Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/0yQxomjYl-VudRWMs83arBriNB8.roa
File: 0yQxomjYl-VudRWMs83arBriNB8.roa (raw, json)
Hash identifier: dLofVELuLLTmTSZ3jDNTZDB5xhGJoMYI4XJhrUSDzc4=
Subject key identifier: D3:24:31:A2:68:D8:97:E5:6E:75:15:8C:B3:CD:DA:AC:1A:E2:34:1F
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 018240E9D855EDDECAF4A0760D1686D6F558
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/0yQxomjYl-VudRWMs83arBriNB8.roa
Signing time: Wed 27 Jul 2022 18:27:23 +0000
ROA not before: Wed 27 Jul 2022 18:27:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 109.246.0.0/17 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:40:e9:d8:55:ed:de:ca:f4:a0:76:0d:16:86:d6:f5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Jul 27 18:27:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d32431a268d897e56e75158cb3cddaac1ae2341f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:18:f8:3f:eb:a6:6e:49:b2:d8:23:fd:a2:
ed:c8:a3:c6:73:e7:b5:af:b4:5b:2e:46:64:3d:7e:
61:8c:62:36:7e:aa:1f:df:b2:15:ee:0b:75:bc:1c:
07:c1:36:2c:ad:40:19:63:dd:98:4b:86:b4:e5:89:
a0:6a:07:fd:1b:0e:9f:31:8a:24:6d:4a:00:0c:49:
2f:3b:81:10:02:14:ad:39:ea:25:8c:a1:d9:31:a0:
fd:b9:7b:04:6e:d4:f5:c9:26:44:ce:ec:5c:27:65:
e3:9d:ea:61:d2:4e:48:2b:cd:69:d4:bb:26:91:f3:
0b:b9:62:43:b3:de:1e:e1:6d:75:9b:33:f9:6a:8b:
31:72:4c:f1:56:6f:91:93:2e:f9:4d:e5:91:2d:c0:
b0:52:d9:92:f1:e6:00:dc:36:fd:39:b2:78:ab:83:
f5:fa:a5:64:85:3c:86:12:19:10:99:53:8d:9d:ab:
f5:d5:a4:48:51:49:29:ec:6a:d2:ed:06:35:03:4f:
ed:cb:5b:63:04:d6:d5:c1:4b:23:97:75:c4:5e:f1:
4d:1b:01:d8:43:09:ac:96:d9:1b:44:76:d4:18:65:
86:71:a9:71:08:f8:48:4a:4d:16:f1:bb:8d:c9:14:
77:4b:ab:a3:3d:2a:2e:b3:fd:b6:0d:68:93:3b:11:
36:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:24:31:A2:68:D8:97:E5:6E:75:15:8C:B3:CD:DA:AC:1A:E2:34:1F
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/0yQxomjYl-VudRWMs83arBriNB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.246.0.0/17
Signature Algorithm: sha256WithRSAEncryption
5a:66:5e:14:74:72:a1:d7:85:1e:34:4c:55:b8:38:63:fa:33:
f8:07:20:ab:10:10:1b:2e:c5:02:6a:a1:af:8a:e6:d9:dc:4f:
09:01:b3:e3:00:59:af:90:eb:99:aa:f2:6b:a6:5e:1b:17:d4:
2e:83:a6:5a:62:18:7b:51:d0:01:12:a4:8e:a4:e3:ea:3f:0a:
d6:75:76:3e:2a:a9:6c:ad:27:6e:6d:07:73:a7:cc:5b:1b:07:
5b:95:12:81:b2:7f:46:bf:ed:c9:8f:fd:32:62:80:83:38:d7:
cd:7e:8e:b1:2b:4e:b7:ae:15:ad:d7:ef:63:e9:f0:fc:68:14:
ae:22:47:d8:51:20:10:86:1e:94:e4:fa:be:ec:cc:5a:35:cd:
50:26:48:08:57:73:cd:65:11:9f:bd:fa:49:9a:f2:a3:4f:1f:
4d:49:21:c5:65:45:3a:18:a1:fe:11:83:96:23:0b:d7:81:21:
20:f6:65:c4:5b:d3:59:bc:8f:b7:4c:07:15:90:8e:3c:8a:aa:
33:d8:a7:d8:98:6b:07:8d:94:d2:88:5e:0c:0c:b1:26:34:41:
48:84:6d:9c:5e:bf:fb:41:b3:a1:58:c6:5a:08:cd:25:b3:6d:
62:3d:df:9d:eb:8e:ed:4a:2a:53:05:80:ab:aa:03:89:55:1c:
c5:95:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:02 2024 by rpki-client on console-ams.rpki-client.org