Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/oY1KMwXsHV0DRRYlSWSNJmDfSb8.roa
File: oY1KMwXsHV0DRRYlSWSNJmDfSb8.roa (raw, json)
Hash identifier: LAcbUG3Vah6l6/80RHxqvHsWd9MWHDECzAzrsDZCKu4=
Subject key identifier: A1:8D:4A:33:05:EC:1D:5D:03:45:16:25:49:64:8D:26:60:DF:49:BF
Certificate issuer: /CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Certificate serial: 07FF2FE5
Authority key identifier: C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/oY1KMwXsHV0DRRYlSWSNJmDfSb8.roa
Signing time: Sat 01 Jan 2022 04:53:19 +0000
ROA not before: Sat 01 Jan 2022 04:53:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60597
IP address blocks: 185.185.158.0/24 maxlen: 24
185.185.157.0/24 maxlen: 24
185.185.156.0/24 maxlen: 24
185.185.159.0/24 maxlen: 24
185.14.203.0/24 maxlen: 24
185.14.202.0/24 maxlen: 24
185.14.201.0/24 maxlen: 24
185.14.200.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134164453 (0x7ff2fe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Validity
Not Before: Jan 1 04:53:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a18d4a3305ec1d5d0345162549648d2660df49bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:13:43:64:64:bf:36:a7:75:c9:57:3b:f0:a2:
ab:3b:c1:05:e1:bb:ea:32:51:e1:0d:54:21:c1:18:
11:58:7b:8c:d8:ba:a3:1c:50:13:ea:35:8e:e5:9b:
b3:ec:05:a0:7c:00:9f:28:aa:c8:3c:21:5a:38:62:
ab:47:88:4c:1a:a1:09:a6:51:7a:5c:7f:55:26:bb:
73:c1:b0:79:c0:6b:db:8e:df:01:d8:1a:8c:49:b0:
32:df:fc:a6:3e:00:d8:0a:2c:cf:a1:b0:cc:2d:77:
5d:16:16:b2:d5:bd:85:5c:7b:a9:0b:b9:e3:63:9b:
99:b1:e2:f9:53:fc:57:97:bf:c4:36:ad:68:0d:89:
2a:6e:43:87:55:65:f8:65:0a:e0:2d:36:5c:51:05:
9a:59:80:1e:95:06:83:35:a1:d2:7c:76:cc:9a:e0:
b4:98:74:be:56:44:20:e9:dc:1c:34:09:c4:62:06:
7b:2b:81:4f:25:e3:e8:d8:09:ff:b6:7b:87:42:b2:
7c:a8:bb:ca:db:5e:b1:41:a5:ec:13:2b:25:78:8e:
d8:fa:8a:c8:7a:cc:bc:7b:18:0c:b2:da:f0:77:ed:
2e:17:56:d9:64:89:3f:27:1a:b5:ff:23:11:47:b8:
4d:a1:02:b2:51:e5:3e:ee:19:da:2f:2d:a8:d7:41:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8D:4A:33:05:EC:1D:5D:03:45:16:25:49:64:8D:26:60:DF:49:BF
X509v3 Authority Key Identifier:
keyid:C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/oY1KMwXsHV0DRRYlSWSNJmDfSb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.200.0/22
185.185.156.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:cd:2a:29:93:b2:0b:4f:bb:a6:4a:bd:2f:1d:21:2f:bc:b3:
5b:6d:9b:24:53:c1:18:c9:61:61:16:52:5d:6d:ac:b5:78:e4:
16:a8:3c:53:f9:4f:11:07:90:11:62:91:5c:3c:ca:d4:26:12:
3e:da:dd:c0:d7:b5:d9:3f:31:f9:d2:35:e2:9d:1d:05:1a:4b:
f5:f4:82:58:32:d6:68:86:c0:29:05:c3:fc:60:13:81:d7:ef:
74:df:65:31:06:dd:07:ec:1a:2e:68:30:5c:0d:1f:d2:e9:0a:
a4:a1:4b:07:73:c0:f6:87:4b:0d:37:10:d0:6c:65:ac:56:cd:
63:db:c1:be:ce:f7:83:d2:4c:25:b4:60:1c:0e:f5:97:58:54:
9e:c8:15:ef:50:75:ef:c7:1d:bb:07:e1:9c:14:b1:11:f1:d3:
35:02:fd:52:bd:15:56:7b:a8:84:47:0f:e2:b9:f8:71:1b:6e:
36:d3:44:aa:23:44:91:82:be:58:a7:46:db:60:4d:05:b4:ce:
ac:a7:38:7d:8a:46:bb:db:24:61:9b:86:5c:e6:21:38:e0:20:
30:27:0e:32:2d:93:88:ac:d3:3e:5d:6a:5a:4c:91:d9:1e:91:
c3:19:f4:ca:14:a5:93:22:8d:70:05:9a:16:65:39:bd:4e:b3:
88:79:0e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:06 2024 by rpki-client on console-ams.rpki-client.org