Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/kv3sA0Ll8qZugAeBPN0t--Mb-T8.roa
File: kv3sA0Ll8qZugAeBPN0t--Mb-T8.roa (raw, json)
Hash identifier: +W4Zscd/m2h0g0zDvbny7E3v+J3SQ0JvX4yr0ZWWBYk=
Subject key identifier: 92:FD:EC:03:42:E5:F2:A6:6E:80:07:81:3C:DD:2D:FB:E3:1B:F9:3F
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 0589D0C4
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/kv3sA0Ll8qZugAeBPN0t--Mb-T8.roa
Signing time: Tue 01 Feb 2022 11:38:10 +0000
ROA not before: Tue 01 Feb 2022 11:38:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 185.233.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92917956 (0x589d0c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Feb 1 11:38:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92fdec0342e5f2a66e8007813cdd2dfbe31bf93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:da:97:dd:25:5f:61:40:a4:ba:53:12:ff:
57:3e:c8:25:cf:79:7b:87:67:02:06:c2:89:ef:34:
42:c9:3d:27:98:b8:62:62:8d:0a:23:a9:23:21:4c:
8c:9e:ff:9e:16:96:f5:2f:f9:6f:05:01:cd:4b:fb:
bc:a6:42:d7:42:bc:f8:6d:e2:45:5f:bc:9a:aa:34:
37:59:25:fa:7c:92:34:20:44:f3:a8:1e:69:bc:5b:
4a:ee:2f:1f:8f:a3:91:6b:33:4e:97:b5:24:fe:d5:
19:ed:2e:82:b8:28:4e:eb:2c:1a:31:99:3d:e1:06:
ec:a0:51:1b:a9:37:fa:4e:d8:65:75:db:6d:96:22:
3c:70:66:a6:d7:ce:d4:e8:5a:cd:ad:21:17:ed:a6:
b5:64:bb:cb:a1:46:09:9b:7c:57:f0:c6:bd:de:d9:
eb:af:a1:5a:45:6d:32:b3:a1:fb:c4:80:1c:3b:69:
31:eb:5a:39:1d:57:e0:ff:48:f7:55:c9:fa:d3:57:
a2:27:96:90:8a:8a:b8:b4:e1:33:6d:56:b5:db:f5:
a5:22:7f:a8:60:2f:b2:da:1f:ee:3f:9c:61:d7:93:
74:9a:9e:23:23:8c:de:c8:43:22:d0:2e:a5:64:dd:
c4:b5:8b:61:6c:cf:91:40:1d:f2:54:32:1f:cc:7c:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FD:EC:03:42:E5:F2:A6:6E:80:07:81:3C:DD:2D:FB:E3:1B:F9:3F
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/kv3sA0Ll8qZugAeBPN0t--Mb-T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.187.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f7:16:35:3c:10:0b:68:4d:40:28:cc:4e:a6:11:d5:4c:f3:
8b:86:30:54:30:42:35:7a:2e:53:64:c1:1e:ac:9c:a7:af:c6:
04:d2:bd:76:01:76:e6:24:3a:bd:cf:c9:f4:ef:d8:e4:91:85:
ce:82:4f:c2:5e:0e:a2:c3:a4:a5:4f:32:82:d9:d0:d0:a7:fa:
73:6d:7e:2b:c8:d3:1a:b8:54:c1:b6:80:75:c9:8d:3f:db:c6:
67:4d:79:10:1c:a6:c3:eb:d7:b8:b9:ad:79:28:24:a7:15:49:
6d:02:3b:f6:53:e6:ce:86:08:0c:33:c5:59:05:5d:40:a6:00:
4a:28:e3:ee:44:f7:ef:3f:c3:73:d9:23:b3:9d:39:48:54:09:
8d:3c:45:4f:c1:16:3f:17:19:97:35:a7:66:ad:6c:fe:8e:82:
2a:3a:ee:f0:3b:29:54:bc:51:90:f3:10:d4:84:89:fb:41:20:
b2:a6:df:09:96:d6:01:29:c6:b6:f5:cb:c1:88:60:b9:12:9f:
1e:ce:d7:43:86:f9:a9:f5:98:2f:ef:37:c3:d0:9e:2d:d8:d5:
64:f7:02:04:fb:cb:f7:0d:0d:58:93:c2:eb:57:bc:b2:4a:73:
7f:b5:c2:4c:be:b5:e9:df:e3:38:d9:12:16:4f:ec:b0:64:67:
05:5e:7b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org