Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/nMubzAYG0GgFTBnXQpPtEowVh5k.roa
File: nMubzAYG0GgFTBnXQpPtEowVh5k.roa (raw, json)
Hash identifier: DpRP5TfCmiJ7ua5Ysenjx8i9+4KNVi5+xJ1tuCg3lLc=
Subject key identifier: 9C:CB:9B:CC:06:06:D0:68:05:4C:19:D7:42:93:ED:12:8C:15:87:99
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 0327F05A
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/nMubzAYG0GgFTBnXQpPtEowVh5k.roa
Signing time: Sat 01 Jan 2022 10:03:22 +0000
ROA not before: Sat 01 Jan 2022 10:03:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39305
IP address blocks: 5.183.16.0/22 maxlen: 22
2a0e:7400::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52949082 (0x327f05a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Jan 1 10:03:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ccb9bcc0606d068054c19d74293ed128c158799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:f2:54:d7:07:bf:cc:c9:26:35:e0:7e:f6:
c0:f4:96:b6:2c:24:10:41:71:6b:79:27:32:6b:51:
61:0f:8b:32:8f:11:7f:78:45:5f:cb:a8:db:9f:55:
02:dd:96:3d:6a:3a:f1:4b:12:5c:b1:e9:ed:db:e6:
9a:c9:9a:d9:31:79:69:45:fc:32:ed:b3:08:da:e7:
e1:72:8b:0c:86:eb:0a:7f:00:b4:a4:55:c1:d1:3b:
e2:3c:7c:f9:3b:d0:30:5b:52:b3:39:15:14:73:1e:
2e:8a:fb:db:14:db:87:71:c8:0e:43:26:f6:ac:f4:
24:4d:ef:29:86:b4:1c:1f:6a:d0:4a:02:07:d6:8a:
04:38:93:a9:ea:e1:c0:89:c6:46:42:f1:7b:ae:cf:
9e:4f:ec:67:c6:2d:43:a0:d8:d4:ce:2e:91:a0:fc:
f2:e0:b9:10:0e:52:21:2c:89:1b:5e:11:3c:69:26:
9d:aa:18:9a:b4:66:9e:69:b9:92:48:78:7b:95:c9:
cf:f0:0d:0b:20:0a:b9:83:b5:36:0c:d5:53:96:6d:
22:6a:00:8a:c7:40:6e:74:cf:ef:c7:82:1b:d6:e3:
cc:77:30:d3:69:47:17:68:7e:c4:f6:7a:cc:8f:81:
c4:eb:20:81:df:5d:14:b1:7e:06:4a:19:54:e9:08:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CB:9B:CC:06:06:D0:68:05:4C:19:D7:42:93:ED:12:8C:15:87:99
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/nMubzAYG0GgFTBnXQpPtEowVh5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.16.0/22
IPv6:
2a0e:7400::/29
Signature Algorithm: sha256WithRSAEncryption
08:50:86:9f:51:d6:d8:6e:c0:64:a5:51:0e:b2:9a:4a:c1:77:
87:7a:dc:e6:44:8a:ec:4e:62:61:1a:a3:4b:c3:cc:d0:eb:e9:
de:0c:62:28:e8:15:d6:d4:01:e1:93:d5:e7:b4:b8:6d:39:0f:
08:bf:a4:ab:13:c0:b4:30:35:25:e8:a1:b5:31:26:b3:b5:3b:
5a:7b:1d:7a:ba:45:e3:b6:f6:4d:16:6a:48:aa:7b:30:b3:20:
c4:bc:42:70:a4:84:40:80:a3:7e:69:f8:eb:91:2a:a6:a0:40:
20:58:ef:75:bb:43:48:b8:c8:fb:b9:96:8d:a9:f5:8b:27:51:
46:48:b2:a8:fc:ab:90:a4:03:01:57:96:4d:f8:bf:6e:97:82:
f3:35:20:5a:cf:ef:86:98:26:97:19:2d:48:da:50:74:8d:fd:
8b:e8:fb:65:b5:3e:85:8d:7f:48:14:0b:80:5e:29:4c:fd:c6:
32:04:47:c3:aa:5a:6a:76:b5:06:7b:55:77:81:c9:77:d6:df:
73:57:ad:9d:2d:c1:7e:5e:39:d4:12:27:69:6c:a9:c3:9c:4b:
14:12:80:ca:94:21:04:94:bd:a2:71:2f:3c:93:6e:90:7f:89:
4d:27:4f:b9:b9:ab:70:a4:08:62:9e:af:4d:30:3d:e5:a3:cc:
10:97:4c:18
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAyfwWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTFmODUxODhkMDgyZmQ1NjQwYjVjM2ZlMTIyMWY2MGM1MDFlZGI1MB4XDTIyMDEw
MTEwMDMyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWNjYjliY2MwNjA2
ZDA2ODA1NGMxOWQ3NDI5M2VkMTI4YzE1ODc5OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALDV8lTXB7/MySY14H72wPSWtiwkEEFxa3knMmtRYQ+LMo8R
f3hFX8uo259VAt2WPWo68UsSXLHp7dvmmsma2TF5aUX8Mu2zCNrn4XKLDIbrCn8A
tKRVwdE74jx8+TvQMFtSszkVFHMeLor72xTbh3HIDkMm9qz0JE3vKYa0HB9q0EoC
B9aKBDiTqerhwInGRkLxe67Pnk/sZ8YtQ6DY1M4ukaD88uC5EA5SISyJG14RPGkm
naoYmrRmnmm5kkh4e5XJz/ANCyAKuYO1NgzVU5ZtImoAisdAbnTP78eCG9bjzHcw
02lHF2h+xPZ6zI+BxOsggd9dFLF+BkoZVOkIAkkCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBScy5vMBgbQaAVMGddCk+0SjBWHmTAfBgNVHSMEGDAWgBQxH4UYjQgv1WQL
XD/hIh9gxQHttTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01SLUZHSTBJTDlWa0Mxd180U0lmWU1VQjdiVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmYvOGZjMzk1LWI2NzQtNDEzNy1iYzc1LTliYmQxZWViZTMzZS8x
L25NdWJ6QVlHMEdnRlRCblhRcFB0RW93Vmg1ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYv
OGZjMzk1LWI2NzQtNDEzNy1iYzc1LTliYmQxZWViZTMzZS8xL01SLUZHSTBJTDlW
a0Mxd180U0lmWU1VQjdiVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAgW3EDANBAIAAjAHAwUDKg50ADAN
BgkqhkiG9w0BAQsFAAOCAQEACFCGn1HW2G7AZKVRDrKaSsF3h3rc5kSK7E5iYRqj
S8PM0Ovp3gxiKOgV1tQB4ZPV57S4bTkPCL+kqxPAtDA1JeihtTEms7U7WnsderpF
47b2TRZqSKp7MLMgxLxCcKSEQICjfmn465EqpqBAIFjvdbtDSLjI+7mWjan1iydR
RkiyqPyrkKQDAVeWTfi/bpeC8zUgWs/vhpgmlxktSNpQdI39i+j7ZbU+hY1/SBQL
gF4pTP3GMgRHw6paana1BntVd4HJd9bfc1etnS3Bfl451BInaWypw5xLFBKAypQh
BJS9onEvPJNukH+JTSdPubmrcKQIYp6vTTA95aPMEJdMGA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:07:09 2025 by rpki-client