Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/iSwTmFUEUJ3swjzA0FFdQoBIPbY.roa
File: iSwTmFUEUJ3swjzA0FFdQoBIPbY.roa (raw, json)
Hash identifier: 9sPHqnh8uAIj7PPXMm8bzI18m6tiVr0ryTwprmOGypY=
Subject key identifier: 89:2C:13:98:55:04:50:9D:EC:C2:3C:C0:D0:51:5D:42:80:48:3D:B6
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 03E6D523
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/iSwTmFUEUJ3swjzA0FFdQoBIPbY.roa
Signing time: Thu 09 Jun 2022 12:52:02 +0000
ROA not before: Thu 09 Jun 2022 12:52:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211619
IP address blocks: 92.52.218.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65459491 (0x3e6d523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 9 12:52:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=892c13985504509decc23cc0d0515d4280483db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b4:99:11:38:a3:d1:47:ef:41:60:6d:47:b5:
2f:9d:ef:25:99:a7:0a:08:f5:86:7e:a6:da:b2:c5:
b0:aa:cd:13:48:83:f9:60:eb:be:58:7c:23:f8:0f:
7e:39:17:cb:f8:8d:2f:f4:80:e0:77:fe:74:fa:17:
93:ff:79:ad:d6:f4:4d:d9:25:03:03:7a:e4:93:c1:
28:2a:36:4d:17:bc:af:1e:8c:66:cb:0f:e5:ee:95:
b5:e4:7e:87:0f:24:7d:db:55:7e:61:6e:58:d6:bc:
83:0e:dc:60:14:31:04:23:69:6b:39:57:b3:5d:70:
2c:30:20:d6:80:64:d5:0c:2d:be:b2:fd:78:5a:df:
4b:99:f6:c5:e1:38:49:40:d3:0a:f3:5c:5b:fa:17:
16:c6:b9:e8:b5:24:1b:4d:6e:67:47:61:6a:7f:2f:
ed:af:61:32:61:e0:f0:6b:51:cb:b9:41:9f:bc:0a:
30:1a:52:85:f0:4b:f8:c2:7f:55:a4:b0:ed:17:58:
7a:1d:90:f1:78:69:84:82:76:06:5c:22:5f:9e:8c:
5b:6d:93:b0:fc:a2:d0:1e:96:10:0c:73:57:31:da:
f4:57:e2:5b:21:e1:45:29:23:fd:a0:3b:4f:00:10:
36:0b:5f:a4:84:0a:88:c5:43:d5:6c:34:fd:7a:8d:
69:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2C:13:98:55:04:50:9D:EC:C2:3C:C0:D0:51:5D:42:80:48:3D:B6
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/iSwTmFUEUJ3swjzA0FFdQoBIPbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.218.0/24
178.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:77:5c:ba:e0:f6:11:cb:dd:c1:75:5c:d5:c1:1d:4b:c7:97:
1b:40:15:ca:97:9f:c7:e0:45:e7:82:40:2e:68:bd:a3:df:c3:
6f:83:94:b2:02:37:7e:17:81:4b:5b:3f:30:12:a4:6d:1f:ba:
f9:0f:4a:c1:dc:1e:72:47:82:3c:6e:32:6a:ff:bb:77:42:99:
5f:37:09:3f:eb:5c:f9:17:22:e0:a3:bf:83:14:d8:e4:f3:4f:
64:99:ad:d1:cf:34:91:0c:f6:34:53:e8:ae:67:cb:4f:1d:cc:
b1:3c:1d:7c:9d:83:0d:4d:98:48:f5:e1:3f:9c:e6:4e:4e:7f:
e0:3c:63:91:ba:da:a6:c1:d6:66:6e:02:d7:42:62:70:bb:ca:
e9:5d:d0:cc:dc:45:34:89:0b:b2:b4:14:b2:47:28:16:86:8a:
20:b1:aa:ec:9d:4a:fb:54:16:1f:7b:05:2f:e6:c1:46:08:6b:
f0:b4:a5:a3:84:51:b6:d0:b8:a3:d4:5b:60:af:3d:e7:7a:4f:
b1:2b:f8:03:ec:ae:a5:e5:0f:5a:c5:3e:3f:10:5c:6e:97:01:
bf:d5:f8:05:8d:61:f5:b0:f5:53:3c:74:ec:e1:79:74:1f:d9:
fe:e2:ce:4a:dc:20:01:54:76:05:49:1b:1c:d6:05:86:96:13:
6c:09:7d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org