Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/S-FTSq2MZpT21GxR2wZ93xKYUi8.roa
File: S-FTSq2MZpT21GxR2wZ93xKYUi8.roa (raw, json)
Hash identifier: gCth+DHRkYZBAo2gc5o2kHzuB6eINGphRHynDJi2WBY=
Subject key identifier: 4B:E1:53:4A:AD:8C:66:94:F6:D4:6C:51:DB:06:7D:DF:12:98:52:2F
Certificate issuer: /CN=26862926a857491554bee94951bb5fa670207d9e
Certificate serial: 018848690FD83ECF5538B701FCA9031683BB
Authority key identifier: 26:86:29:26:A8:57:49:15:54:BE:E9:49:51:BB:5F:A6:70:20:7D:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/S-FTSq2MZpT21GxR2wZ93xKYUi8.roa
Signing time: Tue 23 May 2023 11:40:24 +0000
ROA not before: Tue 23 May 2023 11:40:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200736
IP address blocks: 185.234.58.0/24 maxlen: 24
185.234.57.0/24 maxlen: 24
185.234.56.0/24 maxlen: 24
185.234.59.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:69:0f:d8:3e:cf:55:38:b7:01:fc:a9:03:16:83:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26862926a857491554bee94951bb5fa670207d9e
Validity
Not Before: May 23 11:40:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4be1534aad8c6694f6d46c51db067ddf1298522f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:da:e4:24:97:1a:74:86:a3:92:e4:88:9d:
ec:b3:42:b5:93:16:5b:1a:52:ad:c5:6d:35:b0:ba:
e0:7e:fe:62:ee:38:ca:5d:a4:30:d3:7a:5f:39:29:
0f:03:7c:0e:82:6b:44:ef:2d:b5:a1:31:7d:f7:62:
ae:e4:25:98:49:ff:9a:99:58:cf:d9:ec:a8:06:86:
87:ec:46:5c:9c:1b:0b:fc:e8:02:54:86:71:4e:d1:
16:a1:64:f8:e0:ed:aa:ed:de:dc:4b:91:59:3a:59:
5f:94:7e:a9:25:5d:bc:8c:13:a3:8f:fc:d5:41:b6:
36:10:f1:3c:12:fa:a2:2b:ba:51:00:7a:f3:51:54:
b5:c3:2f:37:4b:1e:6e:79:45:96:54:67:f9:70:b1:
da:46:46:33:40:21:8e:c4:46:a3:86:47:a9:f1:f4:
71:73:cf:54:f6:3b:33:95:85:7f:cf:72:72:bb:df:
af:50:eb:99:6a:0b:b9:5d:c8:3c:d2:9e:33:8c:6d:
0e:5b:42:ca:b7:3e:82:3f:4c:8b:98:a4:8e:23:d8:
60:c5:a9:d7:b9:f9:a4:c9:19:c1:b0:e8:48:d4:90:
b2:fd:1a:4f:4c:d9:86:61:58:a9:d1:12:04:01:c6:
a1:e8:e4:fb:1f:fa:c1:67:73:bc:98:d0:53:fa:b1:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E1:53:4A:AD:8C:66:94:F6:D4:6C:51:DB:06:7D:DF:12:98:52:2F
X509v3 Authority Key Identifier:
keyid:26:86:29:26:A8:57:49:15:54:BE:E9:49:51:BB:5F:A6:70:20:7D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/S-FTSq2MZpT21GxR2wZ93xKYUi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.56.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:83:e0:0c:38:ab:7d:e9:84:79:69:8e:ec:37:ec:3c:e4:bc:
fe:60:4c:fb:c7:d2:0c:9f:cd:90:36:8a:8a:9b:bc:10:46:e4:
18:a5:61:63:8f:45:d4:a9:72:d7:d8:f1:2a:59:f0:16:23:e7:
31:47:cf:b3:96:df:64:b7:2f:3b:4c:d9:1f:79:68:d5:92:f1:
61:4f:b1:c3:93:1c:45:42:d5:dd:e0:bc:e2:2f:f4:c2:90:88:
3e:a1:09:77:58:94:27:5c:60:28:2c:2b:3b:a3:8e:14:2a:eb:
05:8d:bd:16:77:15:42:b9:e9:91:9d:ae:ca:c5:a5:67:ba:50:
e5:7e:85:b2:31:67:4e:21:df:34:d5:a9:e2:6f:fc:1f:5d:61:
02:4a:7e:c3:52:58:ca:85:8c:fc:9b:27:57:4f:9a:f7:a4:05:
95:b6:46:11:8a:59:be:be:5e:b9:1e:76:d3:72:37:67:58:15:
c1:fd:3e:3f:65:a3:ea:d6:12:9f:30:81:ae:8f:3d:f9:a2:4d:
86:6e:b7:a1:9e:34:8e:04:a9:5a:93:15:f8:44:2b:2e:b3:87:
6b:8c:ce:a0:22:15:f3:f5:2a:55:de:86:e7:37:be:22:5b:db:
33:8d:86:41:ea:ca:4c:41:4e:df:4a:96:d2:ae:f4:50:ce:f7:
77:b6:ba:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:20 2024 by rpki-client on console-fra.rpki-client.org