Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/TPYsj67qJufhPRiw7JWOjOlpVFE.roa
File: TPYsj67qJufhPRiw7JWOjOlpVFE.roa (raw, json)
Hash identifier: MHAe+Hj05/WU7h/s6waPUMqTaw3XgpEhtWt4gCI+C4A=
Subject key identifier: 4C:F6:2C:8F:AE:EA:26:E7:E1:3D:18:B0:EC:95:8E:8C:E9:69:54:51
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 0185EC75ADF5F81764227CF20CB557993978
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/TPYsj67qJufhPRiw7JWOjOlpVFE.roa
Signing time: Thu 26 Jan 2023 05:03:33 +0000
ROA not before: Thu 26 Jan 2023 05:03:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 185.233.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ec:75:ad:f5:f8:17:64:22:7c:f2:0c:b5:57:99:39:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 26 05:03:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cf62c8faeea26e7e13d18b0ec958e8ce9695451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:03:40:48:88:6e:be:71:77:34:59:e5:9c:
a8:c8:96:0e:d5:02:33:c8:81:ac:14:34:49:49:a2:
05:82:4a:76:88:23:cb:a1:6c:54:6b:e6:bb:fa:aa:
7f:84:39:00:ed:a2:4f:18:11:4b:20:4c:bd:e0:a2:
f5:7b:dc:18:41:54:99:11:d1:5b:45:10:4d:ae:9f:
08:8b:42:bc:c1:33:bf:68:7f:cf:de:89:3e:4c:73:
f5:52:fe:d6:06:60:f5:a0:77:2a:d3:2a:f2:32:6c:
3f:2e:0c:46:ae:6b:f1:ec:bc:67:52:48:72:34:e0:
e3:af:c4:ce:75:95:4c:2f:b6:22:0a:75:a8:c9:2c:
1c:63:3e:6b:02:f7:99:7a:0f:57:4b:d6:fa:a2:3b:
c0:21:6c:84:92:04:5e:38:53:fc:ca:12:b1:3b:32:
0e:11:d5:80:73:35:18:17:83:05:e3:5d:40:73:f6:
1b:44:1e:5f:8d:db:81:9f:b6:f6:a7:fb:f2:ef:69:
d4:fd:a1:9a:b3:35:3a:7d:17:40:49:7a:e5:ce:e2:
6a:31:1b:0a:52:f5:55:9e:59:94:c0:5d:4d:79:76:
48:93:33:b6:c6:a6:e9:2d:c1:35:f3:c8:5c:49:76:
82:fe:41:89:ec:b7:1c:57:5c:b3:10:f5:72:f8:85:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F6:2C:8F:AE:EA:26:E7:E1:3D:18:B0:EC:95:8E:8C:E9:69:54:51
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/TPYsj67qJufhPRiw7JWOjOlpVFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.187.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0b:d0:4e:aa:ef:ea:c4:75:5f:14:6d:48:98:1e:6b:3a:e3:
e6:0d:43:97:57:6d:35:40:b4:77:8f:ce:1d:ad:71:0a:b0:ea:
3b:e2:5e:3c:4b:a8:40:e2:f2:80:e7:2f:10:08:f0:20:ca:e2:
bd:3c:48:6d:1d:26:c2:87:8c:e9:78:2c:c8:8c:1a:ee:e7:95:
4e:bb:eb:e5:08:e8:11:11:da:92:11:3a:e9:bf:6c:ee:92:1c:
f0:90:34:b1:ed:80:c6:bf:b1:66:a4:f9:25:30:26:8a:00:47:
4f:3c:9a:1e:c9:ee:1a:f5:3f:60:b1:e6:ad:94:2d:7d:ef:12:
05:1c:c9:e0:e4:2f:72:a8:88:a0:87:3f:ff:4f:6f:29:b5:2a:
ea:ee:e1:d0:ed:06:bc:52:bf:08:f3:84:b7:df:3c:44:71:54:
09:86:e2:e3:f6:2c:a1:3c:23:3b:d1:62:8d:b9:37:f3:3e:12:
52:12:93:bd:60:e8:2b:bf:66:22:7b:c5:7c:07:16:8c:f3:0d:
ab:15:f4:a7:c7:46:a1:18:fd:2d:92:fa:57:32:6b:c8:f6:38:
e2:b3:0c:a0:cf:53:dc:2f:e0:31:ec:1b:df:27:29:09:0e:63:
f8:24:91:30:a8:71:16:da:91:08:88:23:8d:44:4b:64:f8:3e:
b3:44:c6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org