Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/vKDC3cKx5bKaxiw7OhwrUDx5l3Q.roa
File: vKDC3cKx5bKaxiw7OhwrUDx5l3Q.roa (raw, json)
Hash identifier: aVqBUifTrQ/SewsYIsqKOq2jBCXAJvw/jcsYyb4OnGE=
Subject key identifier: BC:A0:C2:DD:C2:B1:E5:B2:9A:C6:2C:3B:3A:1C:2B:50:3C:79:97:74
Certificate issuer: /CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Certificate serial: 018946663AFCE95CA86DDBBF27B38D9BE59A
Authority key identifier: CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/vKDC3cKx5bKaxiw7OhwrUDx5l3Q.roa
Signing time: Tue 11 Jul 2023 19:20:52 +0000
ROA not before: Tue 11 Jul 2023 19:20:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201272
IP address blocks: 185.80.42.0/24 maxlen: 24
185.80.41.0/24 maxlen: 24
185.80.40.0/24 maxlen: 24
185.80.40.0/23 maxlen: 23
185.80.43.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:66:3a:fc:e9:5c:a8:6d:db:bf:27:b3:8d:9b:e5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Validity
Not Before: Jul 11 19:20:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bca0c2ddc2b1e5b29ac62c3b3a1c2b503c799774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:8d:32:ad:fc:5f:32:98:39:cd:74:cb:9f:
19:36:bc:f4:65:e5:7e:7a:c4:c8:97:19:62:1a:f9:
03:b1:46:55:4b:19:c8:7c:32:76:c7:68:7f:c7:be:
75:7b:dd:41:55:92:41:89:dd:bc:3c:93:04:db:83:
77:b5:70:b4:32:07:56:3b:8e:fc:19:5b:db:e6:6a:
38:55:6b:4f:9c:90:56:52:8e:98:7e:22:d7:96:73:
c8:2e:01:b3:92:5e:10:6c:59:d7:b2:20:e9:97:40:
90:7f:d2:56:77:e9:be:09:cf:2c:99:f5:6e:0b:50:
2c:40:33:c7:47:d4:d3:7f:b3:ee:90:d6:68:2f:dd:
6c:98:ba:ac:99:cb:7a:b0:a7:bb:f1:d2:fe:25:b1:
44:f6:de:07:c9:c7:b0:9c:9b:99:6b:4a:08:f8:82:
9c:eb:37:a6:b9:5f:c7:ca:99:ce:32:f7:75:ee:5d:
23:47:dc:82:d4:36:78:46:0b:00:d6:3b:0d:9f:de:
eb:a0:a3:e3:af:d5:db:41:17:b7:3c:1f:9a:c9:03:
05:e5:65:d1:ef:e1:51:d5:fb:ae:ef:0b:12:53:53:
31:02:c3:df:14:b3:23:7b:3d:56:45:fe:58:16:45:
47:11:6a:21:92:ca:15:e3:9d:96:d8:53:23:d4:a7:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A0:C2:DD:C2:B1:E5:B2:9A:C6:2C:3B:3A:1C:2B:50:3C:79:97:74
X509v3 Authority Key Identifier:
keyid:CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/vKDC3cKx5bKaxiw7OhwrUDx5l3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.40.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:cf:86:f7:74:4e:e0:51:1f:4b:e6:9c:cd:06:a4:fb:c4:58:
36:b0:50:5a:32:a5:4e:9c:ec:66:22:1e:ef:04:07:68:f2:94:
27:a2:73:7e:6e:51:e9:93:42:97:67:1a:86:de:9c:d9:57:b5:
24:61:14:35:70:10:76:a6:4b:30:75:d6:94:8e:32:0b:7c:a1:
13:cb:3c:b1:2d:c5:c6:f8:47:f2:c2:ce:47:e1:e9:e9:b8:a7:
e2:b6:9a:82:1f:47:aa:43:ab:08:f7:4b:d7:7f:de:d2:64:2b:
fb:6b:88:fc:f5:5d:eb:d7:53:c7:a0:5c:8e:c9:54:6b:27:67:
41:5f:4b:ef:a8:0f:b2:83:e6:2c:cb:32:6d:ef:93:61:2d:a5:
03:15:71:e4:28:ef:b8:7d:9d:7e:06:b7:cc:77:b8:a2:10:0f:
e2:05:cd:d1:4b:9c:34:f2:c4:d5:f2:6d:0a:b3:e9:78:a8:3b:
b9:c0:ee:7f:ed:f3:ef:c1:5f:62:2e:3d:c2:28:ab:54:ab:0c:
98:87:59:ff:c3:e0:e7:e9:59:cf:73:56:90:f7:91:4f:f9:dc:
b6:75:84:0e:6b:9a:90:d9:05:76:20:0d:0e:f5:28:9b:f6:f8:
48:f6:e6:18:a0:ad:19:4e:51:49:41:4b:af:b7:c7:0c:ca:2a:
bf:dd:d3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:08 2024 by rpki-client on console-ams.rpki-client.org