Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/lM7ftTxAK0qZ9bX6oDxfR212Axo.roa
File: lM7ftTxAK0qZ9bX6oDxfR212Axo.roa (raw, json)
Hash identifier: Y2Q4wTdBxuclqsrK/eu7XVkeKBRFCOdbclSqLZBizRI=
Subject key identifier: 94:CE:DF:B5:3C:40:2B:4A:99:F5:B5:FA:A0:3C:5F:47:6D:76:03:1A
Certificate issuer: /CN=75535bade37a3d6fc380442a285e157b984ca91d
Certificate serial: 018570DE5CC61140F8D9AE4ED30B5555902B
Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/lM7ftTxAK0qZ9bX6oDxfR212Axo.roa
Signing time: Mon 02 Jan 2023 05:04:58 +0000
ROA not before: Mon 02 Jan 2023 05:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41690
IP address blocks: 188.65.120.0/21 maxlen: 24
146.0.64.0/21 maxlen: 24
195.8.214.0/23 maxlen: 24
185.223.156.0/22 maxlen: 24
2a03:d1c0::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:5c:c6:11:40:f8:d9:ae:4e:d3:0b:55:55:90:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d
Validity
Not Before: Jan 2 05:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94cedfb53c402b4a99f5b5faa03c5f476d76031a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:33:7a:e5:44:26:28:72:3a:6e:ce:e3:5a:
ac:54:ac:44:05:36:e2:f3:a8:7d:3b:bd:a3:6d:e1:
c3:b2:63:fc:dc:6d:a8:7e:d2:15:1a:e5:3a:10:8d:
99:91:b2:6e:1a:90:ca:7d:8c:8e:e1:aa:86:38:3e:
15:6f:86:6f:c4:c4:04:b0:52:45:19:34:b9:23:7a:
d5:4a:5d:04:e8:db:4d:2f:b2:39:ee:94:62:55:04:
7e:43:81:6c:8b:d1:80:33:cd:72:80:10:09:d9:ba:
d8:20:af:cf:e5:f5:f3:63:68:70:bb:44:24:ed:7a:
11:fe:3e:9e:6b:5b:a2:c1:9b:a9:51:8d:cf:96:9f:
c7:96:bf:a2:59:e0:6d:b5:ae:8b:35:26:af:84:53:
bf:4f:27:99:c9:2e:1d:c3:7e:17:f4:9c:93:fe:4a:
ef:aa:07:e2:37:e3:c8:bc:ba:12:65:a5:2f:59:33:
3a:e6:76:75:7b:f3:19:f0:78:11:39:67:39:93:46:
4c:94:d6:d6:fc:37:7e:b2:17:ce:13:37:91:e2:32:
1f:09:99:51:33:c0:e7:d4:63:a1:88:23:a8:bd:20:
67:ac:8a:91:10:6e:08:ca:2f:bd:b6:11:b1:99:b0:
28:05:61:80:10:e5:50:82:d8:af:3a:19:9c:68:d4:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CE:DF:B5:3C:40:2B:4A:99:F5:B5:FA:A0:3C:5F:47:6D:76:03:1A
X509v3 Authority Key Identifier:
keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/lM7ftTxAK0qZ9bX6oDxfR212Axo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.64.0/21
185.223.156.0/22
188.65.120.0/21
195.8.214.0/23
IPv6:
2a03:d1c0::/29
Signature Algorithm: sha256WithRSAEncryption
12:0d:1e:0a:28:1e:c9:da:d2:1f:c3:74:23:07:bd:6d:e5:ab:
07:e5:45:06:a1:05:13:86:f8:8a:66:a3:9a:77:1a:7b:83:4c:
d1:4e:dd:a9:b3:cb:50:2e:5a:f1:58:cb:53:a7:d2:6d:76:93:
eb:82:70:7d:56:04:21:e8:ec:dc:70:93:71:62:6f:12:cb:f3:
21:30:b6:3e:95:f0:75:f8:07:6d:2c:8b:ac:2d:a4:2e:ef:3a:
46:e0:e7:17:51:f9:4e:3d:3c:38:06:37:9e:d1:b5:a8:60:af:
b3:24:ca:ad:aa:fe:bc:9a:66:92:6b:76:8a:27:e9:69:bc:d2:
7e:a8:2f:a2:80:68:47:1d:f2:00:d6:02:b4:00:a4:62:cd:b6:
9f:38:4b:ac:37:f9:70:2c:8c:ea:4c:ce:0f:dd:d9:9e:5b:61:
49:86:1d:91:5b:08:43:60:e8:1a:a8:e8:76:9b:58:ca:c3:d9:
43:03:cc:2a:13:e3:15:5a:0a:4e:cf:56:40:63:3a:29:a5:e6:
19:ea:7d:a9:dc:60:4d:8e:51:6f:01:a7:80:35:cd:5e:0d:a7:
df:ee:ff:cb:be:64:46:03:19:01:24:01:6e:8a:b0:65:f2:5e:
65:ff:06:0e:6d:79:0d:39:16:5d:56:3d:b3:c1:3f:4a:57:79:
19:fd:54:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:39 2024 by rpki-client on console-ams.rpki-client.org