Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/oCQzyEnapmrfNzcMEFdZDwReaEQ.roa
File: oCQzyEnapmrfNzcMEFdZDwReaEQ.roa (raw, json)
Hash identifier: Ht/RLgj2xSmYL65WDJrbnzh4vTbSm877fe08aAZWzgA=
Subject key identifier: A0:24:33:C8:49:DA:A6:6A:DF:37:37:0C:10:57:59:0F:04:5E:68:44
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 98828B
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/oCQzyEnapmrfNzcMEFdZDwReaEQ.roa
Signing time: Sat 07 May 2022 06:32:26 +0000
ROA not before: Sat 07 May 2022 06:32:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 185.106.194.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9994891 (0x98828b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: May 7 06:32:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a02433c849daa66adf37370c1057590f045e6844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:54:3a:59:89:48:14:85:8a:70:0a:45:2d:
86:95:73:d0:a7:06:3b:a4:97:68:a6:6d:84:a5:63:
b2:7b:56:54:4c:57:7f:0f:27:31:ff:a3:70:c5:26:
d9:80:27:68:53:d2:1f:76:1d:43:94:33:58:ed:63:
e3:2a:f5:1c:b5:96:06:7f:2e:c1:56:b4:ba:2a:a4:
16:cb:ee:1e:62:cf:cd:09:f5:f6:d0:97:b7:2d:9d:
3b:3f:27:6e:ea:ee:b1:4e:92:50:aa:1a:a7:4b:61:
7f:a0:73:4c:66:18:14:aa:89:d6:aa:a3:51:59:50:
cc:2a:05:97:1d:03:78:eb:aa:a2:c1:b6:c1:a4:90:
c3:c6:fa:94:e1:db:3c:df:c8:c1:b2:3f:23:8b:5e:
db:10:ad:43:fc:18:a5:4f:42:a1:bb:8e:19:3b:04:
e2:fe:f1:a8:4e:64:44:c8:b1:da:a1:94:c7:cf:f7:
a4:02:b1:9a:26:f6:48:8d:95:49:ce:de:d2:5b:87:
59:16:59:b7:48:4a:71:83:b4:5b:bb:87:59:9f:86:
df:13:75:56:c8:74:03:87:86:ca:9f:0a:79:16:b5:
33:7d:0f:93:7d:1f:b7:0f:51:5a:97:27:ed:b1:82:
f4:a5:1a:75:8f:65:2d:f5:e8:98:13:91:85:7f:06:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:24:33:C8:49:DA:A6:6A:DF:37:37:0C:10:57:59:0F:04:5E:68:44
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/oCQzyEnapmrfNzcMEFdZDwReaEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.194.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:cd:9f:b2:7e:77:65:08:92:e2:35:5d:17:b0:91:17:e3:af:
e0:bc:88:ab:98:a8:ea:db:c4:82:f5:30:54:38:bd:fd:87:b4:
d6:9b:40:81:95:9d:4a:6f:d6:22:23:80:16:73:37:7e:ec:d1:
a4:11:7a:5c:d2:d5:9a:2f:5c:65:19:39:db:b4:78:29:cc:e8:
b5:0e:fc:93:04:48:d0:b5:da:72:6b:e3:95:48:5c:5d:62:dc:
33:a4:17:ec:e6:1d:42:f3:a1:92:76:e0:da:1b:45:8f:1c:ee:
e0:2b:cf:cf:6a:f3:db:59:00:27:0a:78:8a:93:ff:b2:37:d6:
0a:54:b3:f9:5c:a0:4a:4c:d6:69:ae:d0:39:d4:63:da:7e:a6:
5f:9d:ef:d5:c2:d3:51:c1:10:78:c3:45:e3:a9:7b:82:4c:b0:
a3:6d:da:6c:bd:72:0d:af:1e:3c:13:64:9f:f3:54:c6:27:97:
c9:5c:c3:9c:fe:7d:c1:e2:f4:b3:3f:c5:c1:45:ee:db:2e:89:
ac:8a:17:ad:1b:f4:b1:70:59:bf:2d:88:5c:41:17:96:46:43:
94:55:35:2f:33:ca:00:6c:3f:54:8d:c2:af:ce:d0:b2:72:9c:
8e:d0:b3:ef:99:49:b7:9f:ed:84:52:6c:99:16:83:06:ca:e6:
df:d6:9b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org