Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/muzOG2n3Vzrmdf8KFfuSqj68sJU.roa
File: muzOG2n3Vzrmdf8KFfuSqj68sJU.roa (raw, json)
Hash identifier: KyuwmXVtI/Fpir8uWgOSOsmRwnVeg4HzUOm+IK1Jq44=
Subject key identifier: 9A:EC:CE:1B:69:F7:57:3A:E6:75:FF:0A:15:FB:92:AA:3E:BC:B0:95
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 43349741
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/muzOG2n3Vzrmdf8KFfuSqj68sJU.roa
Signing time: Fri 27 May 2022 04:53:13 +0000
ROA not before: Fri 27 May 2022 04:53:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61204
IP address blocks: 92.114.93.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
77.81.166.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1127520065 (0x43349741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: May 27 04:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9aecce1b69f7573ae675ff0a15fb92aa3ebcb095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:64:9e:57:a9:fe:43:44:e3:5c:c9:67:6b:
d7:dc:81:3a:cb:cb:6c:b9:97:bd:5f:d1:11:7e:24:
e0:b1:fd:00:1b:ff:b5:4b:b6:f4:d3:29:a7:c8:5a:
50:68:d2:29:24:4d:91:8e:c2:32:58:d0:23:b5:c2:
d6:28:4f:35:f8:71:ba:be:6e:6f:d9:4f:12:77:26:
19:c1:bd:1f:89:64:f0:31:3e:66:06:cf:ee:69:4d:
7e:1c:d3:b6:2b:46:b1:1d:98:09:c2:a5:5e:a3:a5:
09:1a:b3:b4:40:50:1d:9b:eb:ca:cf:de:8b:58:52:
c7:9e:9b:ea:48:e1:aa:42:19:08:64:df:0e:c7:7a:
54:eb:55:a7:4f:da:9c:0c:51:29:74:51:df:f6:78:
51:bd:33:4f:5c:46:91:bf:35:a2:e6:49:1c:67:85:
61:2a:bc:69:63:f0:1a:22:b6:ed:d4:80:63:47:26:
69:0b:03:a6:65:4c:8f:2b:f0:9c:8a:f6:df:9c:c9:
dc:3d:a0:e3:13:07:31:e1:b7:57:d5:cc:30:1e:d5:
2d:7d:23:3c:ca:65:8c:d5:17:8d:84:0f:35:d0:d7:
a8:0c:6f:95:48:21:dd:5a:e9:28:36:c9:91:a4:f9:
b5:03:40:83:cd:f8:6f:da:64:ae:cb:40:43:ed:dc:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EC:CE:1B:69:F7:57:3A:E6:75:FF:0A:15:FB:92:AA:3E:BC:B0:95
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/muzOG2n3Vzrmdf8KFfuSqj68sJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.166.0/24
92.114.93.0/24
188.215.31.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:60:ba:a2:55:20:b9:93:9c:ac:f5:c5:4b:e5:91:8c:f1:24:
57:7b:77:5c:7a:6d:08:89:7f:e4:01:ee:81:21:1e:ea:6f:00:
ed:d3:be:f1:56:a2:5a:97:d0:65:51:ab:f2:5d:86:f9:f1:a9:
da:12:cf:d8:a3:9f:1e:80:d6:2b:14:ab:5f:23:c0:2b:cb:e6:
16:f1:8e:4c:a9:22:b8:ef:ac:28:d7:d4:a4:53:00:46:20:9c:
91:f4:46:71:d5:fa:49:a2:3b:5f:80:47:8b:ea:90:9a:7e:80:
1a:08:03:e2:5e:a4:91:f6:6e:2c:30:35:90:2f:9c:86:df:dc:
37:4f:ac:f5:5c:fe:00:0a:e1:03:02:db:40:eb:ae:0d:55:c6:
e8:02:2b:68:ec:ff:bb:87:f5:7b:4f:1d:f8:3a:a7:1e:44:09:
1d:26:1c:cd:54:5b:8c:7b:b5:56:01:28:ba:e3:34:ba:cf:5a:
e7:a8:46:aa:bd:40:4f:fe:5b:7e:97:40:6f:b2:3b:1f:e8:2c:
41:f7:dc:aa:0c:ba:14:c9:73:2d:bb:33:96:3f:46:c3:ab:2d:
ca:22:16:92:e2:1f:05:4d:6c:d5:db:68:04:cb:30:e8:23:1f:
a1:ec:39:bc:c0:e4:72:90:ad:10:96:fd:f9:d0:02:80:0c:a9:
98:46:55:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org