Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/RbhP__MKARdA_ec3Lb9_pPllZEk.roa
File: RbhP__MKARdA_ec3Lb9_pPllZEk.roa (raw, json)
Hash identifier: QzM0qtccZVxAWWI0Tfz9jgGTdbhRHHJp1SUUhWG1Zts=
Subject key identifier: 45:B8:4F:FF:F3:0A:01:17:40:FD:E7:37:2D:BF:7F:A4:F9:65:64:49
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01849E0A72A5CA98D6D1459A6FC0B1B54B32
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/RbhP__MKARdA_ec3Lb9_pPllZEk.roa
Signing time: Tue 22 Nov 2022 06:33:15 +0000
ROA not before: Tue 22 Nov 2022 06:33:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 185.106.194.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:0a:72:a5:ca:98:d6:d1:45:9a:6f:c0:b1:b5:4b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Nov 22 06:33:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45b84ffff30a011740fde7372dbf7fa4f9656449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:7a:1d:ce:88:9d:ec:85:1c:06:c4:91:31:
63:0c:a8:7b:5c:51:f0:34:57:14:44:26:2a:4a:b3:
3b:8d:22:ce:a2:48:b0:6f:76:c3:06:bd:79:4f:64:
33:cd:47:39:cd:a7:ea:b5:cc:2e:3a:2e:d1:2a:88:
43:cf:40:10:f3:5a:35:db:64:d3:c2:f5:bf:5b:e8:
64:cc:d8:0d:91:5b:ca:60:44:a6:b7:be:9a:5d:33:
7a:54:b0:0f:f6:8b:5a:87:dd:77:e6:fe:99:a5:bd:
44:12:1f:19:20:db:1b:65:0c:6c:f4:50:61:cf:50:
69:c6:4e:89:2b:7f:79:8e:51:23:e0:e4:34:0d:fc:
c7:e1:3e:fa:99:2e:8b:d3:ef:54:ae:8e:b9:e4:d4:
3b:49:bf:84:76:73:05:8b:7c:a4:e7:88:08:64:88:
e1:49:38:87:fb:6b:33:bf:4c:ed:58:04:c6:ab:23:
9b:59:64:1a:cd:b3:a4:33:52:43:3a:d9:45:06:3b:
63:ad:31:32:d4:4f:c4:2c:fd:87:fd:11:8e:61:ed:
58:bf:b9:09:d9:0b:04:79:99:ef:29:f3:b2:31:8b:
57:d1:5d:6c:4f:ec:54:b2:e2:59:c8:68:85:e7:b3:
f5:29:9b:74:0d:48:94:f2:d2:66:9c:14:a1:45:22:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B8:4F:FF:F3:0A:01:17:40:FD:E7:37:2D:BF:7F:A4:F9:65:64:49
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/RbhP__MKARdA_ec3Lb9_pPllZEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.194.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:c1:96:93:5b:b3:1d:eb:d6:50:d0:3a:e1:f1:8d:fb:61:74:
50:67:71:0e:ca:45:ad:06:b0:37:c5:fa:aa:4d:d0:64:e0:1e:
e3:23:cb:d9:c1:07:18:da:5f:af:7c:da:5d:fa:0d:cf:1b:40:
92:fb:0a:e9:56:25:e2:bd:0c:b7:a5:64:95:2f:99:cf:50:27:
1a:1e:59:b5:89:c7:f5:0c:1f:80:44:b9:f4:c0:c0:30:ca:14:
42:9a:c3:b1:b5:f3:11:15:38:3c:4d:fc:40:ec:cc:52:3f:67:
8a:6b:c8:3e:72:f4:f5:ee:66:ba:5b:56:50:a7:06:e3:c1:20:
19:02:9e:9d:df:24:7c:ad:0d:5d:af:52:5f:d4:57:44:85:e4:
53:53:0b:a0:f0:eb:80:b6:2e:45:96:c8:c8:e4:91:b1:67:15:
f5:09:21:9c:67:f4:77:75:01:1c:d2:c2:0e:0e:03:ff:dc:38:
bb:14:ce:13:98:91:4f:01:08:4e:f8:4d:e6:2a:dd:4b:0e:54:
74:86:ea:b1:cd:83:8f:91:b0:1d:ee:f2:32:50:ff:b9:89:0e:
f5:98:0f:09:0f:19:29:39:e1:96:66:07:d8:63:38:eb:46:ba:
39:a8:4d:30:c6:5b:dd:f0:19:93:4e:a2:f9:2d:ef:fa:83:10:
fd:d3:c1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org