Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/7QD006_wkUEtGzmPu2joWoYx_N8.roa
File: 7QD006_wkUEtGzmPu2joWoYx_N8.roa (raw, json)
Hash identifier: zPpe+46sXAjoe0MtM01YbDb0GXWNP5lyF48NOegY1vs=
Subject key identifier: ED:00:F4:D3:AF:F0:91:41:2D:1B:39:8F:BB:68:E8:5A:86:31:FC:DF
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0182E2EB5764732F7924879ADAE4BD1E5CF3
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/7QD006_wkUEtGzmPu2joWoYx_N8.roa
Signing time: Sun 28 Aug 2022 05:27:30 +0000
ROA not before: Sun 28 Aug 2022 05:27:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60240
IP address blocks: 185.214.110.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e2:eb:57:64:73:2f:79:24:87:9a:da:e4:bd:1e:5c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 28 05:27:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed00f4d3aff091412d1b398fbb68e85a8631fcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:c6:89:58:31:0d:28:5d:69:34:c3:98:31:
f8:0f:70:40:4a:c9:38:44:89:61:5d:6a:8e:19:e0:
7c:12:3b:85:a9:24:a8:74:d6:f9:ac:95:b4:3d:15:
9e:a7:f0:27:b1:8d:ee:2d:e2:fc:53:2e:8e:38:04:
15:42:e2:6f:6f:db:24:51:bb:95:ad:8e:27:58:d1:
7c:7a:a0:3d:9f:35:18:81:c3:91:8b:40:cb:92:fe:
02:41:ed:76:24:51:6c:2a:fe:09:f9:cb:a2:c9:c1:
bd:78:04:dc:97:30:60:9a:64:0c:c0:59:c5:e5:95:
2f:42:b5:14:ca:04:bc:2a:49:31:34:79:67:a4:25:
67:08:6e:f0:0e:98:a4:73:24:75:da:53:5b:bb:31:
a4:0d:ea:0d:8a:f5:9d:d5:bd:61:bb:6f:6e:89:55:
19:49:29:92:b4:1e:0e:c0:fc:e1:9c:98:8d:97:21:
7f:32:19:f9:61:84:26:c5:30:60:e1:f2:00:82:29:
14:0d:67:b9:8d:29:dc:de:49:b0:9f:cb:1e:84:24:
60:ac:46:4e:1d:d8:26:3d:2a:2b:ac:a8:19:ae:ca:
26:a6:2f:78:66:5d:fa:ad:34:5f:f9:41:e7:26:6b:
3c:6a:5c:08:55:1d:6f:11:ad:5c:14:16:6a:4f:ad:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:00:F4:D3:AF:F0:91:41:2D:1B:39:8F:BB:68:E8:5A:86:31:FC:DF
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/7QD006_wkUEtGzmPu2joWoYx_N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d4:17:27:b7:68:27:94:77:98:20:e9:71:67:00:d5:4e:f5:
45:8a:f3:d9:95:67:6d:6a:e4:05:2e:c1:df:9a:b4:08:3b:ad:
a6:1f:12:1c:a5:c8:40:76:1e:12:5e:9c:84:b9:5e:88:24:15:
8c:c7:95:e7:87:56:fd:83:38:24:a7:3c:30:b3:1a:1a:9c:ec:
b7:40:8a:39:32:4b:61:92:a1:4f:d6:72:e1:72:c3:1d:ec:b7:
4f:25:34:73:f1:5e:b4:83:03:e7:01:d5:12:5e:4c:c6:70:4b:
bb:ed:ac:e3:f8:ed:05:e0:0e:06:07:ec:ca:a6:a0:31:01:24:
48:36:6e:07:97:17:d1:5c:dd:f5:90:97:6a:63:90:a4:ef:3a:
05:ab:9d:ef:dc:93:4d:2d:c3:26:f1:bd:03:8d:b1:66:f2:5d:
72:c0:5d:3c:95:f6:b8:a5:60:b6:83:18:0c:d6:5c:d5:43:4f:
aa:0e:4b:4b:c6:31:21:8a:7e:c6:e1:90:2c:ef:d1:2d:2f:d5:
3e:22:01:7d:3d:4b:ae:6c:ae:bb:44:5b:61:23:5b:f4:bd:7d:
97:a5:af:de:3f:8d:89:3f:f3:f0:49:64:42:69:0a:42:a7:4a:
29:e3:8f:e5:2c:b9:68:bd:d7:10:ac:7f:b4:8c:3f:e3:7a:da:
9b:be:b5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org