Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/WoIRxEFDUUwyZl2ai5IX8akzLNA.roa
File: WoIRxEFDUUwyZl2ai5IX8akzLNA.roa (raw, json)
Hash identifier: NVcX7bSPcRcLCZ8NntkOwT05PpW9tBNLKM9N2swqVXc=
Subject key identifier: 5A:82:11:C4:41:43:51:4C:32:66:5D:9A:8B:92:17:F1:A9:33:2C:D0
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 09287DB2
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/WoIRxEFDUUwyZl2ai5IX8akzLNA.roa
Signing time: Sat 01 Jan 2022 13:54:36 +0000
ROA not before: Sat 01 Jan 2022 13:54:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202634
IP address blocks: 185.165.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153648562 (0x9287db2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Jan 1 13:54:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a8211c44143514c32665d9a8b9217f1a9332cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:23:d4:0a:38:60:77:d0:3d:d0:66:6b:67:
d8:02:9d:0c:bd:1f:5f:2e:f4:b5:98:b9:74:1d:30:
c9:d9:65:d2:9a:19:8b:ea:46:5a:92:d0:b2:59:77:
61:e5:b5:71:c1:36:e4:49:ba:db:6c:59:ff:1c:5f:
b2:ae:ae:95:b3:ce:83:e7:0d:f1:d4:fe:c7:2a:00:
43:30:00:d3:0e:d7:bf:80:c0:96:93:8c:02:70:53:
25:3e:ff:64:8a:ce:37:b8:a7:9b:e6:5f:ab:40:6f:
43:a3:8f:9c:79:d4:a1:39:f3:62:49:22:d2:62:b1:
eb:f0:2c:ea:89:cd:f2:3e:c6:24:a3:aa:d1:3b:d9:
06:3e:12:7c:b1:fb:78:3a:10:11:98:d2:94:42:08:
d0:75:a1:c6:9f:bd:8b:cb:ad:f3:98:98:16:10:7c:
b5:0a:b1:59:9b:80:a3:bf:89:90:82:92:a9:97:f1:
77:fa:c9:59:99:8e:85:09:4c:ca:7d:50:04:81:a2:
b3:ed:eb:6f:64:26:1b:b1:67:1e:60:89:8a:4c:87:
93:c2:ea:70:cb:3a:0a:95:19:75:96:eb:2e:80:c4:
11:0a:93:c5:80:3d:fb:63:ba:e5:84:5f:d6:7c:ea:
a4:33:d1:ca:29:e4:36:a2:6a:6e:00:72:b5:91:11:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:82:11:C4:41:43:51:4C:32:66:5D:9A:8B:92:17:F1:A9:33:2C:D0
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/WoIRxEFDUUwyZl2ai5IX8akzLNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:ab:29:dc:c8:b9:78:65:b4:86:6e:67:df:72:3d:7f:e4:72:
7a:27:df:7a:1b:64:b1:be:d5:9d:1b:12:d9:cb:42:ec:d8:1d:
e6:e9:1e:87:9d:11:63:bf:1a:0c:fe:ed:fb:44:5b:9f:e1:f9:
45:e2:ff:5e:91:1f:44:f0:8e:d7:ce:cb:f2:bc:1e:50:c8:8b:
c9:b3:a3:56:ae:42:71:b0:63:bb:b2:d6:00:fa:0e:14:d2:70:
7e:dc:5a:34:c3:46:bc:92:e1:9c:06:bf:c4:d2:56:45:7a:d1:
da:40:34:a3:99:e2:6c:aa:ff:3a:23:82:b7:df:e6:d5:e9:c4:
2a:18:1a:08:d5:a4:f1:e7:19:a3:dc:f7:6d:1f:3d:a8:bd:79:
bc:31:b3:d9:79:ae:3c:ff:d1:06:6d:38:da:bb:7f:7d:b4:3c:
13:0b:5a:c3:7d:46:52:03:e4:00:9d:9a:f5:86:20:6b:bf:4d:
08:92:3b:33:ca:a0:be:b4:24:b8:cc:63:a3:85:29:6e:20:a8:
12:e1:a5:01:33:76:6f:84:07:4f:33:c7:7a:fd:28:e5:b5:2c:
76:c2:b8:3f:2c:8a:b3:af:14:13:b9:69:97:d7:45:14:29:76:
c8:f8:06:b1:ae:93:d5:35:7c:58:de:11:75:37:8e:16:c0:23:
39:9e:c7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:21 2023 by rpki-client on console-ams.rpki-client.org