Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/kevdJl_g7dL2dZ5BJpD9JdzbwVA.roa
File: kevdJl_g7dL2dZ5BJpD9JdzbwVA.roa (raw, json)
Hash identifier: 4o1p3SWOdk/2rBxAr9zBpvOh/OTvu/hP8euOTx463b4=
Subject key identifier: 91:EB:DD:26:5F:E0:ED:D2:F6:75:9E:41:26:90:FD:25:DC:DB:C1:50
Certificate issuer: /CN=839d363b28f1c9084e1c1986876bb409b79a138c
Certificate serial: 032C
Authority key identifier: 83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/kevdJl_g7dL2dZ5BJpD9JdzbwVA.roa
Signing time: Sat 29 Jan 2022 19:34:52 +0000
ROA not before: Sat 29 Jan 2022 19:34:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 94.45.183.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839d363b28f1c9084e1c1986876bb409b79a138c
Validity
Not Before: Jan 29 19:34:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91ebdd265fe0edd2f6759e412690fd25dcdbc150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:c3:ba:eb:38:d6:ea:94:e5:73:a5:15:9b:
f5:81:94:29:77:44:ac:90:4e:da:d6:29:47:e4:f7:
8e:04:bd:c0:bd:f1:51:ca:53:69:9c:d4:5d:b9:20:
a6:f1:88:33:5d:2b:99:1f:cb:2a:46:4c:50:45:36:
4f:5c:64:3a:5e:20:6f:50:4b:d6:a5:c0:42:ec:99:
0d:21:c0:0e:d8:26:98:50:4f:72:f7:4c:9a:0c:57:
a2:7b:be:ef:6f:4c:72:31:13:36:dc:ea:f9:8d:75:
42:ce:00:2d:c2:0b:e0:24:2a:55:75:43:3c:83:67:
2e:dd:0a:e8:d7:21:ff:8b:c0:28:3a:7b:f7:d9:19:
39:0a:f6:58:3b:ec:f7:14:86:bc:cb:0b:c6:bc:ae:
ae:00:80:fa:88:7d:93:d4:8d:00:c7:bb:52:fb:ed:
c6:63:b4:f7:5a:c7:55:79:ec:88:64:2e:13:9a:9e:
cd:9c:c4:61:d9:78:09:e5:a8:32:58:f8:ce:2f:36:
ae:22:92:79:4d:7a:4e:88:b3:63:cf:ae:59:20:9e:
9d:64:11:cf:1b:5b:e9:5f:4f:67:d9:38:5d:f8:26:
5b:95:75:ef:72:90:8f:05:c3:f1:36:ed:09:f7:0a:
fd:12:6d:aa:54:84:c2:22:1c:29:06:eb:26:ff:c8:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EB:DD:26:5F:E0:ED:D2:F6:75:9E:41:26:90:FD:25:DC:DB:C1:50
X509v3 Authority Key Identifier:
keyid:83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/kevdJl_g7dL2dZ5BJpD9JdzbwVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.183.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f6:28:b4:4e:23:a6:eb:d1:fa:3b:83:49:31:0e:4f:e5:b3:
4b:32:d6:67:d5:0f:90:c0:7a:16:13:0c:6d:cd:0d:ba:54:f7:
2a:77:86:dd:8e:14:a2:98:f9:11:40:5f:01:ca:93:9b:96:c3:
57:f7:3e:f9:36:26:e7:cb:49:f4:28:a9:05:75:19:3f:22:ca:
a4:f6:67:d6:c8:96:ef:b7:60:15:13:a9:b0:bc:27:34:e9:a0:
4c:32:df:6b:04:42:63:33:58:fc:da:9d:26:a2:e0:cc:c2:76:
4b:a0:09:62:3e:27:5d:d5:a1:2a:4a:5f:d5:3c:ca:04:5e:47:
3f:ab:28:fb:67:86:93:99:66:1c:ff:44:9f:ba:91:dc:c4:49:
23:aa:32:ca:4f:cc:4b:5b:a2:aa:5b:5a:b7:5e:5d:b7:8c:8b:
41:88:0a:c5:1c:8e:85:1e:cc:66:da:ec:4b:98:71:41:40:23:
d7:74:7c:af:79:a4:15:54:a2:a5:f1:2d:62:d8:4f:12:fb:21:
58:d8:29:98:60:7e:36:f8:9f:7c:f4:5d:0e:66:75:91:33:ef:
bd:09:39:c0:2b:22:59:bf:f2:fc:57:ec:88:9a:01:28:b3:c1:
eb:60:3e:59:63:64:07:81:49:24:ad:ed:f1:c7:b9:96:e2:27:
9f:5e:50:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:35 2023 by rpki-client on console-ams.rpki-client.org