Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/uCOtX9Ekl0_GxbH_lk9r1lwpW0o.roa
File: uCOtX9Ekl0_GxbH_lk9r1lwpW0o.roa (raw, json)
Hash identifier: asr1uE55S1SJppWRySH98EESkvlSym3/3/Cwrq0RadU=
Subject key identifier: B8:23:AD:5F:D1:24:97:4F:C6:C5:B1:FF:96:4F:6B:D6:5C:29:5B:4A
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 0566AFB8
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/uCOtX9Ekl0_GxbH_lk9r1lwpW0o.roa
Signing time: Sat 01 Jan 2022 11:04:37 +0000
ROA not before: Sat 01 Jan 2022 11:04:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62976
IP address blocks: 185.215.116.0/22 maxlen: 22
185.209.92.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90615736 (0x566afb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jan 1 11:04:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b823ad5fd124974fc6c5b1ff964f6bd65c295b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:14:35:12:ed:42:ad:8a:39:f3:71:27:d7:
ea:9d:a1:a5:82:af:14:7d:fa:1c:71:26:7a:b9:6c:
94:79:12:11:e4:a7:f6:b9:df:b0:5a:73:0c:5e:54:
30:8d:97:0a:5d:eb:be:b2:f2:df:c0:18:68:a1:28:
79:e0:54:5f:74:c3:d1:b5:cf:3b:90:28:e0:54:41:
79:0e:e0:20:5d:60:a9:28:95:65:d8:4f:54:47:3a:
54:da:4d:5f:0b:37:00:d3:9f:43:b8:69:df:50:81:
e3:26:43:47:be:85:e7:9b:72:0c:49:f7:23:af:3c:
9a:5c:fc:d3:24:1a:5c:8f:01:03:e8:2c:a6:1d:3c:
fb:50:02:c3:28:bf:9d:6b:3d:10:36:4b:31:a7:e6:
18:13:81:88:5d:a0:6f:14:e3:8f:11:98:71:f8:9c:
58:cb:35:b9:72:02:25:60:a7:f3:51:ee:e4:f2:78:
c5:56:94:5e:ed:a8:87:f4:37:51:af:77:0a:96:2c:
12:f3:ce:a0:54:c6:b5:95:60:25:e0:8e:e8:07:12:
55:81:5e:98:77:39:30:e3:ea:f5:40:3b:2b:05:a7:
38:4f:27:10:86:fc:7e:cc:c3:a0:44:4a:29:c2:cc:
f6:b5:d3:30:b1:5c:8b:1d:ba:bf:2a:60:f8:59:c3:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:23:AD:5F:D1:24:97:4F:C6:C5:B1:FF:96:4F:6B:D6:5C:29:5B:4A
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/uCOtX9Ekl0_GxbH_lk9r1lwpW0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.92.0/22
185.215.116.0/22
Signature Algorithm: sha256WithRSAEncryption
90:06:90:4c:f7:13:ca:15:a7:cd:5b:ca:50:08:2e:c8:11:c3:
86:38:b8:08:1b:9e:a9:73:3c:24:78:7b:7e:33:82:f7:19:44:
91:f7:db:b0:6a:bd:04:fa:ec:2c:3e:a2:63:e4:12:4d:70:aa:
9d:fa:fe:1a:ba:e8:29:c2:85:74:fd:c9:95:79:4f:55:52:42:
ec:bc:6a:ae:f9:4d:0d:7f:08:77:3a:32:9c:0f:22:af:49:f0:
b2:72:4a:83:42:eb:b4:c7:34:62:c6:40:a9:30:95:82:99:bd:
1b:aa:f7:69:cb:84:6f:5f:60:bb:1d:3f:75:cc:47:fb:00:fc:
83:70:09:fe:53:c6:78:d7:8b:30:2e:3c:e7:3f:73:a6:59:a7:
4c:3c:8a:e8:4d:9a:3d:1c:a2:51:5b:8e:09:7b:15:4e:85:57:
10:a4:6b:2b:32:9d:14:0a:48:c2:74:41:ee:60:19:19:29:54:
b0:d7:1f:44:86:95:8f:3a:46:ef:d1:f6:d7:55:8d:c1:be:da:
97:1d:29:ee:60:9f:ce:26:82:32:38:cc:5e:71:5c:ed:53:2c:
57:53:12:23:0e:cc:bf:3e:e7:28:a9:66:85:61:88:80:28:3c:
33:60:c1:ff:99:04:16:ba:1a:3a:48:30:4e:af:c4:ed:36:a9:
01:02:5e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:14 2024 by rpki-client on console-ams.rpki-client.org