Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lvg8dGWCMBvtVWpva7UDl_eVi5U.roa
File: lvg8dGWCMBvtVWpva7UDl_eVi5U.roa (raw, json)
Hash identifier: iMKf+PfM4yWU4mQShq8jkveSKQ88zxCM7YH9T3E8U/E=
Subject key identifier: 96:F8:3C:74:65:82:30:1B:ED:55:6A:6F:6B:B5:03:97:F7:95:8B:95
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 03D52787
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lvg8dGWCMBvtVWpva7UDl_eVi5U.roa
Signing time: Mon 04 Apr 2022 08:43:02 +0000
ROA not before: Mon 04 Apr 2022 08:43:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 185.126.80.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.158.0/23 maxlen: 24
185.108.206.0/24 maxlen: 24
185.194.178.0/24 maxlen: 24
185.36.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64300935 (0x3d52787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 4 08:43:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96f83c746582301bed556a6f6bb50397f7958b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:13:ca:7c:1c:ad:eb:3f:b2:09:9f:94:b0:
e6:75:09:5e:36:2e:9a:74:5c:8e:13:61:1c:87:f7:
6b:d5:d2:a1:e2:66:30:3f:9f:34:14:db:c7:e6:6d:
b5:df:f2:b2:5c:bc:34:9f:42:2b:46:42:87:99:26:
e9:93:c4:44:6f:60:5d:aa:f0:a3:69:1f:11:4c:f0:
de:30:a9:d6:ca:19:32:eb:b6:1b:cf:ae:d0:ef:90:
19:d6:3e:92:88:ce:58:af:d9:b4:a8:d3:7f:a5:1a:
ad:49:86:c6:8a:b6:51:86:16:76:80:dc:e0:ae:5d:
93:d1:65:af:51:1b:7e:41:55:5f:17:00:7e:8b:24:
54:f4:fe:e6:22:76:dd:70:29:c9:b7:90:11:c5:5f:
de:cf:ef:09:59:61:7f:0f:4b:49:f8:08:d0:1f:e1:
aa:e9:fb:12:53:36:7b:e6:4f:f6:0b:1b:c7:2d:4d:
a8:5e:4a:89:92:55:1c:2b:b5:fe:85:6a:e5:63:6f:
3c:f8:e1:21:51:78:f8:45:37:3c:4d:da:08:6d:cc:
57:94:db:be:89:4f:6e:3b:ba:c7:4c:62:68:68:6d:
91:7a:a2:b3:02:6f:e8:d8:07:d8:37:94:c5:a0:5c:
3a:10:20:e6:52:e0:39:36:f5:22:68:1b:31:ee:1a:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F8:3C:74:65:82:30:1B:ED:55:6A:6F:6B:B5:03:97:F7:95:8B:95
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lvg8dGWCMBvtVWpva7UDl_eVi5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.207.0/24
185.108.206.0/24
185.126.80.0/24
185.194.178.0/24
185.199.151.0/24
185.199.158.0/23
Signature Algorithm: sha256WithRSAEncryption
92:03:b6:9c:6a:0a:6a:9c:44:4c:be:6e:e9:f0:e8:42:30:8d:
7a:3c:9b:8e:67:91:79:c0:74:72:db:c8:bb:fb:dc:d2:92:b4:
ad:9d:28:b9:e7:9d:c4:5e:49:6a:69:83:d2:22:95:1f:37:e0:
18:e7:60:8a:94:af:df:44:c5:aa:26:b8:f2:fe:97:b0:1d:5f:
d5:a1:94:4a:28:82:0d:28:18:f8:5e:c0:9d:ab:d1:49:09:77:
20:c7:33:da:9c:a1:71:9d:33:47:62:23:53:54:96:b3:76:00:
0a:e3:67:15:c3:44:2d:a0:5f:b1:5b:a2:83:32:3f:d5:35:c1:
2f:b5:da:8c:3c:81:5a:da:16:5a:9f:22:31:ef:73:c0:93:fc:
f7:72:1f:2b:51:3a:4b:97:88:77:19:8f:2b:6d:85:52:b4:a2:
5c:40:c0:5e:4f:09:51:88:77:59:1b:9e:93:85:b2:61:d3:fe:
fb:21:09:fc:09:72:bb:fb:65:99:e4:a3:20:5a:63:b6:9f:e6:
43:3f:ff:a1:16:d4:32:e7:70:9e:8e:99:5e:f7:b1:74:8e:a3:
a8:1e:cd:b4:80:b7:24:68:c0:15:f1:b3:93:77:b5:69:89:d2:
fb:a3:e9:9f:69:fc:47:b4:9e:77:9b:e4:b4:dd:36:b9:5e:86:
0c:a0:11:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org