Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/C1nRIWobAMe_kbNvYCWMycyw9KA.roa
File: C1nRIWobAMe_kbNvYCWMycyw9KA.roa (raw, json)
Hash identifier: ObBk/ik8WJFhRIEmIpSi1Djw3hf1dmD3HU8nRull5LY=
Subject key identifier: 0B:59:D1:21:6A:1B:00:C7:BF:91:B3:6F:60:25:8C:C9:CC:B0:F4:A0
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 933A93
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/C1nRIWobAMe_kbNvYCWMycyw9KA.roa
Signing time: Thu 05 May 2022 05:41:06 +0000
ROA not before: Thu 05 May 2022 05:41:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142111
IP address blocks: 185.106.194.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9648787 (0x933a93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: May 5 05:41:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b59d1216a1b00c7bf91b36f60258cc9ccb0f4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:75:0a:34:91:5a:b7:1f:fd:24:8c:f1:56:
ec:92:5d:c2:98:f9:72:af:c3:de:4b:c8:38:ad:b5:
fc:30:74:72:5d:aa:e7:ac:e2:42:74:28:ea:5b:8e:
b6:f2:7b:fa:7b:03:53:fc:3d:b0:35:da:8d:78:bf:
ac:b6:c3:e6:cf:13:9e:68:83:56:b6:63:2d:53:a1:
cf:59:20:fd:7f:0f:d4:7b:0a:17:2c:38:97:7d:48:
3b:4c:74:de:98:2c:1f:48:eb:cc:fc:49:93:f4:ff:
29:ab:67:95:7d:26:c6:34:16:32:d4:36:42:6d:60:
c1:29:34:94:52:b1:dd:17:78:b7:24:92:10:2a:57:
00:a3:2f:53:0f:dc:78:8e:b5:fa:64:9d:ca:c2:8d:
22:0c:c3:cc:f5:8d:e2:37:83:58:31:cc:2a:1a:ad:
cb:e1:7b:c6:3c:2c:8c:13:a6:97:ed:10:6d:e1:d1:
db:3b:17:bd:2c:54:51:a5:8d:6a:ed:40:79:b8:cc:
90:35:37:02:f4:7d:02:0f:3b:50:84:08:5d:c4:8b:
f4:cd:8c:68:5d:70:a8:ce:5b:ae:7e:85:bf:96:3f:
bf:ec:b3:67:04:42:a5:e0:a6:6d:a8:b6:bc:1d:12:
b2:88:79:9b:21:24:57:99:59:a6:91:75:df:a8:62:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:59:D1:21:6A:1B:00:C7:BF:91:B3:6F:60:25:8C:C9:CC:B0:F4:A0
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/C1nRIWobAMe_kbNvYCWMycyw9KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.194.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:eb:04:21:59:a7:72:f1:d2:7f:3b:b6:be:a9:86:87:7b:56:
fd:e2:3d:ba:ac:41:36:e1:0e:f5:73:a5:ea:bd:4b:af:54:e4:
48:b7:b2:0a:8d:ad:13:6a:c2:5f:37:13:a6:27:33:9f:19:4f:
88:e5:32:c0:7c:b5:45:54:48:28:51:39:6d:f7:5d:aa:53:40:
15:61:9e:c3:9c:ca:1e:84:c0:c5:67:7c:62:44:30:68:8e:21:
e0:bf:05:48:2c:28:52:c5:1a:0e:aa:2e:d9:7f:78:0c:f7:70:
cf:43:bb:b8:80:5e:56:d0:62:1f:89:69:bf:18:a8:ca:6d:1e:
77:b9:4a:ce:32:a1:2b:3d:60:ee:6b:77:35:99:04:a4:86:18:
5a:c4:73:17:51:9d:a5:28:53:89:55:93:bc:fd:ea:0f:4a:ac:
d5:50:4a:3a:4b:9d:bc:fe:55:ae:ca:19:65:88:1b:7a:d1:dd:
31:bd:11:4d:c2:83:61:59:33:b8:7a:8d:de:61:92:58:24:73:
60:9e:e7:9d:cf:1e:e7:f2:e7:9b:3d:58:cd:41:0b:50:c0:22:
27:6a:16:c7:34:ff:80:40:a4:06:8e:d2:53:40:a5:0e:c3:b7:
d9:b9:46:90:a4:cd:d7:22:04:c4:a8:32:f3:25:e7:2a:e7:ec:
95:44:22:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org