Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/__hcfVIoqKYKaDdJCs0JidbDbYY.roa
File: __hcfVIoqKYKaDdJCs0JidbDbYY.roa (raw, json)
Hash identifier: 3A+XYXWXFSLUnG8Nv9v7yoGEaAsD2AkbbU1s7OIHJQo=
Subject key identifier: FF:F8:5C:7D:52:28:A8:A6:0A:68:37:49:0A:CD:09:89:D6:C3:6D:86
Certificate issuer: /CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Certificate serial: 0186DAA799D7CA0FC86D0EFFC40B37C775BA
Authority key identifier: 91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/__hcfVIoqKYKaDdJCs0JidbDbYY.roa
Signing time: Mon 13 Mar 2023 11:07:42 +0000
ROA not before: Mon 13 Mar 2023 11:07:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39093
IP address blocks: 185.212.184.0/24 maxlen: 24
185.212.184.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:a7:99:d7:ca:0f:c8:6d:0e:ff:c4:0b:37:c7:75:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Validity
Not Before: Mar 13 11:07:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fff85c7d5228a8a60a6837490acd0989d6c36d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f7:c8:3e:9f:45:01:41:67:af:24:5a:e0:09:
30:e4:d1:30:bc:e1:05:de:83:8c:0c:6f:92:9c:58:
34:9b:5b:a3:84:9e:04:49:1b:bc:b0:7c:d0:49:35:
1d:35:69:b9:7a:b5:65:43:bf:a4:af:42:94:ea:1d:
a9:18:90:48:75:eb:a5:c9:22:f4:e0:19:c2:73:7c:
a7:fa:46:37:ce:03:89:10:a2:e6:f2:4a:ed:56:df:
fa:54:1a:fb:3f:36:7d:42:5d:c7:d7:30:4e:ce:6a:
23:57:2b:de:3c:0a:ce:96:7b:5b:27:52:dc:0a:26:
ba:ef:ed:77:2c:26:80:57:b6:36:ce:f6:a2:7a:b4:
87:af:f7:fc:99:2a:e4:56:c6:b0:23:4e:95:d2:5f:
db:4c:43:67:59:15:2f:8f:ec:39:6d:b8:3c:06:ce:
e1:2f:78:69:fb:b6:7c:1f:ef:47:d7:89:d9:bc:e8:
57:2e:ea:49:d0:58:c4:27:93:40:0f:f4:b9:92:99:
cb:e8:3c:62:8b:4a:df:97:72:a4:97:f9:1d:2a:1e:
fd:63:71:01:84:20:62:22:6f:88:b1:0c:26:5c:a4:
41:93:e2:bb:d9:34:3c:8f:bc:7b:1c:08:58:08:e4:
a0:ba:d8:7a:0a:af:b4:dd:3f:c0:ab:79:0e:7b:e8:
26:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F8:5C:7D:52:28:A8:A6:0A:68:37:49:0A:CD:09:89:D6:C3:6D:86
X509v3 Authority Key Identifier:
keyid:91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/__hcfVIoqKYKaDdJCs0JidbDbYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.184.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:85:27:10:84:50:6b:d9:46:52:cf:4d:21:07:01:d5:57:3e:
24:05:1b:39:55:a8:9b:e1:4e:ef:8d:ce:be:ab:79:ed:50:a8:
97:f6:d8:f0:57:b0:e6:01:f2:b9:96:c4:35:50:31:dd:86:b1:
7d:b6:e5:40:f0:59:6b:95:0a:f8:df:e3:5a:7e:96:d9:1b:ec:
b4:48:1e:f8:8a:c2:d1:47:9a:42:64:ed:92:57:8b:3c:b7:0a:
c1:fa:8d:2b:55:b9:71:62:f4:f3:b7:8b:d2:bc:47:94:f4:25:
66:9f:8c:e1:d1:f7:28:bc:28:99:7f:f5:4c:b3:ba:7a:e9:77:
d1:99:42:8a:62:03:c1:ca:c0:47:b8:67:81:5b:bb:68:f1:52:
10:d0:ca:76:7a:f8:14:4d:7d:be:59:74:3c:20:54:bf:e3:ff:
94:e8:fb:af:9f:58:b7:e2:45:b5:41:d5:5f:75:f5:4c:ed:5d:
e8:0a:0a:c7:2d:ae:ec:2f:fe:6b:95:fe:0b:8c:33:4f:74:15:
ec:64:4c:57:80:9a:c9:1f:1a:46:bf:c2:92:ba:21:6b:cd:d9:
5e:25:e2:1e:27:95:05:c0:62:c6:6b:70:5a:55:24:d6:ad:a7:
57:6d:19:2e:e3:a1:98:79:d2:a3:71:21:d0:6e:81:7c:65:77:
af:ba:b0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:17 2024 by rpki-client on console-ams.rpki-client.org