Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/EIlPPquwD36V8YmSXG9gIkOJbZI.roa
File: EIlPPquwD36V8YmSXG9gIkOJbZI.roa (raw, json)
Hash identifier: idbx2WO9ybOIQXtNWzo+WDMvj5hmhFex8xQI3KzENI0=
Subject key identifier: 10:89:4F:3E:AB:B0:0F:7E:95:F1:89:92:5C:6F:60:22:43:89:6D:92
Certificate issuer: /CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Certificate serial: 018D8430EEF21EEDE3A27492FA0C0C1AA455
Authority key identifier: 61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/EIlPPquwD36V8YmSXG9gIkOJbZI.roa
Signing time: Wed 07 Feb 2024 15:30:15 +0000
ROA not before: Wed 07 Feb 2024 15:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 62.233.56.0/24 maxlen: 24
91.226.247.0/24 maxlen: 24
146.19.152.0/24 maxlen: 24
185.198.153.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:30:ee:f2:1e:ed:e3:a2:74:92:fa:0c:0c:1a:a4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Validity
Not Before: Feb 7 15:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10894f3eabb00f7e95f189925c6f602243896d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:8e:0a:3c:da:2d:4d:29:c6:72:71:b4:e4:
83:ef:bb:00:cc:41:7a:e6:f2:51:2f:dc:18:7c:b3:
01:8b:92:72:49:70:7c:98:ec:e0:8e:98:aa:80:31:
5b:6f:a1:81:35:6a:ca:d0:90:2a:a5:ee:c0:d1:37:
1d:7e:d4:5e:85:d3:e5:9a:dd:36:34:97:69:13:4a:
1c:8b:78:f1:88:52:01:0a:8b:5d:df:91:77:c8:8c:
81:f7:b4:9e:2f:f0:9a:e6:b7:71:3a:ee:35:b1:0c:
e9:fd:2a:84:4d:2f:19:72:c0:34:15:c3:7e:65:32:
b8:04:e4:f1:2b:1f:8d:ce:65:86:6e:ac:ea:e1:c9:
cc:87:c1:85:e1:60:c8:b7:5f:1b:a9:ab:2c:d2:8d:
eb:e9:53:00:3a:4a:0a:c4:5d:78:14:05:20:e3:d8:
b2:43:c1:74:53:27:8a:6b:c8:45:f9:75:9f:41:75:
5d:c3:3e:ad:04:78:fa:dc:8c:c6:00:7a:a5:84:60:
71:9a:dd:53:5a:fb:32:91:c4:60:da:d0:28:22:47:
cd:d7:b0:28:ae:c8:e8:ab:e0:85:ea:b0:2a:67:89:
f6:2b:fb:b2:bd:ea:e8:b6:67:45:83:2b:73:a5:68:
e3:7f:25:ed:9d:34:8d:23:d3:05:e5:3c:fa:91:9b:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:89:4F:3E:AB:B0:0F:7E:95:F1:89:92:5C:6F:60:22:43:89:6D:92
X509v3 Authority Key Identifier:
keyid:61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/EIlPPquwD36V8YmSXG9gIkOJbZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/YVREgdO-f8pegKVkrZPBuKL2Nvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.56.0/24
91.226.247.0/24
146.19.152.0/24
185.198.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:95:f3:b9:27:b4:fb:6b:74:f5:ce:8f:23:8e:3a:85:4b:48:
90:c2:90:58:7e:98:bf:4a:3e:51:37:81:71:53:1c:0a:13:73:
7a:d1:40:be:75:5b:3d:37:9e:02:8f:74:aa:5f:dd:c9:c8:73:
68:82:3c:5a:99:6e:82:5a:c1:b0:85:99:e8:b4:8d:c7:5d:93:
d4:f9:a3:c0:4f:9a:00:2b:04:89:82:ca:f7:81:c5:47:3c:42:
3e:63:25:3f:5f:28:68:19:32:78:30:54:94:6f:83:09:bc:e6:
16:86:6d:9e:a3:be:db:7d:16:fe:30:f3:ff:cd:12:33:34:08:
81:b8:d1:04:84:be:e2:de:b6:cd:1b:2a:31:aa:81:52:e5:3f:
93:5c:61:03:36:5c:56:1e:0d:21:ff:15:a1:87:14:a8:89:51:
9c:db:2a:94:77:e2:7d:5e:8d:27:45:75:87:ba:1c:d1:2d:8b:
0a:5d:58:57:bf:68:fe:ab:c5:a3:cf:26:d0:9b:f3:a6:c2:48:
af:6c:63:67:03:bb:5c:04:f5:6f:0a:d5:c5:32:d6:74:d4:01:
35:c7:f6:41:01:18:bf:60:4a:be:05:6c:21:31:27:c3:92:be:
44:a5:84:c6:7c:9c:08:78:50:d8:29:68:4f:15:e1:ba:a4:d9:
05:0c:e3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 20:24:01 2024 by rpki-client on console-fra.rpki-client.org