Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xGiHIkn1gdjJe-xUd9g_nZ82RbQ.roa
File: xGiHIkn1gdjJe-xUd9g_nZ82RbQ.roa (raw, json)
Hash identifier: 63aG03Qwm+Nbk6Vf13fRDxo7Wv1zEWoUR9AqvlDsNy8=
Subject key identifier: C4:68:87:22:49:F5:81:D8:C9:7B:EC:54:77:D8:3F:9D:9F:36:45:B4
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0124296A
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xGiHIkn1gdjJe-xUd9g_nZ82RbQ.roa
Signing time: Sat 02 Jul 2022 12:59:16 +0000
ROA not before: Sat 02 Jul 2022 12:59:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3214
IP address blocks: 185.106.194.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19147114 (0x124296a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jul 2 12:59:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c468872249f581d8c97bec5477d83f9d9f3645b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5c:c1:2e:96:ef:ca:d9:64:a4:61:78:6f:8b:
81:07:f0:ac:07:50:f6:7d:2d:90:64:e9:64:5b:e0:
8c:c1:e2:3f:ea:f2:02:ae:66:ca:da:2a:cb:46:b3:
9f:ba:0d:7b:79:f1:a4:3f:a5:c3:9f:bc:ed:65:27:
13:95:11:ec:26:c3:e6:7f:f9:f8:45:67:1b:09:5a:
1f:65:85:1b:19:fa:cb:58:55:0d:a5:f5:88:fb:3d:
12:24:a4:94:a7:19:53:7a:56:93:c8:03:2c:c6:aa:
4b:c1:04:82:c7:f9:79:99:e2:e0:ad:70:da:b3:71:
18:23:0e:49:1a:e5:52:8d:f2:7b:06:71:08:32:19:
5d:5f:f7:03:72:17:18:54:0a:49:88:55:58:36:cb:
ce:8d:bb:c7:e8:52:e1:da:88:d3:00:27:47:70:0f:
87:1a:52:fb:50:ea:39:a5:e7:c8:a6:b2:32:75:ed:
75:3d:90:7c:bb:64:28:25:a0:3f:08:79:26:a1:13:
89:c0:9d:d8:6f:82:3a:e7:f8:07:02:ee:1f:68:43:
03:8a:a5:a7:30:10:06:3b:b5:7d:a9:d0:69:17:33:
04:16:a7:b4:35:28:3b:be:42:a6:77:eb:b0:0b:b6:
8d:84:40:cd:a0:14:42:d3:99:7b:b1:bb:90:79:dc:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:68:87:22:49:F5:81:D8:C9:7B:EC:54:77:D8:3F:9D:9F:36:45:B4
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xGiHIkn1gdjJe-xUd9g_nZ82RbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.194.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:25:8c:e5:ae:7d:20:68:23:89:d9:f3:01:df:41:35:b7:92:
e7:1e:17:bd:a9:fb:fc:af:b1:5f:92:4e:d9:5e:44:43:b5:bd:
01:32:5b:5a:03:8f:f3:c9:4f:fa:1a:ae:e1:4b:fe:27:e2:93:
e4:a2:dc:1f:19:eb:78:e8:ba:82:b2:11:4b:d1:9f:59:f5:6a:
d6:a9:35:4c:15:36:3d:fb:53:88:43:10:5d:c4:2a:b9:73:c6:
a8:c2:e6:09:cc:a7:97:a6:e0:01:24:c6:40:e3:cf:21:ca:d9:
c4:30:42:40:9a:57:08:20:e8:0e:94:ff:6e:ef:ab:50:44:3d:
eb:1e:5c:bc:70:9c:41:7e:21:24:af:6c:58:9f:e5:78:c3:37:
6a:c8:e9:17:da:ff:b0:9d:34:87:d5:6b:0c:a0:ef:43:ba:7a:
95:0c:40:e6:50:32:4d:b3:af:fd:ad:26:9d:bc:c0:aa:bc:01:
4b:d0:c0:80:7e:40:3d:a5:8e:30:41:e9:12:e8:ff:1e:1a:d9:
58:eb:cb:f7:e9:c7:d0:8e:7d:ad:47:d1:ad:57:7d:e2:db:c3:
4d:e2:74:96:99:dc:fd:ad:b8:fe:b0:71:e8:ff:7b:b0:76:54:
ea:fd:66:c6:27:ba:7b:5f:31:f8:05:a8:f1:4d:60:17:52:04:
3d:a4:bd:ff
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEASQpajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NmNjZTA2ZTcwZGY5NzBkOTBhYmZlM2NiZTdmYTg4MmY0NjdiMWU0MB4XDTIyMDcw
MjEyNTkxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzQ2ODg3MjI0OWY1
ODFkOGM5N2JlYzU0NzdkODNmOWQ5ZjM2NDViNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIFcwS6W78rZZKRheG+LgQfwrAdQ9n0tkGTpZFvgjMHiP+ry
Aq5mytoqy0azn7oNe3nxpD+lw5+87WUnE5UR7CbD5n/5+EVnGwlaH2WFGxn6y1hV
DaX1iPs9EiSklKcZU3pWk8gDLMaqS8EEgsf5eZni4K1w2rNxGCMOSRrlUo3yewZx
CDIZXV/3A3IXGFQKSYhVWDbLzo27x+hS4dqI0wAnR3APhxpS+1DqOaXnyKayMnXt
dT2QfLtkKCWgPwh5JqETicCd2G+COuf4BwLuH2hDA4qlpzAQBju1fanQaRczBBan
tDUoO75CpnfrsAu2jYRAzaAUQtOZe7G7kHnceJ0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTEaIciSfWB2Ml77FR32D+dnzZFtDAfBgNVHSMEGDAWgBSGzOBucN+XDZCr
/jy+f6iC9Gex5DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hzemdibkRmbHcyUXFfNDh2bi1vZ3ZSbnNlUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzgvNjZmMDVjLTc0MWMtNDcyMC1iYzdlLTg5NzE0YTdlOGQ1OC8x
L3hHaUhJa24xZ2RqSmUteFVkOWdfblo4MlJiUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgv
NjZmMDVjLTc0MWMtNDcyMC1iYzdlLTg5NzE0YTdlOGQ1OC8xL2hzemdibkRmbHcy
UXFfNDh2bi1vZ3ZSbnNlUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAblqwjANBgkqhkiG9w0BAQsFAAOC
AQEAPiWM5a59IGgjidnzAd9BNbeS5x4Xvan7/K+xX5JO2V5EQ7W9ATJbWgOP88lP
+hqu4Uv+J+KT5KLcHxnreOi6grIRS9GfWfVq1qk1TBU2PftTiEMQXcQquXPGqMLm
Ccynl6bgASTGQOPPIcrZxDBCQJpXCCDoDpT/bu+rUEQ96x5cvHCcQX4hJK9sWJ/l
eMM3asjpF9r/sJ00h9VrDKDvQ7p6lQxA5lAyTbOv/a0mnbzAqrwBS9DAgH5APaWO
MEHpEuj/HhrZWOvL9+nH0I59rUfRrVd94tvDTeJ0lpnc/a24/rBx6P97sHZU6v1m
xie6e18x+AWo8U1gF1IEPaS9/w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org