Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/8ZdjWizZEVywv-FDEBEjpfsiM6E.roa
File: 8ZdjWizZEVywv-FDEBEjpfsiM6E.roa (raw, json)
Hash identifier: DKRJiAD4ysHTtGAl95406s655T/S+orYzzS4ss1eNgY=
Subject key identifier: F1:97:63:5A:2C:D9:11:5C:B0:BF:E1:43:10:11:23:A5:FB:22:33:A1
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 0182CFE82D448CD565920EE9655718B86FAB
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/8ZdjWizZEVywv-FDEBEjpfsiM6E.roa
Signing time: Wed 24 Aug 2022 12:51:15 +0000
ROA not before: Wed 24 Aug 2022 12:51:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209854
IP address blocks: 93.185.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cf:e8:2d:44:8c:d5:65:92:0e:e9:65:57:18:b8:6f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Aug 24 12:51:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f197635a2cd9115cb0bfe143101123a5fb2233a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:30:fc:7b:30:78:2f:06:eb:3e:a6:d8:fa:
56:92:9d:20:62:aa:cd:53:9e:77:95:92:51:3d:b9:
ec:52:6a:d8:74:43:dc:b0:11:52:75:5d:3d:c6:8e:
af:9d:bf:1e:50:c9:c7:b8:a1:b4:93:94:6b:22:92:
99:2e:34:6e:7e:ac:2a:61:ca:71:ab:ab:25:6a:36:
1a:53:5d:91:ba:63:74:0b:ce:1c:79:ba:cd:96:1a:
80:3b:c8:a9:c5:71:33:9d:db:57:0d:71:78:5b:f7:
8a:ba:a4:05:f5:2d:38:2d:c9:d7:04:33:56:4a:6b:
2b:bd:97:27:5a:cc:b5:b2:bc:97:cc:d5:34:7e:4d:
e2:ab:e4:63:e1:d4:f2:86:59:50:f8:eb:c3:50:e2:
47:a5:a8:f1:84:99:e5:82:79:21:63:d0:1f:fd:d6:
58:0a:97:d8:91:43:86:5b:7e:3e:94:4a:27:7f:54:
34:b0:45:a5:a2:dd:f2:64:c4:da:1d:7e:86:29:6e:
e2:1a:e6:ba:f0:f2:77:4e:b7:bb:05:a1:ff:16:72:
58:f3:01:70:e1:bc:9c:fc:0b:30:6d:1b:cf:fa:10:
7e:e7:8f:ff:00:86:37:b8:2f:ee:ee:01:3f:aa:f7:
f4:9b:c6:75:ba:e2:82:a5:09:be:61:d1:ce:bb:10:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:97:63:5A:2C:D9:11:5C:B0:BF:E1:43:10:11:23:A5:FB:22:33:A1
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/8ZdjWizZEVywv-FDEBEjpfsiM6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.162.0/24
Signature Algorithm: sha256WithRSAEncryption
14:15:95:28:f8:e3:dd:c0:63:4e:5f:fc:b1:cb:0f:ef:48:02:
40:8f:56:3b:b3:e7:4b:9e:68:81:6b:af:ef:45:12:1d:cc:99:
3c:94:29:56:27:c1:10:51:8d:95:06:94:00:41:b7:55:a5:3d:
f8:aa:1c:4f:31:f1:60:2a:9a:45:59:ba:d4:2c:41:3e:ab:10:
77:70:5e:96:9a:38:1b:03:b4:ed:7f:d0:2e:18:02:d5:6f:68:
e9:a3:88:78:3f:26:29:78:b5:af:2a:6e:4f:67:a7:7b:1e:39:
7f:6d:4c:a5:72:2f:fe:72:47:fe:37:e3:5c:d2:23:be:0f:71:
53:12:a3:97:80:94:96:f4:fd:af:fb:b3:4b:cb:b9:d8:8c:b3:
48:3d:5a:de:01:ed:75:57:ec:0b:6d:f2:8d:3f:5e:ab:d4:4c:
ee:c1:cc:0c:4f:b6:9c:df:f7:d6:0c:18:da:d2:59:c3:a0:8a:
69:2e:b1:a4:cc:a7:0d:83:04:0e:5e:75:ea:74:44:bf:db:30:
89:f6:1b:37:6b:2c:5c:51:9d:d9:a5:d6:e5:34:35:e0:16:8f:
06:e9:1b:fa:bd:1e:f6:be:02:36:80:07:96:1f:f2:e7:92:ae:
96:18:20:01:3a:5f:fb:7c:eb:d0:f5:4a:2b:75:03:ba:89:bb:
d8:3f:7e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:37 2024 by rpki-client on console-ams.rpki-client.org