Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/zWxNuHnBsuEjyfZDey12Rz8NKVM.roa
File: zWxNuHnBsuEjyfZDey12Rz8NKVM.roa (raw, json)
Hash identifier: 7hOAkW4YCysa6VsCfaoM4z0LUkWwPovxP8g9D+gz0n8=
Subject key identifier: CD:6C:4D:B8:79:C1:B2:E1:23:C9:F6:43:7B:2D:76:47:3F:0D:29:53
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01856DAF6E33ADE85BF54FDF9F4D1411EF28
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/zWxNuHnBsuEjyfZDey12Rz8NKVM.roa
Signing time: Sun 01 Jan 2023 14:14:51 +0000
ROA not before: Sun 01 Jan 2023 14:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 93.185.163.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:6e:33:ad:e8:5b:f5:4f:df:9f:4d:14:11:ef:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 14:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd6c4db879c1b2e123c9f6437b2d76473f0d2953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:ec:40:e0:ce:c3:08:96:ec:8d:eb:e1:fd:
db:0a:02:51:44:b9:90:c6:ba:a7:f9:52:cb:b0:27:
b5:f5:95:55:3b:b6:d9:34:f6:e1:39:ba:98:cc:fd:
ae:bc:1a:14:da:78:84:a9:c9:61:b8:34:6d:7a:58:
2b:e1:4e:a5:7a:7f:5c:38:63:56:a0:bd:1a:5c:cf:
f7:35:29:ea:61:91:c5:f4:2a:6b:4b:22:c9:f9:a6:
ad:f7:24:79:db:15:ce:5a:a9:a6:aa:51:e9:8e:51:
0e:38:33:73:92:1e:d3:41:37:77:f2:f5:74:44:92:
b7:69:e0:3e:3a:5a:e2:e9:6d:81:de:94:94:85:b7:
e4:f0:93:53:24:72:39:50:1c:3f:9b:c2:32:ca:86:
5b:72:e5:ea:a9:71:a7:73:41:1d:07:b6:10:ad:fa:
ca:90:b5:0d:b7:f8:9c:f8:11:d1:1e:82:4c:58:1f:
4c:79:90:37:c7:df:17:bf:04:ca:8d:cb:f9:20:f4:
38:ca:f6:7d:5a:d4:67:40:3c:67:38:c3:b7:0d:77:
f9:d5:35:1c:ff:55:fc:51:f5:f3:dd:91:4b:ca:bc:
63:13:55:6b:4d:12:ba:28:cb:1a:54:27:c9:d9:e2:
93:aa:b2:8f:9a:92:e5:0f:4e:f9:53:8d:d7:d1:55:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6C:4D:B8:79:C1:B2:E1:23:C9:F6:43:7B:2D:76:47:3F:0D:29:53
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/zWxNuHnBsuEjyfZDey12Rz8NKVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.163.0/24
Signature Algorithm: sha256WithRSAEncryption
30:aa:a1:16:06:91:16:51:52:f8:62:88:21:5a:4f:c3:f9:a1:
5e:ce:14:7f:a5:23:5a:55:f3:04:85:91:8a:aa:67:0b:7b:3d:
cb:fa:00:25:9a:a1:3b:a7:ec:83:1b:2c:ca:1e:ba:85:8f:9d:
21:58:b2:61:96:b4:fd:9a:1c:81:3c:d5:9f:48:7e:33:eb:61:
9e:52:be:b2:2f:21:13:cf:aa:05:ca:d4:65:58:89:25:24:46:
5c:96:dd:a4:e2:bf:40:3d:cf:99:b0:c7:6d:d7:f8:ba:ba:22:
96:3c:69:f2:6b:ec:51:09:cc:0f:f4:19:d2:ec:e1:3e:75:c6:
0a:37:2f:90:4b:8e:4e:26:e0:7f:e6:95:b9:89:c7:f1:fc:f8:
f1:a5:51:b0:75:39:a7:18:e3:55:a7:57:99:38:9a:a6:05:52:
f8:14:72:1d:28:43:bb:44:62:4e:88:e1:08:22:8d:3a:57:9f:
53:c3:41:c7:14:58:ed:68:30:cc:df:65:75:f5:ac:fc:19:9d:
65:00:7c:6f:2c:ae:c5:86:dc:71:23:b7:5a:52:59:d0:2c:1e:
4a:41:12:48:58:a2:fd:90:9f:e8:91:a0:64:28:d3:56:15:2d:
e3:7d:ff:51:ca:78:98:54:ff:9f:a2:05:cb:6d:d1:ea:c6:56:
28:2c:bb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:37 2024 by rpki-client on console-ams.rpki-client.org