Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ivlyQbOFXlMeTe0_7knpiTmQ-lI.roa
File: ivlyQbOFXlMeTe0_7knpiTmQ-lI.roa (raw, json)
Hash identifier: xBbTyhckiAdgBB2XZg0ga47sSk2wkrrJhUemjpRhLrM=
Subject key identifier: 8A:F9:72:41:B3:85:5E:53:1E:4D:ED:3F:EE:49:E9:89:39:90:FA:52
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 015944
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ivlyQbOFXlMeTe0_7knpiTmQ-lI.roa
Signing time: Thu 03 Mar 2022 14:43:06 +0000
ROA not before: Thu 03 Mar 2022 14:43:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.106.192.0/23 maxlen: 23
185.106.194.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88388 (0x15944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Mar 3 14:43:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8af97241b3855e531e4ded3fee49e9893990fa52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:38:81:a6:23:25:d3:bb:f5:bf:5c:7c:f1:76:
07:16:46:fd:81:07:e7:fc:8a:da:32:b7:95:2b:b7:
6e:3e:6c:83:33:b5:23:26:bd:4a:de:b5:e6:19:19:
ad:9f:3d:15:73:88:fe:f0:28:fd:7c:d4:09:7c:59:
53:f0:9f:e7:da:67:85:73:00:c2:e3:45:5c:40:17:
2f:2e:fe:c1:1a:db:51:44:a7:ea:4a:e2:5e:21:81:
24:e6:24:ee:1a:e7:07:ec:4d:a1:2c:04:bc:22:2d:
b7:72:50:38:57:65:58:d3:ee:7e:e2:bd:77:a0:b7:
98:7e:db:1d:58:3d:46:e5:08:1a:b4:ea:3d:77:76:
a9:83:82:4d:4c:22:3b:a9:63:63:56:a4:15:e9:bf:
ed:f3:35:8f:19:1d:99:39:02:79:86:3f:6b:d1:d5:
3e:10:75:39:8a:03:fc:82:ac:6d:b8:5c:8b:48:66:
86:8c:27:47:db:09:f3:c0:d2:64:22:7d:dd:cd:5b:
ad:d7:fd:1a:2a:59:92:11:a3:c1:4c:77:d3:37:8b:
96:ab:46:2c:0f:a5:4b:f5:a3:fe:7c:4e:e4:15:1e:
fd:5c:a8:bc:b7:fd:fb:e4:95:8f:b6:d2:38:dd:d5:
9a:8a:fb:87:d6:58:8f:1a:6c:0a:68:e6:07:23:a3:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F9:72:41:B3:85:5E:53:1E:4D:ED:3F:EE:49:E9:89:39:90:FA:52
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ivlyQbOFXlMeTe0_7knpiTmQ-lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:6b:47:1a:ba:6c:d8:39:43:cf:ba:ae:de:c3:ba:01:37:f8:
f3:e1:45:b1:6c:09:58:55:67:80:4a:06:f4:4e:87:71:df:ed:
c8:43:ff:f8:db:fe:5a:b7:60:7a:17:d4:de:1e:be:3c:37:af:
b4:05:85:5f:50:27:06:c9:76:33:2e:a8:ae:20:26:bb:fe:b2:
7f:06:ea:b1:1b:89:21:e3:80:44:f4:a8:a0:12:dc:c1:00:1c:
8c:c4:ba:3d:92:58:9e:44:b1:b1:f6:f7:33:99:00:0f:1b:f1:
36:8d:b2:3a:ef:01:5c:f8:b8:e3:e4:76:1f:45:fd:0a:a0:8f:
41:d1:d0:c2:fc:90:27:81:3e:bd:6c:52:ce:d3:9d:51:f5:00:
9f:a1:2c:e5:b5:c3:06:45:51:97:89:8b:41:ee:5f:5d:e0:97:
0f:98:7d:d3:66:9f:b9:3d:5a:45:6d:f5:1b:05:38:35:59:5a:
39:38:2d:0e:a8:13:8f:f1:6b:ca:fd:e4:9f:2c:f1:07:a5:ea:
79:ec:97:ce:91:53:85:d2:00:16:f1:85:6a:d3:72:46:0b:69:
1d:8a:d9:2a:62:e1:e9:7a:6e:67:fe:08:1c:54:f1:17:1e:4f:
1e:df:fc:e8:ed:2c:a3:45:a6:f0:53:22:6b:b9:6f:90:fb:ed:
c1:de:49:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org