Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/5Z45VS3t0BvotQDq0c8yJ361EVI.roa
File: 5Z45VS3t0BvotQDq0c8yJ361EVI.roa (raw, json)
Hash identifier: IJx6yhak3PCF84mH2xMpLUaqlhT+WHTHip4sG9Yv+P8=
Subject key identifier: E5:9E:39:55:2D:ED:D0:1B:E8:B5:00:EA:D1:CF:32:27:7E:B5:11:52
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 03D1569D
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/5Z45VS3t0BvotQDq0c8yJ361EVI.roa
Signing time: Sun 03 Apr 2022 11:18:21 +0000
ROA not before: Sun 03 Apr 2022 11:18:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.225.23.0/24 maxlen: 24
185.199.156.0/24 maxlen: 24
185.199.157.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.214.111.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64050845 (0x3d1569d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 3 11:18:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e59e39552dedd01be8b500ead1cf32277eb51152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ff:fc:8b:bc:ce:62:0f:42:12:3f:8a:f5:22:
d8:6e:d0:6e:45:d6:59:c9:46:4d:0d:8b:1b:8d:80:
81:6c:74:fe:c9:01:fb:08:fb:a2:e1:75:1d:50:81:
66:8b:90:09:e6:89:cf:ac:d5:81:d1:0f:97:42:24:
ed:3e:a5:6c:ed:17:ec:33:9e:38:58:12:f6:c7:10:
93:24:7f:08:9b:82:65:4b:c9:72:09:62:5f:68:0f:
be:35:14:12:dd:93:e9:58:55:9f:97:e0:4d:2b:33:
c9:91:89:ec:94:e4:69:8c:89:25:e2:bc:45:b5:0b:
4d:8c:4c:75:44:c6:7e:29:c6:19:69:c3:ab:f8:53:
07:47:0a:65:96:ec:70:64:a7:d5:b8:b3:48:64:70:
cb:5f:d5:f8:bb:09:17:48:ec:89:54:2c:90:ce:66:
02:32:c8:99:f1:7e:43:4d:57:c8:43:a3:37:b5:4c:
62:55:47:45:17:c1:c8:1f:d1:3d:4b:25:ef:04:6f:
5f:68:82:b9:d4:98:9c:8d:bf:d7:76:24:d3:91:3b:
77:6a:be:5c:2d:1f:7f:96:bb:f2:67:95:3f:10:83:
18:1e:40:3d:0c:1c:45:78:4a:fe:61:5a:88:9f:b0:
6c:48:1a:7f:53:63:01:11:c2:42:3f:52:12:2a:fb:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9E:39:55:2D:ED:D0:1B:E8:B5:00:EA:D1:CF:32:27:7E:B5:11:52
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/5Z45VS3t0BvotQDq0c8yJ361EVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.156.0/23
185.214.111.0/24
185.225.23.0/24
185.228.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d6:72:b1:e5:67:a5:bf:67:e0:fc:b6:69:df:67:eb:e0:d7:
7e:a5:cc:7e:6a:f2:b8:a6:98:ca:58:d0:94:a0:8d:74:f6:ae:
c6:37:ab:dc:35:1d:21:0d:17:92:14:19:d0:5f:1f:22:fb:ba:
57:a0:49:fc:18:72:79:2f:ac:8e:ad:96:30:e2:b1:4c:26:6f:
23:f4:aa:e7:5c:79:aa:cf:cc:53:f5:12:8e:49:1f:14:2d:25:
d5:61:7a:d0:c6:4b:d1:34:24:ef:6f:e3:64:fc:90:32:de:cf:
8c:89:e3:34:0a:c7:75:56:4b:29:61:b2:0b:d2:41:d7:c3:8b:
91:19:ed:bd:98:4e:4d:fd:99:49:de:fc:ac:40:42:3e:28:22:
7d:9e:e2:97:2b:8f:35:d6:0f:f7:3c:32:46:48:50:21:63:88:
54:5f:35:84:a5:1a:24:21:73:34:64:88:54:3f:0e:1f:3b:3f:
ff:6f:d3:10:95:8b:85:9b:4f:a2:3a:68:9b:80:ba:39:90:93:
f4:85:e6:96:29:95:e9:3c:25:3b:dc:6b:a9:78:02:3f:28:d5:
25:86:54:f7:04:10:71:f5:28:6a:42:37:f1:34:84:e0:8f:a1:
54:b9:fb:06:bf:1f:ea:16:a0:53:c5:15:39:9f:e0:e7:4c:74:
00:6f:53:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org