Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lEeRw4nXDYKcej2HmzT2i5zWWRU.roa
File: lEeRw4nXDYKcej2HmzT2i5zWWRU.roa (raw, json)
Hash identifier: PkaA31uAm8mxsDpHNv4BOR8vVTqJ0IKXSSZcm4ESTLM=
Subject key identifier: 94:47:91:C3:89:D7:0D:82:9C:7A:3D:87:9B:34:F6:8B:9C:D6:59:15
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C5F914C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lEeRw4nXDYKcej2HmzT2i5zWWRU.roa
Signing time: Sat 01 Jan 2022 01:02:27 +0000
ROA not before: Sat 01 Jan 2022 01:02:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34770
IP address blocks: 212.73.154.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476025164 (0x1c5f914c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=944791c389d70d829c7a3d879b34f68b9cd65915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:ee:52:5a:41:57:bf:ab:72:64:14:25:c3:
b5:46:e1:7a:cf:62:80:59:6b:d0:34:05:98:13:2c:
97:94:78:f2:fa:44:bd:99:ef:b2:b0:7a:45:08:7d:
1f:87:a7:4c:26:8d:f4:71:72:39:2e:4f:bf:52:ee:
88:9e:e7:0e:4f:a6:07:b0:a1:6f:01:10:2d:85:a5:
88:63:b2:81:7b:d8:f6:d3:ef:97:32:74:46:69:de:
ef:07:03:d8:57:18:03:7b:3f:2a:66:ed:b7:e2:de:
60:58:f2:57:a2:20:56:e0:66:5f:1b:63:fd:ca:a2:
ec:16:ed:52:7f:52:eb:76:bf:5c:38:02:26:a8:f0:
05:3b:21:eb:30:86:a7:b0:bb:90:00:6b:0a:75:62:
e4:e2:b7:60:74:70:5e:84:28:6c:51:35:bd:ea:5a:
52:76:7c:7c:ff:5b:5b:36:0b:fa:75:82:2a:1e:ac:
3b:06:84:f2:8d:05:d9:f4:57:05:03:21:a2:ea:17:
48:3e:14:66:f8:5f:19:c0:ac:c1:d6:d1:54:e9:28:
56:8c:6d:ad:6a:01:46:34:f0:a6:61:c5:a2:a8:49:
72:cf:2c:32:5f:52:e8:1c:59:03:cc:95:f6:a3:02:
b1:10:4e:d0:de:32:4f:c4:57:80:db:d0:6d:b3:aa:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:91:C3:89:D7:0D:82:9C:7A:3D:87:9B:34:F6:8B:9C:D6:59:15
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lEeRw4nXDYKcej2HmzT2i5zWWRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.73.154.0/24
Signature Algorithm: sha256WithRSAEncryption
46:75:aa:90:6c:a8:89:6e:54:43:fd:c2:29:9e:22:b2:39:d8:
60:59:cf:94:cb:cf:d4:63:ee:f7:6e:60:ad:3c:45:28:4f:2b:
bb:fc:f5:e5:2f:49:9c:bb:d8:e1:75:07:d0:cd:16:00:0c:86:
eb:a0:b2:33:95:94:33:28:9c:61:43:07:9b:93:34:95:0b:be:
51:ec:c9:a0:bd:64:84:f8:72:8b:1f:3b:fa:5c:bc:d6:28:ce:
ff:88:58:f9:98:9b:29:a9:12:f5:e1:13:77:7a:95:d5:e5:02:
4c:e9:49:ca:ab:6d:0b:f6:72:5a:b5:3b:95:c4:2e:d6:c6:d9:
3e:12:64:b0:0c:14:84:87:37:3d:8a:aa:de:81:4b:8d:95:c3:
5c:9f:ca:ca:29:91:b0:c4:64:d9:5b:b2:bd:04:21:4d:38:dd:
4c:cf:1a:2f:b3:6c:ba:6c:00:09:70:88:ce:e6:85:8c:a3:18:
eb:a6:b2:53:2d:84:a6:e6:05:cc:7c:26:41:f9:b2:d4:4b:6f:
64:70:6f:bc:46:c8:fc:b3:18:b8:92:9b:df:91:05:69:c0:53:
03:fc:db:1e:d2:ac:f1:fa:7b:2a:64:c6:04:9c:35:7e:b3:ae:
e8:81:67:c7:45:a6:29:ad:13:85:17:59:34:04:a0:bc:8a:fd:
21:60:a7:68
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHF+RTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDEw
MTAxMDIyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTQ0NzkxYzM4OWQ3
MGQ4MjljN2EzZDg3OWIzNGY2OGI5Y2Q2NTkxNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKjh7lJaQVe/q3JkFCXDtUbhes9igFlr0DQFmBMsl5R48vpE
vZnvsrB6RQh9H4enTCaN9HFyOS5Pv1LuiJ7nDk+mB7ChbwEQLYWliGOygXvY9tPv
lzJ0Rmne7wcD2FcYA3s/Kmbtt+LeYFjyV6IgVuBmXxtj/cqi7BbtUn9S63a/XDgC
JqjwBTsh6zCGp7C7kABrCnVi5OK3YHRwXoQobFE1vepaUnZ8fP9bWzYL+nWCKh6s
OwaE8o0F2fRXBQMhouoXSD4UZvhfGcCswdbRVOkoVoxtrWoBRjTwpmHFoqhJcs8s
Ml9S6BxZA8yV9qMCsRBO0N4yT8RXgNvQbbOqBr0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSUR5HDidcNgpx6PYebNPaLnNZZFTAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L2xFZVJ3NG5YRFlLY2VqMkhtelQyaTV6V1dSVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRJmjANBgkqhkiG9w0BAQsFAAOC
AQEARnWqkGyoiW5UQ/3CKZ4isjnYYFnPlMvP1GPu925grTxFKE8ru/z15S9JnLvY
4XUH0M0WAAyG66CyM5WUMyicYUMHm5M0lQu+UezJoL1khPhyix87+ly81ijO/4hY
+ZibKakS9eETd3qV1eUCTOlJyqttC/ZyWrU7lcQu1sbZPhJksAwUhIc3PYqq3oFL
jZXDXJ/KyimRsMRk2VuyvQQhTTjdTM8aL7NsumwACXCIzuaFjKMY66ayUy2EpuYF
zHwmQfmy1EtvZHBvvEbI/LMYuJKb35EFacBTA/zbHtKs8fp7KmTGBJw1frOu6IFn
x0WmKa0ThRdZNASgvIr9IWCnaA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org