Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MG2xNu-y6q_sUqV9RpkJ2NByo-4.roa
File: MG2xNu-y6q_sUqV9RpkJ2NByo-4.roa (raw, json)
Hash identifier: GGjYQXSbIopSlNa5IPLh3pZ34yomNXA44mZg47L5GU8=
Subject key identifier: 30:6D:B1:36:EF:B2:EA:AF:EC:52:A5:7D:46:99:09:D8:D0:72:A3:EE
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 01857246FF71EF5FB03B5E3F3A6BDD575D9A
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MG2xNu-y6q_sUqV9RpkJ2NByo-4.roa
Signing time: Mon 02 Jan 2023 11:38:53 +0000
ROA not before: Mon 02 Jan 2023 11:38:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39305
IP address blocks: 5.183.16.0/22 maxlen: 22
2a0e:7400::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ff:71:ef:5f:b0:3b:5e:3f:3a:6b:dd:57:5d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Jan 2 11:38:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=306db136efb2eaafec52a57d469909d8d072a3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:28:c1:a1:78:0e:5a:a5:80:aa:d2:5d:3f:
45:f7:02:34:83:b0:f6:c3:74:0b:66:1e:52:1b:84:
4a:23:dd:ad:b1:74:72:c1:02:fd:5e:89:bf:b6:68:
c8:b5:2f:94:29:2c:91:cd:2b:55:d4:ef:50:67:d3:
9f:d2:f5:48:36:85:f3:8d:47:56:fb:ba:29:7e:8e:
80:b6:ac:b5:94:23:41:b9:4d:37:9d:4c:a4:92:eb:
23:e6:55:06:64:89:3b:51:78:b1:d7:da:f2:94:84:
ac:77:72:76:30:f1:1a:00:bd:04:0a:e9:1a:f8:44:
d6:2c:ac:2a:cb:dd:9d:a0:b5:43:47:87:e6:7d:ae:
42:5f:f6:b4:4c:2e:82:79:78:0b:27:8a:9b:4b:2c:
31:a9:1f:4e:78:a0:05:23:62:7b:7b:c5:05:d1:6c:
7b:1c:0a:51:55:72:8e:f4:a8:20:07:4f:db:86:a6:
48:a9:af:c1:bf:fa:2b:69:69:f5:cb:3b:08:65:14:
be:be:38:65:44:3a:67:e4:96:c2:23:d9:66:66:67:
16:68:7b:8a:54:02:96:40:af:94:17:1d:8d:a6:fd:
4e:34:31:5d:69:54:23:41:4b:16:a1:bf:0b:5b:2c:
2f:14:5a:7c:4c:d6:fe:c7:4e:6c:ef:1b:3f:5d:04:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6D:B1:36:EF:B2:EA:AF:EC:52:A5:7D:46:99:09:D8:D0:72:A3:EE
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MG2xNu-y6q_sUqV9RpkJ2NByo-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.16.0/22
IPv6:
2a0e:7400::/29
Signature Algorithm: sha256WithRSAEncryption
a5:61:69:9a:38:09:23:71:ac:5a:1d:4d:60:dd:cb:41:a5:38:
9f:1e:3f:28:ae:3e:22:e4:95:7d:31:7b:87:09:5a:17:1d:db:
e0:bb:0d:cd:e4:a7:77:37:5b:60:e7:e2:7d:f8:b1:aa:2c:da:
1f:0d:a6:6e:0e:90:6a:8c:33:df:db:a0:53:ab:5f:b0:70:02:
14:d0:d2:07:c2:6d:5e:79:6e:e5:a8:94:01:4a:43:9f:ac:db:
ce:1e:01:dd:b5:01:33:ab:42:65:ed:2a:fb:bd:12:e2:f5:66:
0d:15:5c:84:37:de:ae:07:57:19:c8:e9:af:c4:7c:8a:5f:70:
ef:7a:5a:03:43:65:b6:29:b4:f5:53:83:73:57:7a:0d:82:fe:
40:b8:b2:57:cd:74:60:1c:15:84:04:8b:ef:53:00:cf:bd:bd:
a3:54:f6:c8:d1:3a:a0:7f:d7:b2:c5:87:50:b2:25:b8:d6:ba:
04:9c:0c:91:e6:84:27:5b:58:62:08:25:9d:49:1a:f2:1c:4b:
36:88:da:f9:ff:0d:23:93:49:3a:00:99:73:c0:85:86:bf:fa:
75:0c:ad:02:9c:11:fb:e5:3b:d0:94:e4:5a:0a:aa:40:61:fc:
3e:35:80:f0:13:97:9d:99:d5:20:2c:c4:8d:17:a3:db:9a:dd:
32:26:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:28:29 2025 by rpki-client