Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/KKLHCTlpUhw3ITuGBQh6uUbmItA.roa
File: KKLHCTlpUhw3ITuGBQh6uUbmItA.roa (raw, json)
Hash identifier: a5/n/zX0Z3ZvbOOOWOZh5+FE0TEAxcL7qesGyVBdhMM=
Subject key identifier: 28:A2:C7:09:39:69:52:1C:37:21:3B:86:05:08:7A:B9:46:E6:22:D0
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01842FA0129E616EBE3D2CB00438E4161627
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/KKLHCTlpUhw3ITuGBQh6uUbmItA.roa
Signing time: Mon 31 Oct 2022 19:58:50 +0000
ROA not before: Mon 31 Oct 2022 19:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 185.214.110.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2f:a0:12:9e:61:6e:be:3d:2c:b0:04:38:e4:16:16:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 31 19:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28a2c7093969521c37213b8605087ab946e622d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:15:8e:1f:ba:46:c7:50:a3:25:42:2f:c2:
e1:a5:15:f3:28:bf:af:3d:24:0a:f2:e0:d7:39:2a:
08:ff:74:c6:75:1b:44:d5:20:15:01:2a:3a:6d:e4:
61:2d:0e:ad:7d:4e:0d:01:29:6b:00:d2:23:c1:44:
e1:3a:4b:5a:9e:d0:16:fb:eb:77:b4:b7:f9:c7:7b:
af:73:51:44:a9:f8:88:b0:59:b7:ff:14:d7:a0:84:
63:61:0a:b4:89:03:7f:ac:7e:69:19:bb:00:9f:6d:
39:d9:ec:10:4b:10:76:f8:4d:be:91:a6:b6:a3:ad:
29:c8:6d:0b:a6:4d:3a:48:e9:25:80:3e:d6:e2:07:
df:d9:1f:5e:cf:96:0b:7a:25:ef:0c:d4:de:43:0b:
a6:21:dc:9b:09:c7:e7:c4:9f:a1:ea:b7:18:7d:e1:
1a:44:31:07:23:42:35:db:ee:54:8f:d0:a9:ca:5b:
1c:87:15:83:5b:64:29:ad:1b:e6:4b:20:d6:71:2b:
6b:c1:a8:34:41:1c:f9:e6:04:70:75:02:ed:06:a3:
32:17:3b:c4:dd:a3:3f:2d:ae:b6:e9:77:fe:7e:dc:
15:f9:09:ee:c1:8d:c8:b9:82:59:6b:cb:d7:9f:16:
92:9f:ea:57:a1:ef:92:aa:d7:a8:c7:fb:25:e8:b6:
65:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A2:C7:09:39:69:52:1C:37:21:3B:86:05:08:7A:B9:46:E6:22:D0
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/KKLHCTlpUhw3ITuGBQh6uUbmItA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:64:e5:f4:69:ee:58:55:59:52:61:58:93:6a:0c:0b:d3:cd:
7c:cb:0b:ce:fa:d6:d8:aa:92:31:db:3f:74:24:11:0a:e5:59:
8a:60:2e:56:8d:e2:ce:e5:8f:40:cc:22:f8:5b:4b:36:ee:64:
88:ea:e9:be:c5:93:9d:1b:03:c0:f5:cf:b1:b1:32:22:31:38:
5f:e9:32:68:26:5c:1a:e9:7a:63:c6:4a:44:45:f1:a2:d3:7d:
e5:18:ef:2d:1c:ea:fd:a3:9e:40:16:bb:f8:65:9a:ed:7d:49:
87:a9:25:5a:9e:24:bb:53:7c:f5:6a:a6:b1:64:53:e5:93:61:
48:f0:72:88:d3:0e:b9:c7:69:b7:bc:62:83:1b:d6:c3:ae:fa:
86:9f:12:81:7c:d6:b9:42:7b:f4:ad:be:d3:f5:68:de:49:f8:
8d:1a:c4:11:30:e4:01:40:3d:bc:5b:d4:15:80:b1:f7:6e:5d:
0e:5d:92:81:52:48:3f:04:25:2b:ad:6e:19:c9:1a:ae:06:21:
a5:e8:fd:1e:6a:6b:8d:60:3b:bb:25:ce:1d:81:40:9c:23:00:
94:11:b9:09:04:bc:fe:36:78:e9:eb:7c:7c:bc:e2:e0:49:d6:
1f:e3:e8:58:bb:65:8d:e2:04:85:0b:28:17:b5:87:eb:e1:41:
7e:36:b4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org