Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/yayRqBl8phAcxuaNhWBTFEEA_z8.roa
File: yayRqBl8phAcxuaNhWBTFEEA_z8.roa (raw, json)
Hash identifier: 0YupH7j/ip0bbbYWzsv5Ui136UzinfAuuCJqPU3eDGs=
Subject key identifier: C9:AC:91:A8:19:7C:A6:10:1C:C6:E6:8D:85:60:53:14:41:00:FF:3F
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 0182AC60C4BB3F9E27433A94E66EEE802F80
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/yayRqBl8phAcxuaNhWBTFEEA_z8.roa
Signing time: Wed 17 Aug 2022 15:16:39 +0000
ROA not before: Wed 17 Aug 2022 15:16:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200509
IP address blocks: 212.237.228.0/24 maxlen: 24
185.177.74.0/23 maxlen: 23
185.177.73.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ac:60:c4:bb:3f:9e:27:43:3a:94:e6:6e:ee:80:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Aug 17 15:16:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9ac91a8197ca6101cc6e68d856053144100ff3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:49:70:5c:e6:b6:5a:67:92:80:12:aa:8b:
fd:6d:2c:ee:01:07:c9:3a:bd:64:70:97:e2:df:e6:
5e:c3:2e:61:82:8a:3b:65:fa:6d:18:41:6d:59:db:
5b:ef:63:99:7e:a3:cf:91:e7:eb:99:09:71:9a:f4:
9d:38:9b:1d:f3:7b:c8:5c:c6:64:72:3c:57:54:88:
5f:e4:9e:13:a6:3b:5e:a4:74:9e:cb:4f:2b:32:75:
a1:04:a1:da:5a:0a:18:1a:c3:a5:99:1d:90:aa:e9:
ff:d7:41:83:a3:12:c7:3c:24:41:35:0b:f8:b4:ab:
ff:1e:1d:2f:1e:0c:09:7b:2e:22:dd:1f:c3:5a:21:
e9:13:23:10:72:82:f3:cb:65:c5:03:7a:88:1b:53:
d2:c3:47:50:c0:9a:97:c1:4b:eb:3b:ee:78:0b:24:
7f:d8:bf:88:a3:d4:f4:4e:2a:3b:16:1d:f6:07:22:
40:1d:a2:10:d5:d6:b9:f3:9b:bf:89:de:89:f5:09:
1a:ce:5f:27:81:17:73:f2:f7:54:0d:f3:ce:06:80:
61:2f:c0:76:e9:55:bb:e6:8d:3e:b5:a6:64:1e:cc:
fc:81:42:ea:5a:01:a1:54:30:bc:83:6f:92:49:e6:
60:68:0e:f5:93:84:db:bc:bb:19:e6:94:1f:97:40:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AC:91:A8:19:7C:A6:10:1C:C6:E6:8D:85:60:53:14:41:00:FF:3F
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/yayRqBl8phAcxuaNhWBTFEEA_z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.73.0-185.177.75.255
212.237.228.0/24
Signature Algorithm: sha256WithRSAEncryption
70:37:03:5b:1d:55:a8:8c:77:b2:f7:06:2a:e4:3f:9b:ec:16:
ca:cc:d5:7b:63:ca:62:d9:f6:2f:05:9c:36:f9:2a:1d:b1:cf:
13:5f:3e:70:9d:ea:b8:e3:36:67:29:a0:e1:2a:68:f3:a4:1e:
9e:c6:e2:fe:d3:d8:77:d8:13:46:00:b0:ca:a4:31:c8:a3:89:
0b:c6:48:bd:08:48:84:ef:c4:87:dd:62:d0:5a:2a:7b:3c:bf:
90:80:1e:4c:62:6c:6d:08:0c:61:b1:ec:f1:51:a6:1d:c4:9e:
c9:db:80:34:5f:c7:2e:b9:79:5c:a6:3e:47:2e:83:88:93:2f:
6a:85:d1:aa:93:4f:05:6e:09:d8:80:86:80:e8:cb:a2:0f:8e:
7f:4e:eb:4c:4c:be:2b:eb:4e:be:19:9a:f7:d0:ad:86:c8:59:
af:b9:fc:aa:cd:fa:f9:3a:32:1c:46:fa:13:b4:80:95:3a:2b:
b5:d6:16:05:ad:40:dd:42:91:64:bf:08:25:67:71:d7:b8:f1:
30:07:06:60:90:8d:0e:6d:5b:d5:f6:0b:62:fc:f6:77:b5:e3:
b7:ba:ec:b7:52:19:3b:5f:13:ad:0f:c7:6d:0b:89:2c:49:c2:
b0:3a:9e:63:94:da:81:62:12:7f:43:bc:89:b5:bb:3d:e4:3d:
9d:56:8e:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:34 2024 by rpki-client on console-fra.rpki-client.org