Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/j3Cnf2kQg7YCZryRPXPOwgYTg3M.roa
File: j3Cnf2kQg7YCZryRPXPOwgYTg3M.roa (raw, json)
Hash identifier: +6UgxBz1fR15/HcmbEavydMFdEknwPy8oflCz8EGZME=
Subject key identifier: 8F:70:A7:7F:69:10:83:B6:02:66:BC:91:3D:73:CE:C2:06:13:83:73
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018572E8315C4365CB51D1E5193E09857AD1
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/j3Cnf2kQg7YCZryRPXPOwgYTg3M.roa
Signing time: Mon 02 Jan 2023 14:34:57 +0000
ROA not before: Mon 02 Jan 2023 14:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30860
IP address blocks: 185.233.185.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:31:5c:43:65:cb:51:d1:e5:19:3e:09:85:7a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 2 14:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f70a77f691083b60266bc913d73cec206138373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:55:53:7e:1b:4e:b1:ad:24:83:71:b4:2b:
fe:ee:71:11:76:5f:7c:25:9b:65:60:c9:3c:86:0c:
56:58:97:11:30:59:af:b7:5e:b5:86:92:0b:02:63:
b4:6a:89:5e:98:28:46:4f:36:90:1d:a5:77:a5:27:
a7:bc:32:c1:c1:d0:c9:8b:66:ce:b5:de:24:68:a3:
de:bd:4f:53:3b:99:45:13:29:16:a1:5a:09:65:2d:
b8:41:06:bd:34:5b:31:eb:9d:84:70:36:40:da:39:
d9:e1:54:83:30:eb:d5:56:3f:73:a4:7c:81:56:62:
30:73:30:c9:f0:1c:d5:c2:e5:09:a6:95:cb:9d:46:
d2:38:62:d9:ad:be:fb:3d:4c:44:95:bb:d3:23:fa:
7e:89:b9:6d:2f:e3:90:fa:62:89:b4:81:d6:14:09:
b1:62:1a:19:69:f5:16:fa:d8:30:3c:06:a5:d8:19:
1a:f1:b9:7d:11:93:65:d2:f1:0a:a4:ff:ea:e7:ec:
7a:fb:e8:4b:e2:0a:31:0d:a9:9b:dc:cf:b7:cf:55:
45:c9:de:c7:42:46:1a:20:2e:a7:f5:a3:78:ec:9f:
a5:18:74:13:3f:2f:e8:3f:71:31:90:e6:0a:3d:5d:
99:df:9d:ab:ce:5a:6e:94:30:76:e8:58:44:c3:e7:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:70:A7:7F:69:10:83:B6:02:66:BC:91:3D:73:CE:C2:06:13:83:73
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/j3Cnf2kQg7YCZryRPXPOwgYTg3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:32:55:29:f0:d7:64:ff:7e:cd:ea:cf:11:5f:7f:dd:0c:b5:
af:84:d8:34:3d:55:05:44:d4:36:ea:bb:0b:42:92:26:95:ba:
39:f5:41:7f:3f:ac:a4:b4:17:36:97:c4:e7:3d:8c:cd:49:dd:
57:5d:6b:67:f1:6f:30:ca:20:f4:e7:ac:4f:44:64:20:f1:36:
26:f9:ea:1c:6f:c7:3d:5e:fb:84:2d:c9:13:9b:08:3d:21:2f:
8a:fd:f8:72:89:f0:87:6c:7c:9c:ac:7b:9d:b3:02:5a:ef:7c:
ab:db:6a:e3:b2:76:5d:00:4f:3d:c3:b8:27:5a:c1:28:1a:19:
39:ff:86:4c:ef:1a:9c:7e:b1:14:c0:8c:e8:20:3a:de:af:ea:
5a:a5:63:1c:97:a0:0f:99:a7:70:86:94:d8:c8:98:14:d2:d3:
76:06:b5:53:3e:80:df:e7:e3:55:79:5b:6a:65:67:b4:0d:f3:
d9:bd:12:9e:75:2b:5b:49:f6:9c:fe:0d:78:d6:58:60:cb:8c:
3b:1f:93:8f:29:22:9f:7b:37:e5:95:5c:2d:6d:1d:88:d4:07:
7b:ef:6c:b8:62:2f:26:97:8e:40:1e:26:42:7e:6a:69:fe:2a:
ef:6a:7c:f6:cf:17:20:ee:fb:1c:53:56:1c:5c:2d:0e:42:ff:
52:09:d7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-fra.rpki-client.org