Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/TS7uEdyIbSE8jgJySlomuRoZ_E0.roa
File: TS7uEdyIbSE8jgJySlomuRoZ_E0.roa (raw, json)
Hash identifier: 5Dewmb1Kq3Ik/Lg5BDPaMO4hhpKRHhRQogOrKCjlNuA=
Subject key identifier: 4D:2E:EE:11:DC:88:6D:21:3C:8E:02:72:4A:5A:26:B9:1A:19:FC:4D
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01832268E79F5274E8387F87E09E76331E8F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/TS7uEdyIbSE8jgJySlomuRoZ_E0.roa
Signing time: Fri 09 Sep 2022 13:20:43 +0000
ROA not before: Fri 09 Sep 2022 13:20:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 88.209.231.0/24 maxlen: 24
88.209.232.0/22 maxlen: 22
83.137.152.0/24 maxlen: 24
83.137.154.0/23 maxlen: 24
178.210.252.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.204.0/22 maxlen: 24
88.209.200.0/22 maxlen: 32
88.209.205.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:68:e7:9f:52:74:e8:38:7f:87:e0:9e:76:33:1e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 9 13:20:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d2eee11dc886d213c8e02724a5a26b91a19fc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:5a:fb:e1:cc:aa:36:a8:45:69:61:53:a0:
33:6c:6a:62:8e:64:f1:c1:fb:d9:61:c4:ad:55:92:
0f:16:23:e2:8f:bf:a6:53:54:d8:f9:71:ba:ad:75:
45:53:e9:73:2d:fb:d9:a6:4a:71:52:72:3f:0b:0b:
22:6a:63:19:e8:f1:ab:0f:09:7a:c4:72:46:b2:cf:
b4:18:48:ac:57:41:4a:57:e1:08:bf:c5:ea:a0:72:
21:c5:f2:ca:bf:f4:df:bb:df:9a:43:d9:ed:d4:26:
43:85:3b:8d:90:3b:0f:5b:45:dd:9a:86:21:7d:f1:
e8:7a:6c:83:92:d3:41:43:2d:c5:ef:3b:ad:4e:2f:
d6:db:09:c8:03:3e:b2:de:68:01:b6:d5:b4:0c:7e:
20:5a:3b:13:98:6f:64:79:03:ec:2e:00:9b:f0:b2:
b7:18:b2:67:6b:ad:70:31:7f:9c:14:e0:59:24:ea:
0d:4c:6b:27:96:3b:a4:d6:38:35:fb:c9:78:d6:78:
76:c0:cc:55:19:a6:61:34:56:70:ae:ac:e3:28:20:
54:60:3b:bd:07:fd:0b:b2:41:39:d0:5b:7e:33:7e:
83:d8:f2:c7:b3:e5:4e:65:18:5f:b3:21:da:79:76:
f7:e8:2f:d7:c7:0a:b8:bc:b0:ca:7a:55:94:c2:37:
0e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2E:EE:11:DC:88:6D:21:3C:8E:02:72:4A:5A:26:B9:1A:19:FC:4D
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/TS7uEdyIbSE8jgJySlomuRoZ_E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.152.0/24
83.137.154.0/23
88.151.61.0/24
88.151.63.0/24
88.209.200.0/21
88.209.231.0-88.209.235.255
178.210.252.0/24
Signature Algorithm: sha256WithRSAEncryption
61:07:b6:e3:a0:37:1e:cd:9e:af:0d:ca:c3:c4:55:a8:03:53:
0b:3a:e5:35:9a:2e:ff:eb:1f:1a:38:82:cd:4a:12:f3:80:71:
ec:fb:b0:f4:45:ec:d4:14:9a:26:fa:25:f5:ec:a9:e0:8b:91:
a8:d0:25:5b:d0:21:e4:d9:cc:24:b8:ab:47:0e:a6:c5:6c:c3:
f4:b7:03:3d:e7:c7:40:69:78:06:50:03:15:68:71:52:12:d1:
1c:fe:09:ae:49:5f:15:4b:38:ee:f4:4d:c3:7c:95:b4:16:02:
8b:04:c3:86:55:45:be:ed:f6:33:00:78:a9:69:84:91:20:c0:
8b:b7:a9:8c:08:53:09:8f:ba:77:07:3b:fa:65:96:26:f8:34:
45:14:a1:44:eb:67:f9:f7:4a:00:ef:42:4d:b1:bb:e3:b7:dc:
8f:36:f1:55:0e:8c:44:86:bc:22:e2:e0:35:1b:3a:8c:d5:06:
fc:3a:6f:81:10:44:7c:d4:32:d6:70:47:32:2d:c3:2b:c3:9c:
f4:a8:e7:3d:f8:f3:a9:bd:60:67:18:fe:b2:a8:12:f2:75:1c:
54:f8:0d:56:33:d4:de:03:c9:44:df:30:53:e9:58:f0:41:5b:
30:5c:fb:c7:d1:38:51:dd:9d:76:ca:9d:7a:e7:8b:7d:58:3b:
ee:28:15:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org