Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/3VBE--AYOo5NGHgF3TCNZo9JdR0.roa
File: 3VBE--AYOo5NGHgF3TCNZo9JdR0.roa (raw, json)
Hash identifier: 7aAcYr6P/tCxyZZtlVwW3W7CVa5T3PnFoXnY49Zv4rM=
Subject key identifier: DD:50:44:FB:E0:18:3A:8E:4D:18:78:05:DD:30:8D:66:8F:49:75:1D
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 018CC2DAC15DE853F5235F36B87AB372FC08
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/3VBE--AYOo5NGHgF3TCNZo9JdR0.roa
Signing time: Mon 01 Jan 2024 02:29:25 +0000
ROA not before: Mon 01 Jan 2024 02:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62294
IP address blocks: 85.222.168.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c1:5d:e8:53:f5:23:5f:36:b8:7a:b3:72:fc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Jan 1 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd5044fbe0183a8e4d187805dd308d668f49751d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:d0:4e:44:75:e1:28:28:bd:04:0f:f6:cf:
6d:2f:43:c9:bf:7f:b0:5c:24:3c:ce:dc:f4:a6:78:
b7:63:b7:36:eb:1d:10:35:ca:67:7c:53:28:10:03:
c8:e0:e2:b8:be:18:fe:da:3f:c0:3b:ac:dd:d6:61:
9b:e0:60:fb:f7:a0:3b:62:dd:58:73:51:51:a1:9c:
ce:38:33:46:a6:80:a8:bb:a8:26:41:6c:65:45:7a:
24:15:7f:0a:07:9b:81:66:e6:94:2e:cd:1c:75:84:
cd:eb:92:de:06:21:5b:ae:45:1f:23:c6:9b:80:ee:
f6:b4:7d:be:cc:ff:38:35:b0:fd:66:7c:d2:fa:2c:
dc:01:14:90:20:66:db:45:73:9b:74:00:f3:04:a1:
59:bb:54:ad:b3:17:8c:13:10:09:78:22:47:95:d4:
fc:25:2a:b0:a7:f8:ad:09:a1:71:60:02:a7:a2:59:
63:85:af:fd:9e:0c:9f:23:7c:be:b6:d0:bf:4a:5d:
8f:e4:a6:9e:b8:0e:bb:fd:6a:ac:d4:36:35:3e:22:
70:1c:65:a6:35:61:db:95:1e:b3:49:9a:6e:91:e7:
b0:7d:f5:a6:12:bc:65:32:e3:d0:b9:2b:1b:a0:87:
75:a5:77:3d:f2:49:2c:ef:e9:59:ff:13:5d:36:4e:
76:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:50:44:FB:E0:18:3A:8E:4D:18:78:05:DD:30:8D:66:8F:49:75:1D
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/3VBE--AYOo5NGHgF3TCNZo9JdR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.168.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:f8:8d:a5:e6:82:b3:b7:b4:e6:47:94:14:ce:c5:8d:72:28:
f0:a4:c0:30:35:e6:1d:eb:1a:fd:a0:db:ac:cb:d3:37:c6:71:
98:4d:42:87:2a:63:8a:7e:2e:8d:0d:64:e6:af:0c:3c:50:2e:
f4:a6:43:5e:29:b6:f1:d2:a8:40:42:c1:c1:8d:2a:e5:4c:53:
bf:73:b8:24:98:b0:9e:59:66:cc:38:2f:61:7b:a9:47:18:eb:
ac:fb:16:54:cb:93:c8:72:12:56:10:20:01:a0:cf:50:40:e8:
dc:70:f3:d1:57:f0:f0:29:90:d2:95:50:be:5e:c3:35:35:93:
8f:d8:47:e1:fd:9a:a1:3b:82:1e:33:ac:53:bd:f6:f6:90:fa:
0f:de:e3:1d:96:5a:64:67:70:d8:c0:07:b1:41:6f:24:39:95:
47:20:c3:be:aa:72:39:f7:df:6c:f1:e7:42:d5:1e:fd:46:92:
b3:ed:0a:3a:2d:2b:6e:a3:17:82:0b:da:17:60:54:26:43:47:
7a:4c:71:27:51:aa:a9:4e:da:ee:3a:52:d6:9a:d6:44:18:8c:
2b:6d:0c:6e:e6:51:a3:fd:8c:ff:92:79:f5:4c:db:01:e4:ca:
a3:b4:c3:aa:a0:ff:ad:5b:db:74:f4:80:51:c7:d9:b5:33:df:
74:5d:42:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:37 2024 by rpki-client on console-ams.rpki-client.org