Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/askJmQXvs5WPDhXU0NFdsEMM088.roa
File: askJmQXvs5WPDhXU0NFdsEMM088.roa (raw, json)
Hash identifier: RmTZEluSY9u+rzLBPyAhsTeDhGCUVbkqz3/HwBIwpwY=
Subject key identifier: 6A:C9:09:99:05:EF:B3:95:8F:0E:15:D4:D0:D1:5D:B0:43:0C:D3:CF
Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial: 026CB388
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/askJmQXvs5WPDhXU0NFdsEMM088.roa
Signing time: Sat 01 Jan 2022 16:06:54 +0000
ROA not before: Sat 01 Jan 2022 16:06:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21388
IP address blocks: 85.119.55.0/24 maxlen: 24
85.119.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40678280 (0x26cb388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
Validity
Not Before: Jan 1 16:06:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ac9099905efb3958f0e15d4d0d15db0430cd3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:28:c4:b0:38:b3:7a:bb:8d:18:1a:21:ab:
dc:93:2b:23:f8:67:ea:58:ac:86:f8:f8:de:0c:7c:
e5:e3:04:50:99:0c:0a:21:ec:2a:2e:15:2e:f8:48:
b5:6f:12:b8:66:f3:ce:b9:f1:0d:24:a7:80:d1:8d:
01:7f:b1:79:2c:f8:c8:8a:fa:39:2f:8e:41:1a:31:
3f:4d:7d:69:d3:f0:c2:93:34:06:31:f5:03:14:98:
49:4c:43:5a:0c:10:43:d5:df:a6:7a:4e:f4:3f:ba:
ba:07:f1:58:50:77:18:b5:6d:ed:0d:e0:2e:90:eb:
4c:16:78:0a:44:32:64:67:5a:88:7a:ad:f9:0d:31:
ec:6b:6f:f7:c6:d9:c6:80:18:61:94:37:01:e8:20:
9b:a7:42:88:b1:94:aa:a1:aa:8a:4a:55:6a:97:7f:
98:89:27:a2:f0:dd:92:39:48:9d:04:5b:78:5c:00:
84:b1:3d:77:c6:4a:e9:95:ee:be:17:64:65:d1:5f:
45:e4:07:1d:93:0d:ed:8a:e1:ce:68:6d:7b:88:25:
65:3e:94:c3:4e:dd:b8:9c:38:e5:58:1d:c5:ab:6e:
22:ba:59:99:c1:c6:ab:4f:72:e5:4f:5a:ad:99:84:
46:97:fe:f2:f8:b7:07:34:6f:58:e3:e7:1b:5c:2d:
b2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C9:09:99:05:EF:B3:95:8F:0E:15:D4:D0:D1:5D:B0:43:0C:D3:CF
X509v3 Authority Key Identifier:
keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/askJmQXvs5WPDhXU0NFdsEMM088.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.53.0/24
85.119.55.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e4:33:e3:e2:d3:7d:d7:24:04:4d:0e:58:ab:82:47:09:58:
49:ce:e1:5c:fd:19:d5:01:02:30:82:08:2d:be:85:89:0d:7f:
21:92:cd:fe:2b:2d:d5:e6:38:86:8d:3d:df:f3:34:68:19:33:
a1:54:7c:85:36:fb:78:36:1f:cd:1f:38:0b:cd:aa:05:f4:f3:
f1:be:07:8a:be:2f:08:ea:42:6d:d7:bc:7e:34:64:ad:ae:e5:
1d:2d:6c:53:95:c0:e0:9e:68:2e:b4:a7:d0:cf:3f:9a:ec:2c:
32:a0:ea:4e:bc:f3:ff:98:61:f0:67:75:0b:5e:bd:31:f8:11:
5b:11:78:d8:7d:de:9a:20:b1:1a:0d:69:7b:4e:df:d1:95:08:
b3:ac:cd:6e:20:00:64:19:98:33:0d:85:1a:92:15:a9:cc:19:
2f:eb:13:f3:8b:28:07:da:f8:71:71:b3:c9:76:47:d3:86:31:
db:85:d6:ea:0f:72:c8:d4:8e:f4:3a:93:08:ff:9f:37:47:a0:
d2:71:2e:4b:2c:f3:9a:ba:61:a7:30:37:78:96:27:84:b2:01:
b1:73:bb:5f:d1:7d:56:43:fb:4a:e1:b4:78:55:9f:f1:30:91:
d6:dc:e9:06:00:7d:bf:b1:20:f4:58:ac:3d:49:15:17:29:04:
09:37:56:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:28 2023 by rpki-client on console.sobornost.net