Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/c_VBEUbZ-867RqLY912Msh3rS5g.roa
File: c_VBEUbZ-867RqLY912Msh3rS5g.roa (raw, json)
Hash identifier: yLXDPo0cSsQeyfL71ut1Wkc0CnhckxizAEwVrzHXPb0=
Subject key identifier: 73:F5:41:11:46:D9:FB:CE:BB:46:A2:D8:F7:5D:8C:B2:1D:EB:4B:98
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01830E9789426537C683417C8B50F5069B8D
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/c_VBEUbZ-867RqLY912Msh3rS5g.roa
Signing time: Mon 05 Sep 2022 16:59:15 +0000
ROA not before: Mon 05 Sep 2022 16:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 185.199.159.0/24 maxlen: 24
185.36.205.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0e:97:89:42:65:37:c6:83:41:7c:8b:50:f5:06:9b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 5 16:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73f5411146d9fbcebb46a2d8f75d8cb21deb4b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:c7:06:40:a8:b3:3e:0e:f5:32:e6:d1:9c:
4b:d1:ba:16:a5:a3:5e:e8:f8:c4:90:48:67:f9:6b:
92:b3:70:f8:c8:53:80:76:5d:6b:ec:10:1e:7c:a7:
14:c5:a4:35:08:9a:a3:96:26:af:b3:a1:8e:ab:7b:
ff:f9:35:89:c1:f5:b2:b4:53:77:0a:d6:2c:d3:02:
3a:b6:50:5d:fa:05:cb:4b:e8:64:0d:f2:68:69:36:
92:c8:84:56:08:8c:43:5d:a3:d7:6a:df:c2:47:16:
5b:7e:b8:cd:e1:c4:d4:9a:5c:3f:fe:b1:2f:09:2d:
6f:1b:31:96:ff:9a:26:64:77:ba:39:2a:14:f5:2d:
ed:8e:f4:d2:95:a8:c7:db:5a:a6:54:0d:4c:7d:dd:
f0:dc:52:e0:93:1f:f8:93:97:ed:0a:24:e5:d1:8f:
07:33:d9:54:26:8e:be:27:ae:55:ab:db:2f:be:ab:
e4:39:99:8b:eb:88:90:fc:6f:b5:16:ce:07:af:80:
30:93:d2:4e:72:ff:0b:03:46:7d:0f:2e:77:24:cd:
92:3b:27:43:a6:58:60:09:6e:50:44:ac:31:fd:71:
a0:20:d7:c0:41:a8:60:f5:b1:c0:26:e4:cd:da:5d:
d5:df:bb:46:9c:33:7a:62:13:a1:6e:0b:78:60:7d:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F5:41:11:46:D9:FB:CE:BB:46:A2:D8:F7:5D:8C:B2:1D:EB:4B:98
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/c_VBEUbZ-867RqLY912Msh3rS5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.205.0/24
185.199.159.0/24
Signature Algorithm: sha256WithRSAEncryption
53:45:3a:b0:d3:fa:b5:45:8d:70:ca:3c:34:ed:bd:38:2d:3b:
e2:a8:2c:15:d3:d7:60:b5:d0:31:96:e8:af:d4:76:8c:68:14:
ba:d8:bc:c2:ba:a2:d0:0b:88:3c:0e:22:d0:40:84:48:1c:f5:
c7:8f:bd:cd:fc:1e:b7:7a:93:48:a4:a2:87:63:b5:ba:5f:e6:
04:04:9d:cf:49:a5:12:c1:79:51:ce:d7:e0:45:c7:d0:4a:72:
1c:23:4d:28:8d:92:51:36:e9:b5:bd:b4:ce:09:ed:c5:7f:66:
a4:2a:bd:11:31:7f:33:c2:3b:c6:d3:dc:f3:dc:8c:03:57:6f:
b5:78:b6:0d:d2:41:b9:40:6a:00:0e:67:b7:cb:c0:d1:15:6f:
04:ce:f1:82:f4:8a:2f:bd:da:c5:03:92:a7:f7:2c:97:16:07:
fb:19:32:36:02:78:24:ed:a2:78:6d:e2:86:c3:32:e7:74:f2:
de:31:92:13:87:65:52:f4:52:89:72:d9:8e:ec:5c:07:5a:2c:
75:b7:66:49:05:be:9c:36:6f:ae:8a:93:0b:6c:f9:51:5d:3f:
44:d1:82:93:0c:5d:1d:66:10:3b:94:bb:d2:cc:60:9f:18:bd:
c2:56:6c:bb:9b:a7:a4:6b:5a:ac:5c:5f:d0:f0:3e:55:63:2a:
cf:b1:5c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org