Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/m9k83DJPhVzfu2i_6_BoNUpXYDY.roa
File: m9k83DJPhVzfu2i_6_BoNUpXYDY.roa (raw, json)
Hash identifier: lZuONobbwVeNzYwhK9jqhpyiOFskLmH3ZeaMdHOqRzU=
Subject key identifier: 9B:D9:3C:DC:32:4F:85:5C:DF:BB:68:BF:EB:F0:68:35:4A:57:60:36
Certificate issuer: /CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Certificate serial: 015B729E
Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/m9k83DJPhVzfu2i_6_BoNUpXYDY.roa
Signing time: Sat 01 Jan 2022 13:59:12 +0000
ROA not before: Sat 01 Jan 2022 13:59:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198575
IP address blocks: 45.85.44.0/22 maxlen: 22
194.146.66.0/24 maxlen: 24
194.146.66.0/23 maxlen: 23
194.146.67.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22770334 (0x15b729e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Validity
Not Before: Jan 1 13:59:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bd93cdc324f855cdfbb68bfebf068354a576036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3a:db:d1:c5:a5:b8:46:0e:49:ed:0a:e4:f9:
be:07:88:d4:52:62:07:4e:eb:2f:61:5d:9f:07:2b:
4e:25:b5:8e:32:d3:61:bb:74:44:10:12:b5:fc:82:
32:0f:91:40:87:4a:ce:a1:55:d7:0a:6e:6c:dd:e7:
1b:da:66:cc:ca:a5:8f:a8:ad:78:73:85:7e:f3:9c:
7f:ef:b0:b0:ea:b1:34:3d:75:e7:66:53:d6:0e:02:
9b:83:04:01:19:b4:30:ec:c4:ae:f6:05:78:24:fa:
32:c2:90:21:af:59:54:4c:ff:ae:5a:93:6f:56:c7:
10:16:68:d4:fd:e8:d4:a8:ab:88:4f:9d:59:80:fd:
44:d2:06:2d:ca:37:8a:22:1a:58:9b:00:aa:96:b0:
ba:e4:27:d5:1e:c7:a2:04:4b:ac:9a:2c:84:6c:6b:
6e:0d:88:78:17:29:fc:10:da:02:cc:25:dd:a5:0a:
b8:8a:06:67:40:3b:c5:c6:b9:63:f4:7d:6f:5b:25:
dc:c0:b5:5f:4f:12:58:5b:f5:49:e5:2a:fb:2c:69:
12:ab:9e:80:51:6d:77:37:31:54:ab:e8:e0:67:f8:
c9:8e:da:71:be:b8:10:8c:9e:6b:20:96:e3:a6:a0:
9d:18:e0:d7:c8:2e:d6:cf:ee:f5:a6:56:05:54:3b:
9e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D9:3C:DC:32:4F:85:5C:DF:BB:68:BF:EB:F0:68:35:4A:57:60:36
X509v3 Authority Key Identifier:
keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/m9k83DJPhVzfu2i_6_BoNUpXYDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.44.0/22
194.146.66.0/23
Signature Algorithm: sha256WithRSAEncryption
96:8e:c4:e2:f5:e3:05:0c:1e:52:66:40:a7:35:13:ea:f0:53:
bb:dd:8a:7c:e3:64:ec:b4:3e:81:3b:20:3a:e7:46:91:8c:f9:
6f:39:e9:6e:a9:46:8f:68:87:ac:8e:b6:b9:95:8d:0e:61:3c:
8b:1a:30:f3:6e:fa:92:52:75:90:1e:38:4f:06:03:fe:52:d0:
65:17:f6:7e:1a:ce:e1:7a:f2:a4:d3:e9:b9:66:2b:35:1b:4e:
9e:5b:b1:7e:28:13:a1:7d:5f:08:10:4a:59:8d:52:8c:41:9a:
d3:ab:c6:77:9c:8f:bd:4c:c3:5b:d8:14:b8:53:9b:45:a6:c8:
4a:35:b1:31:26:e8:6b:3d:11:1b:69:6f:fc:6c:98:a5:dd:6f:
d4:55:05:3d:8f:1f:60:f2:99:f2:ed:d9:1f:37:2d:2b:81:8d:
66:40:1d:77:77:00:da:60:e2:f8:e3:21:13:4e:4b:81:3f:f1:
60:d4:89:5d:6f:4c:c2:7b:fb:a3:3d:58:30:c6:68:34:ff:e8:
3a:a1:44:3b:97:48:d8:40:93:f4:28:eb:c9:bc:f7:25:47:8d:
3e:2b:35:2d:6a:a6:0c:0c:21:9c:1d:3a:8d:61:9f:ee:04:47:
3e:01:da:b2:14:f5:b2:b6:62:2c:ee:90:6e:d3:7a:5a:5d:30:
d8:49:1b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:46 2024 by rpki-client on console-fra.rpki-client.org