Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/S_HVNQcYn6icjn8cHM6SHJwuZPI.roa
File: S_HVNQcYn6icjn8cHM6SHJwuZPI.roa (raw, json)
Hash identifier: V439x8FRQ94rP+cEGLK9chQzW2A4UMtB60mzUJnlThY=
Subject key identifier: 4B:F1:D5:35:07:18:9F:A8:9C:8E:7F:1C:1C:CE:92:1C:9C:2E:64:F2
Certificate issuer: /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial: 01856F54772DCC013D91616A1A9F3AFB6BDF
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/S_HVNQcYn6icjn8cHM6SHJwuZPI.roa
Signing time: Sun 01 Jan 2023 21:54:44 +0000
ROA not before: Sun 01 Jan 2023 21:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202329
IP address blocks: 185.65.241.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:77:2d:cc:01:3d:91:61:6a:1a:9f:3a:fb:6b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
Validity
Not Before: Jan 1 21:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bf1d53507189fa89c8e7f1c1cce921c9c2e64f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:9e:62:e9:3d:f6:a4:25:83:ce:b3:de:55:
37:75:15:0a:62:c2:eb:c7:d3:81:c5:a4:7a:66:52:
b1:5d:17:7c:72:37:c0:be:c3:88:4d:33:79:f1:78:
81:89:24:9d:9c:8a:71:80:f7:f8:4a:ba:67:6b:e0:
a3:27:37:5b:b7:c7:e8:0e:7a:92:47:fa:69:5d:a4:
e6:95:1d:2e:26:5d:6e:93:b7:ae:96:f6:8f:44:07:
8b:c0:f8:85:90:37:23:72:81:72:b9:4b:be:c5:bf:
5d:5d:41:53:b9:86:10:e6:4a:00:3e:ff:fc:9f:73:
f5:28:0e:f8:fa:6c:0f:2d:fb:f9:df:e7:fe:ad:a3:
69:af:7b:f4:92:13:2f:a7:45:d9:95:83:6e:aa:4e:
a9:c4:06:a4:d8:32:f6:74:95:ab:8f:f5:ce:9b:6f:
2c:4f:ad:d3:f2:45:bd:93:bc:d2:c3:a5:80:76:ec:
11:c5:a1:18:b7:19:75:e1:37:1a:4b:77:a1:8a:91:
6a:4d:6f:fa:e2:c3:fa:33:90:9f:cc:9a:d5:38:18:
01:e3:87:38:78:b4:3e:e9:40:fb:a3:79:2b:14:0b:
5e:65:a2:14:62:51:32:19:40:74:0d:42:28:4f:b8:
af:76:c7:0f:b2:1c:8d:9a:73:4f:f8:f8:d9:72:2c:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F1:D5:35:07:18:9F:A8:9C:8E:7F:1C:1C:CE:92:1C:9C:2E:64:F2
X509v3 Authority Key Identifier:
keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/S_HVNQcYn6icjn8cHM6SHJwuZPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.241.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:3e:f0:be:2a:63:68:89:95:2e:47:39:af:69:92:c2:8e:43:
6a:26:c7:93:75:b9:c4:cf:2c:06:e2:5e:30:5e:91:d5:a8:d0:
92:77:f3:70:63:d3:45:74:be:39:be:0f:b4:56:53:b3:1d:95:
a1:32:a2:8d:aa:9d:46:d2:e8:07:e1:f8:54:99:0d:b3:c5:9e:
c0:43:dd:a1:2a:44:ed:33:f2:0a:b3:01:41:c2:6f:e4:9d:2d:
c3:a1:95:64:98:09:4c:f8:6b:91:5f:c6:ec:3b:4b:9c:ef:e7:
7f:48:cb:07:bb:e7:b3:0d:7e:96:04:e2:84:c0:91:00:a1:d0:
53:d6:93:5a:4e:b6:f6:ce:20:c2:27:bf:a0:41:8e:63:a5:a3:
f0:5c:29:f1:6e:32:4e:cf:fa:a3:35:22:c5:12:37:e8:8b:06:
96:c4:76:ea:cb:57:15:2e:bf:78:39:86:5a:f7:68:c3:43:5e:
0d:e7:b5:ee:f2:5e:00:c5:55:04:46:25:4f:7e:20:34:a6:15:
20:d4:40:d9:34:bc:7c:db:b6:0d:93:af:4e:b2:09:be:4f:58:
9b:20:e3:d7:5f:a0:7a:c7:23:4c:78:95:51:7b:b0:34:15:51:
24:46:c7:02:91:b9:09:cc:a9:40:28:aa:83:c6:3b:c3:13:fb:
33:15:a2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:14 2024 by rpki-client on console-ams.rpki-client.org