Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/DCLO3ZzEv3-mNxzs39qErtvKeFI.roa
File: DCLO3ZzEv3-mNxzs39qErtvKeFI.roa (raw, json)
Hash identifier: Yu0YhHTZtWM/AWJ5pHEniZ2XDuxt2QNuXtl9qFE6KDA=
Subject key identifier: 0C:22:CE:DD:9C:C4:BF:7F:A6:37:1C:EC:DF:DA:84:AE:DB:CA:78:52
Certificate issuer: /CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Certificate serial: DD92DB
Authority key identifier: 1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/DCLO3ZzEv3-mNxzs39qErtvKeFI.roa
Signing time: Sat 01 Jan 2022 07:53:03 +0000
ROA not before: Sat 01 Jan 2022 07:53:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50264
IP address blocks: 185.165.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14521051 (0xdd92db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Validity
Not Before: Jan 1 07:53:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c22cedd9cc4bf7fa6371cecdfda84aedbca7852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:74:09:2c:9b:9d:6c:e2:22:ce:d6:cd:3b:
5f:79:a2:24:44:15:77:ba:4a:38:eb:b2:5b:6f:ca:
77:f9:d6:ea:37:ed:d5:12:ee:19:60:29:bb:19:a4:
20:9d:59:1e:be:fc:ff:cd:1d:15:d2:e1:8c:69:16:
0d:52:75:e9:0e:e0:4f:c6:d3:0f:fe:2f:88:63:c5:
cc:1e:8d:21:36:f7:9d:78:48:df:88:f6:7f:47:b7:
35:e0:7c:10:e0:90:2b:87:e9:5a:ed:e2:f5:14:c6:
e3:25:77:e2:0a:ca:38:9c:43:ad:43:6c:7c:ec:80:
b1:72:d3:d3:8c:c1:8e:be:bb:cc:cc:d2:b8:ab:12:
93:16:7d:d9:63:a4:e6:09:67:fb:df:6f:72:8e:4d:
4f:35:d3:45:16:0d:0a:f8:8b:38:4c:7e:e1:d8:fc:
a9:68:1f:15:87:7d:1e:68:95:1c:b3:a4:c6:31:55:
5d:2d:32:cc:5e:b3:af:b7:f5:d5:a7:80:35:e7:53:
e2:03:5b:86:78:0e:19:d2:a6:f7:f8:dd:9d:41:69:
76:5d:75:16:e4:98:3b:48:56:80:99:5b:a3:0f:67:
e2:a4:1e:0a:74:27:74:ac:0e:54:68:c9:e2:96:fe:
c5:43:ca:f7:a6:f5:13:43:ab:b6:29:e7:f3:66:cc:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:22:CE:DD:9C:C4:BF:7F:A6:37:1C:EC:DF:DA:84:AE:DB:CA:78:52
X509v3 Authority Key Identifier:
keyid:1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/DCLO3ZzEv3-mNxzs39qErtvKeFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.23.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:63:55:aa:85:5c:6b:67:18:6e:7b:4c:58:8e:7d:4b:14:c9:
a9:4d:a1:41:aa:87:bd:af:d9:c5:b3:ca:52:fb:14:96:36:d6:
f4:2e:0c:3b:fe:1d:1f:a1:39:f7:cd:23:62:e6:ab:01:d3:15:
04:f9:dd:9d:d2:38:0a:44:93:17:89:6b:f5:0a:1e:cf:d0:3e:
0d:1e:7d:33:1a:fe:b5:91:d7:7a:0b:4e:a7:46:8c:a4:8f:a5:
7d:81:d9:9f:55:e0:74:ae:81:68:d6:ea:bc:5a:e2:73:fb:f4:
e5:9b:4a:52:3f:cb:a0:7c:c4:b3:68:b5:3c:d2:10:7a:2f:48:
10:ef:6e:a9:06:bd:7f:cb:8f:f5:70:00:6a:5a:08:3a:88:5f:
44:8e:32:fd:65:a1:dc:cc:be:85:58:8a:e0:e5:1e:9f:de:73:
9a:98:d7:30:18:32:93:56:b0:e3:5a:2b:4e:91:cf:00:1f:76:
90:3b:26:33:9a:00:dc:74:b9:1b:89:c3:c4:12:14:09:84:b6:
27:72:34:51:87:41:7d:3c:6f:37:4a:13:1e:6a:21:78:80:9c:
4c:f1:fe:0b:07:8e:1c:16:9e:77:30:9b:62:94:0d:82:17:a9:
1d:4c:0a:58:76:76:fa:f1:a6:af:5b:21:80:0a:78:96:1f:f8:
5e:81:6e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:39 2023 by rpki-client on console-ams.rpki-client.org