Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/PEOC5dsTBBvFmM6gNqdBXEyPB1k.roa
File: PEOC5dsTBBvFmM6gNqdBXEyPB1k.roa (raw, json)
Hash identifier: sv0zw4eQ0QtVLYccQzSXo29Q2YGn5Ws84dsxsOAo1c4=
Subject key identifier: 3C:43:82:E5:DB:13:04:1B:C5:98:CE:A0:36:A7:41:5C:4C:8F:07:59
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 03CFA91F
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/PEOC5dsTBBvFmM6gNqdBXEyPB1k.roa
Signing time: Sat 01 Jan 2022 14:04:25 +0000
ROA not before: Sat 01 Jan 2022 14:04:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209588
IP address blocks: 45.129.136.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63940895 (0x3cfa91f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 14:04:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c4382e5db13041bc598cea036a7415c4c8f0759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:82:c1:1e:d9:37:d6:9e:72:e1:2f:63:99:
c4:32:c8:e6:5d:d6:73:c0:60:0f:ed:93:ca:9a:e9:
b3:4b:48:69:e1:83:35:6a:13:25:ab:3c:80:c1:eb:
52:84:78:10:65:2b:80:2d:7b:8d:74:56:38:41:4b:
6e:14:94:6b:92:de:27:2c:30:56:4c:d1:d0:93:1d:
68:11:cd:c5:4e:55:1a:79:6e:e9:3f:b4:a7:9e:bd:
9c:1e:5c:44:ad:12:14:ef:95:b9:db:11:4d:b1:85:
c2:c5:c5:34:2a:e9:b5:92:a0:ae:5f:0b:51:6c:f0:
80:a0:38:34:5f:15:3b:bc:23:88:05:e5:cb:d9:a5:
b8:2b:84:50:c2:61:4a:dd:18:97:24:d6:8a:29:3a:
bc:12:61:f2:9a:aa:af:27:de:47:25:a7:ff:18:91:
08:26:19:2d:e1:f8:ab:de:04:8c:57:dc:43:54:81:
ad:71:9e:53:38:9e:63:b6:88:39:33:b1:85:87:73:
3d:49:45:27:64:54:33:5c:cc:19:db:31:33:02:99:
d5:79:02:de:0a:0c:8a:4f:08:d2:59:dd:a2:0d:5f:
9e:4a:3d:e0:9a:22:e5:f4:36:1b:5e:98:e5:34:0f:
76:11:14:be:11:22:e2:e6:32:10:96:82:9b:79:66:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:43:82:E5:DB:13:04:1B:C5:98:CE:A0:36:A7:41:5C:4C:8F:07:59
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/PEOC5dsTBBvFmM6gNqdBXEyPB1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.136.0/24
Signature Algorithm: sha256WithRSAEncryption
87:20:ab:6d:56:37:e4:06:56:f8:93:92:21:c3:6b:96:0d:13:
9a:83:33:5e:2d:2e:cb:99:a0:29:49:d7:0f:63:b6:9a:e9:e7:
76:1b:df:98:37:0b:af:4f:a8:17:72:9c:53:e4:5c:4f:4b:9b:
17:33:c3:d5:90:3c:1a:e2:71:a8:8e:81:0e:3c:75:d2:db:ee:
57:79:10:09:71:ff:09:2f:7c:4b:fb:26:eb:e5:69:f4:23:52:
fc:70:c1:a1:8c:70:a4:8c:e0:29:fe:8c:38:1a:44:00:44:8c:
e8:ba:33:b1:32:0a:4b:21:5b:a4:f6:83:39:cb:e3:29:98:68:
a9:a9:8d:d8:d5:c6:e4:a5:bd:fd:0b:d7:b1:94:89:db:8c:8c:
9e:ec:a5:b7:91:47:19:18:d6:2e:61:0a:cc:59:57:60:d7:09:
9a:f6:02:60:d3:a9:46:13:91:33:47:8a:9c:13:8e:7a:8a:aa:
65:7d:c2:95:cc:68:c6:e6:e5:fd:3f:25:34:2a:23:3b:46:c0:
4a:3f:ca:7c:9b:3b:1e:28:0a:34:63:44:8b:88:2b:7c:d9:a1:
af:46:2b:70:4c:ef:df:e6:bf:a8:2f:12:a3:3a:88:4a:3c:bf:
11:6c:7e:91:dc:5b:5e:40:28:b1:b2:89:91:94:50:29:81:0e:
5d:36:67:b0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA8+pHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NDU1ZDdmZWU0YTQ5OWVjYWYxMWQyZDNkYThlMzg5ZGUzMjM0MTJmMB4XDTIyMDEw
MTE0MDQyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2M0MzgyZTVkYjEz
MDQxYmM1OThjZWEwMzZhNzQxNWM0YzhmMDc1OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKvTgsEe2TfWnnLhL2OZxDLI5l3Wc8BgD+2Typrps0tIaeGD
NWoTJas8gMHrUoR4EGUrgC17jXRWOEFLbhSUa5LeJywwVkzR0JMdaBHNxU5VGnlu
6T+0p569nB5cRK0SFO+VudsRTbGFwsXFNCrptZKgrl8LUWzwgKA4NF8VO7wjiAXl
y9mluCuEUMJhSt0YlyTWiik6vBJh8pqqryfeRyWn/xiRCCYZLeH4q94EjFfcQ1SB
rXGeUzieY7aIOTOxhYdzPUlFJ2RUM1zMGdsxMwKZ1XkC3goMik8I0lndog1fnko9
4Joi5fQ2G16Y5TQPdhEUvhEi4uYyEJaCm3lm3cUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ8Q4Ll2xMEG8WYzqA2p0FcTI8HWTAfBgNVHSMEGDAWgBQkVdf+5KSZ7K8R
0tPajjid4yNBLzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pGWFhfdVNrbWV5dkVkTFQybzQ0bmVNalFTOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGMvM2ZmYjc2LTk5MzEtNDk0Mi05ZGExLTFlMDQ2NTUxM2I2My8x
L1BFT0M1ZHNUQkJ2Rm1NNmdOcWRCWEV5UEIxay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMv
M2ZmYjc2LTk5MzEtNDk0Mi05ZGExLTFlMDQ2NTUxM2I2My8xL0pGWFhfdVNrbWV5
dkVkTFQybzQ0bmVNalFTOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2BiDANBgkqhkiG9w0BAQsFAAOC
AQEAhyCrbVY35AZW+JOSIcNrlg0TmoMzXi0uy5mgKUnXD2O2munndhvfmDcLr0+o
F3KcU+RcT0ubFzPD1ZA8GuJxqI6BDjx10tvuV3kQCXH/CS98S/sm6+Vp9CNS/HDB
oYxwpIzgKf6MOBpEAESM6LozsTIKSyFbpPaDOcvjKZhoqamN2NXG5KW9/QvXsZSJ
24yMnuylt5FHGRjWLmEKzFlXYNcJmvYCYNOpRhORM0eKnBOOeoqqZX3Clcxoxubl
/T8lNCojO0bASj/KfJs7HigKNGNEi4grfNmhr0YrcEzv3+a/qC8SozqISjy/EWx+
kdxbXkAosbKJkZRQKYEOXTZnsA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:35 2023 by rpki-client on console-fra.rpki-client.org