Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/2Db0bUz8oZcNLmOnPFF2N_boKAU.roa
File: 2Db0bUz8oZcNLmOnPFF2N_boKAU.roa (raw, json)
Hash identifier: ZSSkM+HlS39gArJse95C6NtQ1Q7uydif8j5nLCWjbZE=
Subject key identifier: D8:36:F4:6D:4C:FC:A1:97:0D:2E:63:A7:3C:51:76:37:F6:E8:28:05
Certificate issuer: /CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Certificate serial: 01893607D87649F3BEA53B94C251463A9683
Authority key identifier: CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/2Db0bUz8oZcNLmOnPFF2N_boKAU.roa
Signing time: Sat 08 Jul 2023 15:03:50 +0000
ROA not before: Sat 08 Jul 2023 15:03:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57588
IP address blocks: 185.80.40.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:36:07:d8:76:49:f3:be:a5:3b:94:c2:51:46:3a:96:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Validity
Not Before: Jul 8 15:03:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d836f46d4cfca1970d2e63a73c517637f6e82805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4d:6c:ac:d1:86:0a:a8:d9:3d:41:2e:a4:c2:
0a:be:30:5b:e7:bb:91:48:19:d0:61:84:b1:4c:03:
a8:6b:df:24:8f:9c:48:43:ae:a0:c9:3a:33:2a:b3:
a1:16:16:85:e1:8a:69:bd:da:76:41:e4:f1:3b:78:
6b:d4:3f:17:a3:1a:31:f9:0e:e4:fe:6b:0f:c7:ea:
f5:64:4d:28:54:90:53:c4:07:4d:36:f9:d2:c7:37:
aa:7b:6f:5a:d4:9f:21:31:57:cd:b6:c1:fb:ff:36:
08:79:7e:80:6e:08:07:9c:27:0e:34:37:45:d3:c5:
2e:4f:9e:52:8a:12:e4:b9:43:d0:2a:d4:24:b8:8f:
c1:49:bd:94:be:09:2e:5e:00:26:06:ad:fa:85:df:
05:da:a5:91:aa:fa:fd:39:09:c6:da:31:de:9d:c1:
a5:23:7a:42:64:16:b7:16:9c:f3:6b:f2:55:b4:84:
b7:74:16:f6:08:0f:96:40:02:a6:64:01:da:59:20:
6b:ed:21:a9:b5:84:44:be:d5:09:6a:a8:bb:4e:74:
0a:dc:fd:69:71:e3:79:38:4c:c8:04:9e:a3:98:75:
65:76:77:42:45:e6:b6:ba:a4:6b:ff:6c:0b:72:78:
ac:17:a8:3b:e4:3c:0c:51:28:bf:fa:96:91:7c:1b:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:36:F4:6D:4C:FC:A1:97:0D:2E:63:A7:3C:51:76:37:F6:E8:28:05
X509v3 Authority Key Identifier:
keyid:CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/2Db0bUz8oZcNLmOnPFF2N_boKAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.40.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:c6:d7:24:77:0c:11:a0:45:d8:b0:a5:c4:0a:30:ed:ac:8e:
1d:ea:69:ce:b0:05:d8:7d:4f:cc:ea:c1:87:bb:6d:78:74:06:
58:d8:b5:a6:e4:e0:46:7e:2c:61:5f:ae:41:07:f5:b5:24:3b:
e1:58:ca:12:d8:f0:41:40:43:fc:a2:93:3e:2d:d6:73:44:2a:
65:db:f1:2d:59:01:0e:32:a4:25:83:21:e8:03:71:f6:d5:ae:
10:10:a0:ea:7e:65:82:1d:55:db:23:0c:06:a4:53:e5:25:dd:
f1:6d:5c:4c:8f:e7:1a:7c:f3:be:66:32:10:c1:09:9c:c1:1e:
46:e8:20:e1:0e:cc:e9:bc:fc:18:90:82:7f:b5:81:3f:2d:74:
9c:2d:78:12:72:34:fa:d5:8e:2d:0b:80:47:de:2b:04:06:e7:
fd:f7:d6:3c:de:1b:e3:d9:11:b6:38:0a:89:4b:ed:a1:34:74:
02:23:8e:9e:c3:22:a2:b7:61:3e:2c:68:8a:7d:87:a4:45:f7:
a1:6d:cd:aa:61:bd:87:54:6e:59:77:9c:20:02:36:94:73:33:
b8:d8:1e:c2:7c:0b:a4:c8:2e:30:7f:a9:66:5a:ba:b4:d8:56:
95:6b:a3:87:b8:e9:7f:c2:5d:37:3c:88:54:b0:ae:cc:7e:3e:
36:19:1b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:08 2024 by rpki-client on console-ams.rpki-client.org