Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/bkv6Y00LsndZWQwHwGYE_EGILv8.roa
File: bkv6Y00LsndZWQwHwGYE_EGILv8.roa (raw, json)
Hash identifier: 1Fv+tV5HCbzeoODc1VcGRuz9wIOa4fhLLNA1G86DR44=
Subject key identifier: 6E:4B:FA:63:4D:0B:B2:77:59:59:0C:07:C0:66:04:FC:41:88:2E:FF
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A935490
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/bkv6Y00LsndZWQwHwGYE_EGILv8.roa
Signing time: Sat 01 Jan 2022 16:07:21 +0000
ROA not before: Sat 01 Jan 2022 16:07:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209564
IP address blocks: 185.240.182.0/24 maxlen: 24
185.240.183.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177427600 (0xa935490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e4bfa634d0bb27759590c07c06604fc41882eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:39:57:6d:0d:49:ad:73:4f:11:9e:b3:78:
50:9a:69:ca:6d:26:78:83:b9:d4:91:a1:91:e3:09:
e6:51:b2:67:c4:b7:d3:07:fd:f9:c2:10:a3:5a:a9:
c6:ec:63:32:12:67:b6:c9:f4:a5:41:c7:47:74:b6:
6e:46:e4:1e:32:99:ee:ef:f8:ec:85:9d:c4:b8:94:
e3:90:4b:54:ea:1c:56:68:33:e9:3b:d6:96:d6:20:
3d:ae:6d:e9:0f:cf:c6:75:e0:b4:78:f4:ee:85:82:
9c:5f:c6:f8:12:8a:dd:44:59:c2:34:8e:91:4f:b4:
4c:26:58:b0:9a:bc:df:07:f2:a9:0c:ce:b2:44:55:
79:8b:f7:34:74:89:c2:4e:38:8d:e1:51:5c:15:74:
b8:ec:e9:8c:3e:a9:dc:d0:17:4e:3f:5a:45:c4:2a:
af:71:28:26:a4:e4:48:47:06:7f:47:d4:87:43:69:
35:e2:96:5d:73:e6:7f:15:f5:d5:5a:54:13:f4:c1:
e1:5c:e3:ce:0e:f9:73:ca:13:46:67:64:7a:c5:c7:
1d:87:7d:5b:e1:63:62:8c:90:4d:35:f6:28:07:e3:
67:62:a4:90:83:23:bd:dc:5b:db:72:8d:b8:e0:78:
df:87:9e:cd:0b:ad:9b:f9:f2:32:62:d3:6a:80:71:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4B:FA:63:4D:0B:B2:77:59:59:0C:07:C0:66:04:FC:41:88:2E:FF
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/bkv6Y00LsndZWQwHwGYE_EGILv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.182.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:3b:b2:e5:81:19:5a:ac:73:67:94:04:db:dc:bf:b2:ad:95:
76:14:fc:28:da:a1:32:86:24:42:9b:45:8f:62:f8:94:92:17:
78:07:fa:0a:ad:9c:74:69:36:71:31:0d:d3:c3:6a:1d:33:74:
ac:a5:96:bb:eb:76:b8:ae:72:8c:63:16:5f:66:f6:e5:a6:95:
0b:80:37:2e:89:31:94:bb:3a:54:76:f5:cb:71:f0:c9:ec:34:
04:00:3e:5b:b7:af:72:79:d4:63:32:1f:46:b2:2f:62:a1:58:
8f:82:8e:93:42:cb:b8:66:f3:bb:6d:96:0d:40:b9:19:ec:f5:
60:92:10:f8:e8:90:ff:38:62:39:01:1a:c6:fe:35:c2:25:3e:
ef:b4:0a:9c:0d:c4:7c:fa:b7:d6:be:ca:20:2a:4a:95:29:7b:
03:9a:04:0a:94:14:79:1d:6d:1c:ea:c0:23:fd:ee:a4:0f:03:
15:81:98:ea:34:92:8d:f7:c1:e8:4c:1c:2b:6a:e6:2c:7a:18:
6a:1b:f7:31:ab:a6:61:34:29:1b:94:bc:2a:31:c2:bf:d7:2d:
45:27:36:65:87:40:42:de:cb:73:cb:71:a1:ef:bd:16:d6:1a:
33:f9:7a:82:3a:34:18:b0:c7:99:d5:05:5f:0c:f1:66:ed:4c:
b3:8a:60:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org