Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/r6wGa_kwon7YgyD7Q4AnXFiapeA.roa
File: r6wGa_kwon7YgyD7Q4AnXFiapeA.roa (raw, json)
Hash identifier: dETnMsINTKVtTEEqjeFZMGDGA0If6LN3y+4pM2+hUaM=
Subject key identifier: AF:AC:06:6B:F9:30:A2:7E:D8:83:20:FB:43:80:27:5C:58:9A:A5:E0
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0182A624F1069BECDF702327A1D608851748
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/r6wGa_kwon7YgyD7Q4AnXFiapeA.roa
Signing time: Tue 16 Aug 2022 10:13:35 +0000
ROA not before: Tue 16 Aug 2022 10:13:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.199.156.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.214.111.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:24:f1:06:9b:ec:df:70:23:27:a1:d6:08:85:17:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 16 10:13:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afac066bf930a27ed88320fb4380275c589aa5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:16:b0:84:bb:a9:0f:03:33:e8:1b:9e:8a:
8c:fe:46:94:3a:5b:b1:b4:05:e0:5c:a6:1f:63:24:
38:a8:23:51:4d:c9:d6:05:66:d3:9d:61:14:a2:2d:
df:2c:71:b0:46:e6:25:bc:41:3a:a6:30:56:fb:7f:
5c:14:3a:68:4a:64:62:a0:a0:26:6f:02:37:1e:69:
1a:58:7f:ba:57:c2:31:38:77:9d:02:38:9d:64:08:
65:67:9e:47:13:d7:76:41:7d:47:d2:f2:6a:25:6a:
95:a1:e5:e2:e9:9c:99:a2:f6:d8:00:0a:f0:0e:e6:
9f:c9:71:db:09:87:cb:8d:df:22:49:3e:0b:27:35:
12:10:b2:67:aa:b0:81:42:30:85:0b:00:64:13:2c:
12:8e:70:52:d4:b3:54:23:66:36:c0:42:76:3a:13:
2e:88:d9:a0:79:bf:85:a2:ce:7b:a9:ef:e7:00:a6:
fe:69:8c:53:9f:08:f0:6c:d2:5b:a1:58:64:1d:26:
51:cd:92:85:65:82:40:12:48:85:06:57:60:55:92:
79:42:27:49:0c:86:9b:63:3c:0a:3e:3b:05:dc:05:
9d:a7:a2:6a:ed:60:42:22:82:64:b2:72:e5:03:8f:
56:d8:ec:76:c3:99:33:f2:2a:25:9e:24:84:36:82:
2c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AC:06:6B:F9:30:A2:7E:D8:83:20:FB:43:80:27:5C:58:9A:A5:E0
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/r6wGa_kwon7YgyD7Q4AnXFiapeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.156.0/24
185.214.111.0/24
185.228.72.0/24
185.228.75.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:78:c1:f1:4e:72:c7:cb:b4:2a:af:05:8a:45:cf:2e:b0:43:
23:5d:39:7c:d3:3f:0a:36:4d:cd:a6:ff:95:b3:c6:a7:07:af:
c9:6a:ce:38:36:b4:6f:3b:10:9d:37:fd:e3:dc:cc:c4:5f:f1:
6f:d7:9d:82:87:8d:08:39:66:d8:45:ac:d6:8d:ff:72:ee:e2:
d1:f1:c8:77:06:0f:be:cf:c5:cc:31:45:ea:80:e8:e0:b3:11:
a6:6d:ad:67:b5:18:ce:02:59:be:c7:47:73:bb:0b:45:9c:49:
0b:c5:46:05:aa:37:92:74:98:a5:39:ca:13:8e:4f:03:1f:dd:
fc:4c:1a:51:3b:c7:65:14:82:4a:19:42:91:16:56:7b:64:4f:
05:76:b0:89:a4:f5:61:92:0e:18:e4:bb:f5:9f:2f:4f:60:72:
b3:d7:aa:8f:8e:c4:91:0d:92:9f:da:84:c3:f4:d4:c2:3f:96:
e8:ee:59:b7:c4:1f:02:46:1a:8e:f9:f5:42:42:9c:14:37:f8:
39:e2:a2:27:46:3d:f6:17:12:5f:aa:5a:32:b2:a2:7f:df:e9:
2f:88:00:bb:60:c6:9f:a6:4b:a2:76:7f:19:df:05:98:15:5a:
3a:d0:15:48:2a:b6:f1:7a:42:9b:f5:3c:e5:b4:95:e4:10:33:
51:e5:5f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:27 2023 by rpki-client on console-fra.rpki-client.org