Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/e0JI6hB8ZPIAqv_XVxLS_Vrvw7Q.roa
File: e0JI6hB8ZPIAqv_XVxLS_Vrvw7Q.roa (raw, json)
Hash identifier: DHBJqbhKA+4eNJZOdLp7JSaGoKfhxSr2w7/RDvkh2eY=
Subject key identifier: 7B:42:48:EA:10:7C:64:F2:00:AA:FF:D7:57:12:D2:FD:5A:EF:C3:B4
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13383CD0
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/e0JI6hB8ZPIAqv_XVxLS_Vrvw7Q.roa
Signing time: Sat 01 Jan 2022 04:03:05 +0000
ROA not before: Sat 01 Jan 2022 04:03:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141376
IP address blocks: 212.90.102.0/23 maxlen: 24
212.90.100.0/23 maxlen: 24
185.129.111.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322452688 (0x13383cd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 1 04:03:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b4248ea107c64f200aaffd75712d2fd5aefc3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:a0:fe:58:af:df:b0:6d:35:5a:74:eb:eb:
b6:4a:19:f9:a8:98:99:d6:0e:85:92:6a:9d:c5:a6:
80:5a:59:d3:e1:35:f0:0e:da:2b:c3:63:47:f7:36:
c8:ee:77:b0:45:f4:eb:c2:b0:64:b5:7d:06:29:7f:
1a:a7:57:4a:54:2f:a0:9c:20:0b:f1:1a:49:80:81:
9d:55:36:e5:73:bf:d0:10:c3:c9:48:b3:68:e6:05:
23:a1:54:2b:d3:14:fd:d4:e5:f5:4b:2c:75:ce:ce:
43:c5:99:75:c2:0a:08:d9:00:00:9e:3e:2f:1d:49:
88:31:7b:98:05:5e:d7:48:e1:ac:b5:9a:7e:5d:b4:
58:5a:e2:d5:3b:fe:11:e1:21:64:1c:09:3c:e8:45:
96:3f:7e:44:48:9d:e9:23:26:04:9d:99:9f:a0:54:
8c:e0:49:8e:c2:61:83:63:90:a0:ba:bf:c3:8a:4b:
49:d3:57:48:21:a2:9d:75:f4:ad:a9:bc:39:f2:59:
77:a6:2d:de:75:d2:e7:44:e5:5d:f3:97:4b:c3:85:
0b:98:60:5a:5f:c7:de:92:55:93:a6:98:00:b2:a3:
90:17:bf:f7:ee:fc:4f:d2:09:f2:71:30:a5:05:c7:
f9:ba:35:f3:34:51:1b:3a:6c:c5:2d:89:64:fe:d7:
98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:42:48:EA:10:7C:64:F2:00:AA:FF:D7:57:12:D2:FD:5A:EF:C3:B4
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/e0JI6hB8ZPIAqv_XVxLS_Vrvw7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.111.0/24
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
73:1c:48:6a:79:ed:48:6e:58:ed:80:3d:e3:9c:62:de:b5:23:
cc:d9:7f:a4:46:5a:90:1c:d8:67:8f:12:1c:78:80:86:e2:02:
31:40:c9:34:7c:80:57:59:1e:21:20:2e:6d:09:74:2d:68:d7:
e2:dc:a4:c4:f4:b1:27:46:88:7b:23:63:66:b6:7f:e9:9c:02:
a0:78:e6:ff:45:d3:0f:99:ec:1a:04:71:c1:c2:77:9c:d7:bf:
2a:52:dc:18:c3:3c:d9:29:73:66:27:41:0a:8a:6f:dc:ae:9f:
03:df:1a:be:86:42:08:79:79:07:8e:d4:f5:26:7b:f0:ae:21:
cd:60:e3:4c:50:8e:53:bd:8b:05:97:f8:af:96:d2:c3:2d:9d:
6a:34:b4:5d:60:3d:e8:ca:e9:8f:d2:ff:af:41:5c:2a:46:0d:
f0:62:21:84:9b:f9:4a:b5:fe:81:b0:26:50:6b:d1:13:cb:4f:
22:f9:5f:4c:ae:08:6b:c5:b2:34:84:df:cc:f4:5c:c2:75:b3:
83:0a:42:50:6a:4d:1a:77:84:64:41:1b:91:47:ac:58:d9:f0:
27:73:5f:95:36:3d:7f:37:9a:42:93:08:a8:2f:ab:f6:a6:51:
af:5c:6d:7e:40:a7:a5:7c:dc:68:ef:2a:77:f7:74:e0:1f:a3:
38:85:eb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:16 2024 by rpki-client on console-ams.rpki-client.org