Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/76DI_fOZSMx-38Ihi8abEPLiaWg.roa
File: 76DI_fOZSMx-38Ihi8abEPLiaWg.roa (raw, json)
Hash identifier: 8I2LKvXv9/PifHMbBZg4pMLiVYRmBw7abNIhD0R6ol8=
Subject key identifier: EF:A0:C8:FD:F3:99:48:CC:7E:DF:C2:21:8B:C6:9B:10:F2:E2:69:68
Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial: 092F0BC4
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/76DI_fOZSMx-38Ihi8abEPLiaWg.roa
Signing time: Sat 01 Jan 2022 16:06:52 +0000
ROA not before: Sat 01 Jan 2022 16:06:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49597
IP address blocks: 185.165.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154078148 (0x92f0bc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Validity
Not Before: Jan 1 16:06:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efa0c8fdf39948cc7edfc2218bc69b10f2e26968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:41:e5:4d:13:a2:fa:c5:c4:e3:b9:81:ef:
94:49:11:5d:80:57:67:6d:c1:22:4f:f2:5b:f7:0f:
5d:67:cb:e0:94:84:a7:d9:9c:2e:39:f0:8b:fe:ac:
f2:c0:f7:fd:f0:ef:97:91:e3:11:58:ec:7e:1d:61:
08:ea:94:03:f8:f5:88:15:1e:69:cc:b1:e4:d6:4c:
4a:dc:79:80:4d:8d:c5:7e:54:2b:b9:e7:50:89:f8:
68:77:ca:1d:a6:bc:ba:55:fa:10:b3:c7:00:9b:b7:
6b:46:fd:55:93:42:35:ab:d2:09:56:e6:e5:da:dd:
0f:d5:59:82:cd:80:68:78:23:f5:94:d8:77:86:33:
66:c0:32:84:01:c1:38:d7:22:2a:05:d6:c8:22:96:
13:3d:39:e8:4e:e0:32:e1:05:ed:65:d1:b8:c6:83:
a8:a7:32:9a:d2:b8:44:96:5d:02:a7:b6:2d:68:03:
b7:2c:05:31:56:f2:04:39:08:61:ad:84:d7:4e:40:
31:a9:fa:22:bd:ef:fd:6c:b9:db:29:74:79:19:21:
62:0b:08:d8:42:ce:ba:63:3a:21:25:7a:61:7c:04:
e7:9e:d2:f0:83:ba:1d:49:e6:a9:d4:45:1c:29:82:
6a:a6:85:61:55:03:ff:fb:ab:24:55:e7:38:56:2e:
95:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A0:C8:FD:F3:99:48:CC:7E:DF:C2:21:8B:C6:9B:10:F2:E2:69:68
X509v3 Authority Key Identifier:
keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/76DI_fOZSMx-38Ihi8abEPLiaWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.56.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:60:b0:0c:76:30:d1:56:d3:30:22:c2:db:d9:b7:be:48:5f:
4d:6b:f4:05:e8:6c:c5:9a:ae:eb:e8:d0:c4:2d:43:6a:84:98:
30:aa:65:20:89:0a:d4:4a:b9:b7:de:69:3b:65:fd:48:5d:40:
07:14:e4:0b:0e:ea:57:94:f0:37:9b:db:d0:93:09:85:d5:b6:
31:2a:0c:d4:cc:1d:e8:e1:2a:a0:16:42:2f:ab:a4:54:d6:c2:
9c:7e:05:93:e5:59:5a:b1:31:d0:ac:6d:e2:e1:1f:05:25:2a:
bb:7c:6a:c7:c5:3b:ce:cf:b7:8c:d4:5c:e4:96:a5:b3:a0:93:
0e:4b:0c:b6:2b:f1:d1:3c:77:55:f8:ec:d8:8d:ac:0d:ed:51:
8c:00:80:c9:a7:0c:ab:f1:80:51:27:7d:23:60:f8:6c:32:41:
6e:8b:71:f0:e6:09:d9:6a:f8:fb:99:9b:72:d5:3f:f6:14:ea:
e0:22:29:e1:c5:60:b0:59:2a:a6:65:26:7d:b8:31:fd:bb:82:
14:f7:ad:fd:79:7d:78:b1:d3:de:a8:4c:e6:b7:2f:3c:cf:01:
dd:34:38:39:75:39:3d:6b:db:fd:3b:3d:aa:f4:82:7d:29:c8:
78:5e:2f:8b:10:e0:60:28:b4:db:3f:70:63:8a:a7:d1:3b:9b:
15:56:35:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:26 2023 by rpki-client on console-ams.rpki-client.org