Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/hcCsIGpZa4jlnvOogrt16E5SCZA.roa
File: hcCsIGpZa4jlnvOogrt16E5SCZA.roa (raw, json)
Hash identifier: Yp4AkgmivzYnAtb9vWjV+jlAuAQNsLI4yVGu3Zdmox0=
Subject key identifier: 85:C0:AC:20:6A:59:6B:88:E5:9E:F3:A8:82:BB:75:E8:4E:52:09:90
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0477BC0D
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/hcCsIGpZa4jlnvOogrt16E5SCZA.roa
Signing time: Wed 08 Jun 2022 12:16:03 +0000
ROA not before: Wed 08 Jun 2022 12:16:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 185.126.80.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.158.0/23 maxlen: 24
185.108.206.0/24 maxlen: 24
185.36.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74955789 (0x477bc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 8 12:16:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85c0ac206a596b88e59ef3a882bb75e84e520990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:8b:0b:11:a5:2c:5c:9d:8d:12:0e:3b:9f:
c1:22:c9:e8:84:1e:ff:04:0a:35:4b:c6:3a:04:f6:
16:f1:9d:40:54:4b:66:ab:37:f0:dc:dc:4c:7b:ae:
5f:c1:de:d5:cf:c6:3e:07:b0:22:ad:9f:ef:dd:dc:
c3:80:de:e8:1a:fc:a8:1e:47:fd:9e:6c:61:e9:6e:
cc:c5:8d:f2:45:e3:cc:4a:c9:9d:95:7d:f7:d4:1f:
c0:11:a5:fd:d2:df:2d:4b:17:6a:0f:4a:94:59:cf:
a4:ab:3c:61:88:4c:b8:8e:54:a9:26:0d:5c:70:19:
cb:4d:f5:66:9c:fc:37:9b:4b:39:d6:42:70:0b:b3:
b5:32:91:71:3b:90:d7:3d:f1:08:2b:55:98:d3:f6:
1c:b5:9c:5d:c7:7e:68:31:fb:c4:65:11:8f:52:47:
3d:19:c4:34:f1:c1:e5:d5:eb:0d:21:63:3e:16:85:
aa:a1:51:4b:3a:91:75:bf:fc:13:d3:9d:c5:9f:73:
10:a9:a7:08:2a:7f:4c:fa:42:63:93:ef:8b:49:ad:
b8:39:99:8d:49:59:8a:b6:a1:52:05:66:49:f2:33:
02:eb:5b:7f:45:b9:7f:ce:81:b4:87:0b:c2:69:02:
ca:69:12:7c:90:ca:27:5d:c9:94:31:3b:26:38:cc:
7a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C0:AC:20:6A:59:6B:88:E5:9E:F3:A8:82:BB:75:E8:4E:52:09:90
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/hcCsIGpZa4jlnvOogrt16E5SCZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.207.0/24
185.108.206.0/24
185.126.80.0/24
185.199.151.0/24
185.199.158.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:a7:84:e5:04:f0:8b:22:b4:75:95:8b:a7:55:fb:cb:60:5a:
5b:62:89:21:e2:7c:67:88:97:83:aa:53:2a:82:d5:59:55:3a:
e0:21:22:b0:4e:4e:b6:4c:09:fe:aa:70:c5:7d:0c:06:f0:9c:
3c:b7:a1:70:a7:70:3f:5d:78:b0:db:43:1c:25:0b:f8:30:dd:
0a:3f:55:ee:7c:d2:82:de:54:1a:38:b2:c3:ee:62:56:18:78:
94:6c:16:2f:9b:d1:30:c3:31:fb:df:36:79:38:0d:27:92:bb:
0b:9e:31:ed:d6:97:1e:02:9f:6a:21:fc:c3:85:99:bb:8e:93:
03:0a:90:55:da:ac:a3:95:10:7b:65:53:82:c1:e4:4c:38:f9:
51:ca:b9:33:1b:c6:40:51:a8:0e:2b:58:e4:db:a0:4a:8a:40:
b4:6e:54:52:ff:8c:a1:70:f8:f1:17:34:df:75:13:aa:ea:f1:
3d:4d:da:ae:cd:a3:b8:34:fa:5e:e2:5f:5f:bb:23:cc:32:3e:
4d:9c:34:06:0c:a5:bb:a8:f2:ff:66:2e:ee:5a:28:d3:21:3c:
d9:1f:cc:69:66:6e:7c:ac:80:dc:10:d1:de:66:77:00:e6:03:
21:15:f9:a2:bc:61:84:ba:22:4e:e2:fb:78:88:8b:cd:e6:4b:
03:78:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org