Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/W8cMXT3VmvMxgwMCa4aFy-AmoL4.roa
File: W8cMXT3VmvMxgwMCa4aFy-AmoL4.roa (raw, json)
Hash identifier: PIkrCizIet2zdhMqCE2yRKZnWwDd76mXxqpk6qU5Z94=
Subject key identifier: 5B:C7:0C:5D:3D:D5:9A:F3:31:83:03:02:6B:86:85:CB:E0:26:A0:BE
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 049A2EB3
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/W8cMXT3VmvMxgwMCa4aFy-AmoL4.roa
Signing time: Thu 03 Feb 2022 17:15:20 +0000
ROA not before: Thu 03 Feb 2022 17:15:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41280
IP address blocks: 85.187.213.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77213363 (0x49a2eb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Feb 3 17:15:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bc70c5d3dd59af3318303026b8685cbe026a0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:e4:ee:a8:92:db:1e:f8:4d:92:47:4f:1a:
39:77:1b:4e:18:5f:d9:ce:a9:4c:7a:f9:63:91:d4:
2a:2d:ee:b0:52:ec:a0:cf:89:ca:b0:22:f2:0f:7b:
fa:1d:cc:f2:0d:01:a6:ce:a6:62:73:77:86:b0:14:
ac:f1:9b:27:de:06:4b:54:c3:f8:f1:cc:23:70:9c:
f9:e4:b2:db:db:8f:0a:3c:80:91:df:ed:7d:0e:56:
cc:74:a4:de:c2:8d:83:e5:06:9f:77:a8:04:d3:ec:
6d:9d:31:54:00:6a:47:43:17:b1:0d:c9:93:5b:2a:
39:8a:9d:6c:e9:41:21:ff:16:05:b6:1f:4e:2c:7c:
b2:fc:cb:7f:19:e6:48:67:f5:b3:41:36:e6:79:56:
51:5c:6a:c8:5a:3d:1c:84:3b:7d:55:86:a7:88:b3:
1c:f0:52:95:29:32:d9:8d:18:ce:e6:3c:27:d6:9b:
e6:0d:b5:9d:68:e9:cf:33:4b:7d:fe:6d:c9:8c:f2:
69:8c:30:8a:81:2f:22:b5:e7:68:ea:8b:75:43:d1:
ce:8d:f8:a4:de:2d:15:f1:0e:f8:9d:da:51:58:30:
3d:20:c3:8e:f4:7d:d8:a1:0d:ed:2d:d1:94:b4:a5:
5d:65:87:67:87:c4:24:32:8d:9d:c5:71:b6:37:1d:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C7:0C:5D:3D:D5:9A:F3:31:83:03:02:6B:86:85:CB:E0:26:A0:BE
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/W8cMXT3VmvMxgwMCa4aFy-AmoL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.213.0/24
Signature Algorithm: sha256WithRSAEncryption
25:7d:b6:a8:59:8e:fe:da:88:9f:a9:0c:98:d2:bd:56:4b:6a:
49:02:aa:59:c1:c3:45:f7:72:08:07:85:b7:54:a9:e5:62:48:
27:f8:27:9e:fd:5a:95:b4:70:76:59:d4:78:2f:b4:11:82:a5:
5e:5a:39:db:f6:98:54:33:96:22:fb:1b:39:09:3e:bb:69:30:
28:ef:69:3c:4c:08:e4:d9:66:eb:0c:5c:06:25:fd:cb:88:b4:
43:a4:0d:e2:0a:c5:40:d6:62:c4:f2:37:53:ba:27:1c:a6:6d:
d4:cc:ef:53:8c:77:0b:34:c4:16:15:b3:82:57:80:2c:2e:e2:
a3:0f:0c:0c:e3:21:7a:4c:b8:ec:ac:8b:be:96:c7:04:ec:d0:
4a:52:88:c3:a3:41:06:5b:f0:eb:24:e3:5c:45:2f:eb:d0:96:
30:8c:e0:eb:79:31:9d:b8:1b:68:5a:6e:39:47:88:8b:87:ad:
08:07:0a:d3:1d:00:78:51:eb:dc:c2:4e:65:52:6a:e8:df:c2:
64:40:6a:6a:c4:5a:93:60:fd:c8:83:29:a5:52:41:f7:b9:37:
ec:fd:1e:45:59:d0:68:e5:a2:68:36:d3:08:51:77:1f:0b:98:
15:5f:08:12:b9:95:13:eb:b5:d6:8d:b6:bf:15:27:a5:56:b0:
56:58:f3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:42 2024 by rpki-client on console-ams.rpki-client.org