Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/c_ZeWCdkJ1-797eDU6KTmKaQQzI.roa
File: c_ZeWCdkJ1-797eDU6KTmKaQQzI.roa (raw, json)
Hash identifier: bam2ArhsmoSJZcL3d7vANn/OJA4+2MdJkwrR3Cps0Kw=
Subject key identifier: 73:F6:5E:58:27:64:27:5F:BB:F7:B7:83:53:A2:93:98:A6:90:43:32
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 03894CE3
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/c_ZeWCdkJ1-797eDU6KTmKaQQzI.roa
Signing time: Mon 02 May 2022 10:16:01 +0000
ROA not before: Mon 02 May 2022 10:16:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213254
IP address blocks: 178.210.236.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59329763 (0x3894ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 2 10:16:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73f65e582764275fbbf7b78353a29398a6904332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:88:71:58:36:69:c7:d9:30:86:f1:1e:3f:
9c:3b:57:92:12:da:87:c0:a9:80:db:ad:bb:fc:ac:
73:d6:b1:b9:a0:9e:fb:24:29:de:8d:fb:f5:da:20:
dd:94:9d:7a:76:32:b7:d2:2e:d9:4d:3e:e3:ec:e0:
2e:9e:f2:63:ea:72:b8:98:d1:b3:fd:0b:b5:4d:68:
bf:47:40:57:9d:5e:21:5b:ed:0d:38:1e:87:fa:ac:
1b:a0:56:42:f2:38:b7:c2:c9:8b:85:7c:7b:ac:80:
30:d7:2d:b8:95:5f:f5:67:61:e4:0a:d1:4a:15:a1:
15:0c:2e:19:a2:b0:51:42:da:e1:c0:63:ec:65:25:
b8:92:c5:a9:1d:d7:26:f0:aa:96:40:e1:39:9c:27:
0f:9b:c5:76:2c:da:c7:4d:93:8a:d6:d2:0c:21:16:
c6:29:2c:ce:2f:db:2f:bf:31:17:41:10:52:f6:4b:
62:05:60:4e:8f:75:6c:9b:db:af:27:78:a0:d1:91:
6c:5a:dc:09:46:9b:dc:86:e0:3a:f5:a4:13:73:6b:
57:34:d4:c0:28:bc:64:82:2c:b1:25:83:6e:cd:48:
6b:2e:d1:ef:8e:cf:51:38:33:66:0c:f9:32:7e:ed:
ed:12:ea:a1:7d:3c:fb:af:69:c9:2e:6c:25:4b:cc:
a7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F6:5E:58:27:64:27:5F:BB:F7:B7:83:53:A2:93:98:A6:90:43:32
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/c_ZeWCdkJ1-797eDU6KTmKaQQzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
81:33:45:08:65:3b:4b:63:d0:61:26:54:7b:ae:9a:cd:0c:88:
68:b1:7f:bc:a5:54:4b:3a:49:a7:0c:2d:f6:43:76:71:89:82:
71:0a:b8:4e:50:58:42:95:d9:b1:84:ec:4c:da:7e:c1:e2:e2:
ca:26:18:30:7f:84:fb:d3:4b:63:4d:f2:e5:e3:23:83:b9:e6:
6e:52:1d:b6:82:fe:98:1e:aa:ac:80:bd:59:2b:29:c7:3a:8a:
a5:88:8e:9f:07:95:ff:fd:e7:3a:9b:12:40:4a:72:20:4f:0c:
9f:e0:07:4a:69:55:26:08:06:df:90:95:ac:ca:ed:2e:62:31:
b9:31:92:50:d3:66:06:90:4e:31:df:76:f1:39:b5:35:50:77:
67:fd:c1:98:b0:dc:f0:92:ed:4c:60:07:e1:f2:58:25:51:de:
6a:41:0b:4a:d2:3f:af:28:7b:c8:27:05:0c:26:42:a4:95:50:
6e:d9:97:07:24:98:9c:a5:52:48:8f:9a:b2:be:ba:29:2d:07:
74:f0:c5:0c:85:ef:09:b3:d9:8b:71:ea:c0:88:c6:6d:26:80:
89:51:3d:36:ce:3d:34:7e:71:4b:c8:c9:5e:5c:cf:43:3d:14:
53:f6:9f:38:be:a3:00:b3:07:0c:dc:f0:00:b1:86:76:26:cd:
9f:9e:c6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org