erB/lFP+hehImoF8bJubIBOgga/aS38VfkLdVkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSeaxURpJC6nt74gYmtdc9FBQqsnTAfBgNVHSMEGDAWgBSBzKnxXhkhlTpi
jIrSrEvpd7bDAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2djeXA4VjRaSVpVNllveUswcXhMNlhlMnd3TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvMWVhMmIwLTZiOWEtNDRkNy1hMmU1LTIyMDZjYzJlNjkxYy8x
L25tc1ZFYVNRdXA3ZS1JR0pyWFhQUlFVS3JKMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
MWVhMmIwLTZiOWEtNDRkNy1hMmU1LTIyMDZjYzJlNjkxYy8xL2djeXA4VjRaSVpV
NllveUswcXhMNlhlMnd3TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAWg0jANBgkqhkiG9w0BAQsFAAOC
AQEAPvCbtnZvDjubhj1ckhQzHTbHEvIwnu+Ka+/u8jg6KGWAgINAAyIazLAFb7uu
b1FWsqgO78i+ZLUMeuCRgp/waZFmsjiaJHwhADcWNH5KXWV7rPxmw3sRdEFknsxQ
rod9aAK3ohnoNnoMB3j0xA6Xg7FMrNaoyFfCxOqMVbVtRk/+IwhE5Ifw8+R9lGZc
TE7qaW9O24navgvNbwSjsR05F7SpGBQFbtIAJyHcaa+Nwjle4tAqFzQwIeFKUP2i
6m55CDwy2z7ImCuQd9vncq0zjpkDR5p8kmt0r4aOPiFUHzLahiaLtYSETeoTO7cU
Ys807bEg7594Nr0fo73svWMP2Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-fra.rpki-client.org