Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/xiGuqHjjceGek-FN924iCKU1lGQ.roa
File: xiGuqHjjceGek-FN924iCKU1lGQ.roa (raw, json)
Hash identifier: LGQykUDz4WOeUlBUMpvHp7g2K39K7pRCoE2Jp5itnyY=
Subject key identifier: C6:21:AE:A8:78:E3:71:E1:9E:93:E1:4D:F7:6E:22:08:A5:35:94:64
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 03D86400
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/xiGuqHjjceGek-FN924iCKU1lGQ.roa
Signing time: Tue 05 Apr 2022 08:08:42 +0000
ROA not before: Tue 05 Apr 2022 08:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.228.73.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64513024 (0x3d86400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 5 08:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c621aea878e371e19e93e14df76e2208a5359464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:66:86:00:21:72:cf:7e:19:e6:4d:f5:46:8a:
85:06:31:e5:7d:91:57:d6:08:47:c1:e6:8e:bf:76:
71:1a:b1:e7:ae:91:99:97:fe:e4:d1:6f:62:06:f5:
fb:85:ca:a6:72:ed:d1:08:81:6a:21:9b:90:f0:a9:
d3:93:da:d2:87:b9:c0:bb:6d:89:26:71:d7:21:5f:
82:20:72:bb:f8:90:46:0a:8f:dd:20:7e:4f:67:1f:
3d:e6:fe:83:85:a9:e0:c5:fe:be:83:67:d2:27:63:
96:a7:c6:f9:24:77:12:6c:91:c1:b3:24:78:0d:ff:
bb:c7:21:a1:4f:43:87:85:bf:ee:5a:05:cd:cd:f9:
9b:e6:7d:b5:43:dc:bc:b4:12:e4:5d:36:33:cc:b4:
7f:3d:ec:13:4b:c5:c5:89:35:27:ae:9f:cf:f9:33:
f6:15:bc:32:66:bc:31:c6:bb:8b:f6:f8:4a:b1:39:
b0:f4:f1:cc:c9:92:c0:18:0e:fb:e6:fd:7c:6b:0d:
a7:3a:67:04:6c:38:5f:c3:1b:8a:36:87:aa:a9:b7:
f6:df:34:3f:7e:ea:b6:f9:0f:da:2e:08:14:cf:c6:
c1:b7:ac:a2:7e:23:cc:87:2f:2c:f9:7c:09:33:5e:
92:83:ea:4d:ca:7d:d8:12:0e:c0:8c:19:2f:10:37:
39:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:21:AE:A8:78:E3:71:E1:9E:93:E1:4D:F7:6E:22:08:A5:35:94:64
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/xiGuqHjjceGek-FN924iCKU1lGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.73.0/24
Signature Algorithm: sha256WithRSAEncryption
11:26:91:e8:2e:93:35:2e:b9:48:8b:9e:19:6e:17:d0:ce:48:
98:16:c9:32:26:a1:30:87:38:9b:4e:61:f4:a3:88:bf:1f:0c:
44:8b:90:41:95:af:d3:4b:ad:ba:da:bd:a2:ac:1f:6f:da:ec:
fa:e9:9c:b0:db:ff:b0:66:37:98:40:82:5c:04:10:7d:22:3a:
6c:4c:a3:dc:6e:e0:96:51:99:52:d7:38:3f:b1:13:70:a1:83:
cd:06:ea:d7:4f:24:47:52:88:ad:9a:5a:07:53:56:14:2a:c8:
9d:78:60:f9:61:2a:a2:05:da:cc:8d:aa:2f:3b:b6:76:3a:83:
ae:81:a3:a3:70:84:6a:ad:8d:e1:e6:10:5d:cc:28:af:d2:ef:
c2:0a:42:11:e1:49:d8:c4:f0:6c:ec:dd:2e:8f:00:00:93:ac:
02:d4:d8:e6:e3:8b:ec:30:a1:a9:92:b8:23:e3:eb:cd:cd:fe:
06:42:6f:54:9e:94:c5:31:d8:73:64:19:b6:17:78:0f:26:28:
59:65:7c:6e:a4:38:b9:18:8d:7c:0b:7e:82:68:06:8a:1d:7c:
a9:4d:c3:b2:3a:95:0d:d2:03:41:fa:bf:cc:1b:1c:07:e9:98:
a6:94:07:eb:09:f8:53:9b:f7:d6:d2:0e:dd:52:ab:5d:c7:14:
e4:2d:ec:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:12 2023 by rpki-client on console-ams.rpki-client.org