Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/MrQWeMreO3dFwdgfZjK5vsEGq94.roa
File: MrQWeMreO3dFwdgfZjK5vsEGq94.roa (raw, json)
Hash identifier: W94XA0EH8yHo+XjLNIJRhwC5jIQqb2BJWkD1EEPWjRM=
Subject key identifier: 32:B4:16:78:CA:DE:3B:77:45:C1:D8:1F:66:32:B9:BE:C1:06:AB:DE
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018575E0C0DFDB6527933E213FD50BA3D3A5
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/MrQWeMreO3dFwdgfZjK5vsEGq94.roa
Signing time: Tue 03 Jan 2023 04:25:41 +0000
ROA not before: Tue 03 Jan 2023 04:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209642
IP address blocks: 185.80.196.0/23 maxlen: 24
185.129.111.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:75:e0:c0:df:db:65:27:93:3e:21:3f:d5:0b:a3:d3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 3 04:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32b41678cade3b7745c1d81f6632b9bec106abde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fd:05:ba:5d:b3:58:25:2e:2e:c8:34:34:a3:
58:2a:a5:7e:ee:b4:11:b4:b9:42:62:49:b0:cd:9a:
36:ed:7a:73:f3:98:e9:31:30:f4:8c:3c:78:e6:96:
5a:d4:e0:af:21:bf:9a:e4:0e:69:20:c0:22:48:37:
ae:c5:0f:93:e9:76:da:b4:8a:4b:e1:97:f3:66:3f:
6d:9d:ca:12:60:10:9a:90:8b:37:35:4e:7b:70:e4:
e9:97:86:e5:5d:31:52:88:ee:42:fd:d7:14:01:85:
05:8a:00:94:38:d1:19:ac:f8:5b:c7:c6:3d:30:ed:
24:db:c4:7c:36:d0:c3:cf:b0:b2:88:a4:3f:89:55:
79:b8:43:e5:68:55:65:e1:91:c5:c1:49:67:27:c6:
d3:f4:45:ba:4c:8b:c8:c9:96:5c:75:b8:91:fe:46:
a9:22:20:04:78:8d:12:e0:2c:7d:db:4a:80:de:1d:
73:1b:2c:1c:1c:fe:88:b8:e8:a9:23:28:3f:4d:ea:
16:12:ea:b1:8b:10:31:f9:cd:49:fc:43:2e:3f:b3:
7e:a1:e5:21:b9:22:c1:63:42:7c:c9:b8:41:55:a5:
8f:29:82:1e:dd:55:4e:88:fa:58:a7:99:dc:61:8e:
3d:48:be:da:41:02:f9:18:f4:cb:27:f6:51:47:74:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B4:16:78:CA:DE:3B:77:45:C1:D8:1F:66:32:B9:BE:C1:06:AB:DE
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/MrQWeMreO3dFwdgfZjK5vsEGq94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.196.0/23
185.129.111.0/24
Signature Algorithm: sha256WithRSAEncryption
07:47:a1:72:23:69:68:dc:e5:2b:6a:c7:c2:8e:0e:de:cb:88:
35:66:4f:e5:1e:4d:21:6a:24:98:4f:3b:85:3e:37:d6:22:d7:
89:16:92:90:6d:a0:92:44:16:6c:be:cd:47:b8:b3:3c:8e:b9:
bc:00:54:1d:57:99:70:7f:be:27:2f:ed:75:af:5d:b1:44:ee:
e5:9c:97:ca:86:3a:35:e0:72:20:4c:ae:8d:8d:61:44:ff:d9:
27:b5:9d:62:4f:7b:0a:9e:bf:e4:4f:5f:04:57:e0:55:2c:e9:
59:fa:bc:bb:82:6c:03:bd:f8:59:17:8a:13:10:93:bb:3f:85:
d1:01:d4:20:cb:68:bf:b3:36:58:8f:15:00:b0:76:3b:87:f2:
dc:5b:aa:97:7e:34:e5:6b:13:58:27:90:f0:59:36:0f:55:99:
5c:22:f0:e8:bf:48:ca:ea:1f:ee:52:3a:87:cd:51:ec:2e:47:
25:98:11:14:82:00:e6:ab:19:08:24:e3:22:d9:51:9b:01:2e:
01:60:1c:e5:d9:04:17:76:a1:9f:87:4c:e7:6f:27:7a:68:b2:
5f:6e:d8:05:75:89:ec:10:b6:fd:d8:d6:1e:0c:1e:60:a7:0e:
38:44:e5:96:47:bd:28:36:73:44:97:fc:5c:38:f3:a1:94:94:
e8:cf:8a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:35 2024 by rpki-client on console-fra.rpki-client.org