Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/PxO6GXHu_YwiJRPRnMNaocz3AaM.roa
File: PxO6GXHu_YwiJRPRnMNaocz3AaM.roa (raw, json)
Hash identifier: WmEshV+aBBmpZcp2oimNmdzpauok0/48apInV+qxGYU=
Subject key identifier: 3F:13:BA:19:71:EE:FD:8C:22:25:13:D1:9C:C3:5A:A1:CC:F7:01:A3
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 06F2C1F4
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/PxO6GXHu_YwiJRPRnMNaocz3AaM.roa
Signing time: Sat 01 Jan 2022 14:04:12 +0000
ROA not before: Sat 01 Jan 2022 14:04:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200577
IP address blocks: 193.228.3.0/24 maxlen: 24
193.228.123.0/24 maxlen: 24
193.228.60.0/24 maxlen: 24
193.228.101.0/24 maxlen: 24
2001:67c:201c::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116572660 (0x6f2c1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Jan 1 14:04:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f13ba1971eefd8c222513d19cc35aa1ccf701a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:b3:37:09:f7:b7:87:a1:54:f2:14:b3:fd:
f0:89:a3:be:74:7e:13:93:05:a6:5e:3e:93:dd:53:
06:32:5c:00:16:e6:76:2e:9c:ae:4e:4d:ea:27:bc:
05:40:be:81:44:f0:15:27:aa:87:1a:a6:c3:ab:3a:
22:75:87:25:8b:c3:77:c5:ee:9e:84:20:6b:97:7f:
56:ee:3e:b5:f1:90:25:7a:a4:5e:10:0d:19:47:b0:
ef:30:a3:a7:50:53:dd:32:e2:7b:bb:06:f4:ca:08:
1e:36:a0:73:98:61:e1:b8:e8:4f:df:e9:8c:f7:29:
0d:15:fe:f6:ba:66:9b:cc:07:6d:68:4b:79:78:9e:
bb:6f:ae:e8:ab:69:a1:2b:03:cf:68:d6:3f:ec:01:
6b:90:f7:9d:1d:22:32:6c:c8:55:fc:af:79:fb:e4:
ac:6c:65:fe:f5:bd:bb:1c:b1:ad:05:d9:1f:ea:d4:
f2:ed:6c:97:f8:3b:8a:2e:1d:c8:4b:17:10:ae:8f:
78:eb:d3:c7:e4:11:ea:97:6a:16:7b:2e:17:3e:fa:
03:c7:bf:e9:d6:a7:78:8e:a0:0a:17:8c:9e:6a:4a:
6e:5f:11:b8:6b:1e:d2:0b:7f:92:75:c9:9c:38:0d:
59:3b:f2:92:b4:f9:f1:f6:86:5a:ff:ad:c9:6d:40:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:13:BA:19:71:EE:FD:8C:22:25:13:D1:9C:C3:5A:A1:CC:F7:01:A3
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/PxO6GXHu_YwiJRPRnMNaocz3AaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.3.0/24
193.228.60.0/24
193.228.101.0/24
193.228.123.0/24
IPv6:
2001:67c:201c::/48
Signature Algorithm: sha256WithRSAEncryption
79:07:e3:eb:b2:95:c3:e6:bf:4f:9b:61:05:7e:2f:96:f5:48:
c8:68:df:f5:f9:80:3c:dc:ba:c9:3b:14:c7:a8:a7:77:ae:07:
15:46:3d:4a:76:0f:ec:4e:12:40:29:f1:58:12:6e:26:09:ac:
00:34:14:a6:0c:f5:bd:85:71:ad:11:fc:b2:07:60:5e:18:61:
16:62:12:0a:ef:f2:11:4d:a4:c2:2d:81:6d:07:3b:ac:65:b8:
23:be:fb:9c:74:bc:4e:5e:34:bd:dc:0a:89:95:0a:86:6f:50:
ad:67:57:96:63:eb:34:c3:4d:85:7b:1e:c4:92:8e:9f:38:c2:
bc:66:34:69:cf:d1:45:47:e5:84:4d:3b:82:2e:4e:7c:7f:6c:
98:cc:2a:28:3c:75:be:7e:16:6b:36:72:57:be:df:7b:20:f4:
b6:20:4b:78:22:86:69:24:ea:12:c0:d7:38:9d:6d:d7:88:80:
ac:25:9f:52:24:a0:44:88:25:a7:2f:f8:30:9c:00:05:84:f2:
59:ea:53:27:cf:87:9f:8b:fb:c6:e5:af:26:25:b4:9b:64:c5:
00:7f:33:92:f2:ea:36:8e:75:96:bb:76:91:a0:10:62:38:2c:
79:e2:43:3a:73:a3:8d:5d:79:27:ad:d9:d3:fb:1b:9e:11:f0:
4f:41:56:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:48 2024 by rpki-client on console-fra.rpki-client.org