Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/DHKQBSq8xTel_off0UrmLZ06jWs.roa
File: DHKQBSq8xTel_off0UrmLZ06jWs.roa (raw, json)
Hash identifier: 22u+cdz8HwO0VbKp4DxNIBaUIHQ7d0dncmDfiVHg7vk=
Subject key identifier: 0C:72:90:05:2A:BC:C5:37:A5:FE:87:DF:D1:4A:E6:2D:9D:3A:8D:6B
Certificate issuer: /CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Certificate serial: 018946829BE808D21141122E782A8EBBC433
Authority key identifier: CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/DHKQBSq8xTel_off0UrmLZ06jWs.roa
Signing time: Tue 11 Jul 2023 19:51:52 +0000
ROA not before: Tue 11 Jul 2023 19:51:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201272
IP address blocks: 185.80.42.0/24 maxlen: 24
185.80.41.0/24 maxlen: 24
185.80.40.0/24 maxlen: 24
185.80.40.0/23 maxlen: 23
185.80.40.0/22 maxlen: 22
185.80.43.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:82:9b:e8:08:d2:11:41:12:2e:78:2a:8e:bb:c4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Validity
Not Before: Jul 11 19:51:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c7290052abcc537a5fe87dfd14ae62d9d3a8d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b0:ea:4a:7f:3f:e6:31:2f:6c:2a:2a:af:71:
7d:90:36:b8:63:0c:4c:c3:58:cf:bf:2c:f9:68:77:
e5:f8:3a:3d:45:39:dc:15:66:7a:57:84:3c:a1:a0:
ed:6e:36:27:3e:98:66:49:29:50:8b:61:f8:99:e0:
82:3f:4f:6d:0b:69:5b:7f:cd:39:bd:a5:7e:ac:b8:
c6:ee:37:86:10:75:55:88:b9:e7:3e:82:92:93:92:
9c:d3:64:4d:b2:26:2a:ec:5b:ec:d6:d3:ac:a3:a1:
9e:b6:38:ee:68:a9:30:c3:7d:2d:f8:60:b1:fc:6d:
81:35:a4:2e:15:c7:23:e7:3f:06:7a:65:ea:e8:35:
6b:38:9e:42:50:d2:ab:fd:41:53:66:a2:87:3f:61:
9e:b5:67:80:1d:f8:0b:df:6c:03:81:9d:7b:09:81:
2b:1d:fb:78:15:16:97:40:1b:52:bc:9a:2e:91:5a:
20:21:fe:9e:d5:c7:33:f2:65:21:3d:89:33:c2:98:
e3:aa:95:26:1b:64:b8:8b:8a:b4:95:88:e4:9e:1b:
a7:b7:37:6a:19:da:fb:ac:21:07:b8:31:46:6a:d7:
98:25:3a:1e:71:8b:92:64:e6:2b:c2:28:10:66:e0:
1e:50:5b:02:98:a3:f5:cc:59:6c:e7:66:b6:87:a2:
98:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:72:90:05:2A:BC:C5:37:A5:FE:87:DF:D1:4A:E6:2D:9D:3A:8D:6B
X509v3 Authority Key Identifier:
keyid:CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/DHKQBSq8xTel_off0UrmLZ06jWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.40.0/22
Signature Algorithm: sha256WithRSAEncryption
46:be:d6:d6:72:2d:6a:93:f7:b6:85:6b:41:e1:8e:63:69:41:
3a:8b:8a:38:14:ec:c7:f6:18:6a:1b:d1:00:2b:13:f9:a4:b9:
f1:1a:30:f5:df:81:e9:28:de:ba:b3:ac:eb:6f:b2:67:13:9b:
d8:bf:ee:b7:0e:d1:93:06:3d:df:27:c9:8b:bb:2b:e4:0f:55:
5a:bf:48:52:9f:f1:e8:a6:fd:4c:fa:f0:48:33:a9:67:5e:70:
8f:1d:16:13:a1:1f:bd:98:ea:43:3b:0f:c0:7a:00:3e:aa:70:
c1:32:9b:5d:66:f1:b3:46:f1:22:60:9b:1b:70:e5:ef:f3:6f:
97:62:7b:60:33:11:d2:6b:2f:34:c1:d4:37:71:2c:2c:4e:a3:
bc:f6:c6:b2:c3:9a:d6:89:d9:79:4d:13:bf:3f:8a:d3:03:4b:
d6:8e:b0:56:dc:93:f4:0f:6b:c3:a9:3f:99:1e:35:7a:85:00:
88:ef:94:a0:00:8c:e5:5d:70:ec:d9:a2:7f:71:eb:cf:90:8c:
0d:c4:f5:c5:14:0d:f0:d3:59:68:31:66:7b:cc:59:b8:56:71:
ff:30:47:5e:a3:b0:db:6b:33:7d:1f:5f:a3:a7:e4:a2:e8:07:
32:d5:db:0b:f9:55:c7:8d:e6:e5:ff:ad:50:ce:43:3f:b1:f5:
2e:f7:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:08 2024 by rpki-client on console-ams.rpki-client.org