Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/VYX3-bBUgZ0X3pDde80KkIG9iKo.roa
File: VYX3-bBUgZ0X3pDde80KkIG9iKo.roa (raw, json)
Hash identifier: dwvSDfdXaKPGG15ebZ0wyzHxB1hC1iyTxEii0lra0N4=
Subject key identifier: 55:85:F7:F9:B0:54:81:9D:17:DE:90:DD:7B:CD:0A:90:81:BD:88:AA
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018EE0FA5A536692C56171033E8C739537C8
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/VYX3-bBUgZ0X3pDde80KkIG9iKo.roa
Signing time: Mon 15 Apr 2024 08:58:07 +0000
ROA not before: Mon 15 Apr 2024 08:58:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12325
IP address blocks: 31.14.10.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.45.44.0/23 maxlen: 24
89.46.128.0/22 maxlen: 24
89.46.232.0/21 maxlen: 24
185.18.224.0/23 maxlen: 24
188.208.110.0/24 maxlen: 24
188.215.40.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e0:fa:5a:53:66:92:c5:61:71:03:3e:8c:73:95:37:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Apr 15 08:58:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5585f7f9b054819d17de90dd7bcd0a9081bd88aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:47:94:c7:79:ea:28:85:cd:ee:63:b0:b3:
74:ff:82:02:35:a4:26:fc:fc:53:2e:c3:16:84:55:
17:28:1d:f3:5e:d1:69:64:89:c6:31:0d:6a:b4:0f:
79:a2:6c:d9:4b:c4:3d:1b:42:84:01:84:c7:dc:dc:
41:c4:57:7c:fd:46:64:15:59:33:81:fc:2a:15:9c:
6e:8f:70:6a:26:c9:53:9a:10:04:c2:bd:76:34:9f:
ea:b9:1e:be:c6:a1:24:6c:d3:3f:89:e3:4c:40:62:
25:16:6c:be:6a:6e:f5:ee:b9:49:5c:aa:c5:62:42:
1e:1d:7a:67:f9:f2:38:be:9b:01:b4:27:a6:6b:81:
ba:b3:84:a6:3b:d6:e2:0f:a7:a5:30:03:df:e1:7d:
0d:47:46:7a:49:a9:e8:46:eb:f9:08:5a:7c:54:59:
d4:6d:45:ae:00:e9:80:b2:96:02:6f:a3:f9:90:9e:
aa:fe:d9:09:99:f7:93:96:a2:3f:34:db:97:08:9c:
35:2d:48:6c:2c:ee:9f:bf:8e:21:d5:72:1d:1d:6e:
ff:ce:57:7c:da:55:cc:47:e3:4a:b5:8b:e6:df:06:
b7:40:20:92:cd:52:22:99:78:1b:fc:ee:a6:32:65:
20:25:ec:60:59:d6:10:b5:b6:aa:7f:98:41:62:a4:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:85:F7:F9:B0:54:81:9D:17:DE:90:DD:7B:CD:0A:90:81:BD:88:AA
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/VYX3-bBUgZ0X3pDde80KkIG9iKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.10.0/24
77.81.101.0/24
89.37.185.0/24
89.45.44.0/23
89.46.128.0/22
89.46.232.0/21
185.18.224.0/23
188.208.110.0/24
188.215.40.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:39:41:5f:8e:0b:d7:12:0c:c7:85:b2:60:ea:21:5b:ed:a1:
ad:5b:89:56:4e:f4:b6:df:5b:97:e3:69:ff:53:1e:9b:72:4e:
cf:27:be:35:69:80:a6:e3:a9:cd:11:0a:ec:3e:98:bb:1b:ba:
4f:65:5d:34:ad:f1:3c:07:cd:32:f9:56:bc:ca:c5:32:f7:62:
7a:33:91:c6:d6:50:6a:73:c9:c0:60:af:c5:9e:ec:fa:fb:6b:
0e:8e:64:ec:d0:f2:88:17:25:1b:df:ff:4b:3b:74:25:22:42:
47:db:25:96:dc:57:0d:91:68:0b:b6:41:fb:eb:d3:e4:80:49:
59:fc:ef:db:77:2b:16:58:64:0c:94:8a:f4:18:53:2e:15:5f:
82:53:f0:35:37:4b:40:61:4f:27:0c:d6:a8:65:c3:d8:fb:c3:
a6:dc:de:da:b3:e4:78:c3:7b:aa:48:38:83:01:d4:d5:a5:a0:
02:1d:f7:40:f5:41:c4:dd:6b:86:16:fc:b2:14:54:a7:99:ab:
7e:10:c0:3f:d8:f9:b5:9f:a0:b6:ae:13:6e:24:19:64:b1:05:
b4:ac:0f:a3:7a:12:3e:c5:c8:3e:fd:3a:d5:50:4b:fb:4b:36:
c5:47:ec:53:dc:b4:69:c6:3d:37:12:45:d1:c7:b0:b0:4c:dd:
97:8c:16:d2
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAY7g+lpTZpLFYXEDPoxzlTfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjQwNDE1MDg1ODA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTg1ZjdmOWIwNTQ4MTlkMTdkZTkwZGQ3YmNkMGE5MDgxYmQ4OGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDVHlMd56iiFze5jsLN0/4ICNaQm
/PxTLsMWhFUXKB3zXtFpZInGMQ1qtA95omzZS8Q9G0KEAYTH3NxBxFd8/UZkFVkz
gfwqFZxuj3BqJslTmhAEwr12NJ/quR6+xqEkbNM/ieNMQGIlFmy+am717rlJXKrF
YkIeHXpn+fI4vpsBtCema4G6s4SmO9biD6elMAPf4X0NR0Z6SanoRuv5CFp8VFnU
bUWuAOmAspYCb6P5kJ6q/tkJmfeTlqI/NNuXCJw1LUhsLO6fv44h1XIdHW7/zld8
2lXMR+NKtYvm3wa3QCCSzVIimXgb/O6mMmUgJexgWdYQtbaqf5hBYqTvAwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFFWF9/mwVIGdF96Q3XvNCpCBvYiqMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1ZZWDMtYkJVZ1owWDNwRGRlODBLa0lHOWlLby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwTwYIKwYBBQUHAQcBAf8EQDA+MDwEAgABMDYDBAAfDgoD
BABNUWUDBABZJbkDBAFZLSwDBAJZLoADBANZLugDBAG5EuADBAC80G4DBAK81ygw
DQYJKoZIhvcNAQELBQADggEBAB45QV+OC9cSDMeFsmDqIVvtoa1biVZO9LbfW5fj
af9THptyTs8nvjVpgKbjqc0RCuw+mLsbuk9lXTSt8TwHzTL5VrzKxTL3YnozkcbW
UGpzycBgr8We7Pr7aw6OZOzQ8ogXJRvf/0s7dCUiQkfbJZbcVw2RaAu2Qfvr0+SA
SVn879t3KxZYZAyUivQYUy4VX4JT8DU3S0BhTycM1qhlw9j7w6bc3tqz5HjDe6pI
OIMB1NWloAId90D1QcTda4YW/LIUVKeZq34QwD/Y+bWfoLauE24kGWSxBbSsD6N6
Ej7FyD79OtVQS/tLNsVH7FPctGnGPTcSRdHHsLBM3ZeMFtI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org