Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/CyyYSIPeW-l7B3x__TyTAnXmxgo.roa
File: CyyYSIPeW-l7B3x__TyTAnXmxgo.roa (raw, json)
Hash identifier: CUKx/L2lxHXbDEacuzl3czAPQ2h+K1Gz3ANJ+Er4IJg=
Subject key identifier: 0B:2C:98:48:83:DE:5B:E9:7B:07:7C:7F:FD:3C:93:02:75:E6:C6:0A
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 04A813EA
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/CyyYSIPeW-l7B3x__TyTAnXmxgo.roa
Signing time: Mon 27 Jun 2022 09:37:40 +0000
ROA not before: Mon 27 Jun 2022 09:37:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399045
IP address blocks: 185.199.157.0/24 maxlen: 24
185.194.179.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78124010 (0x4a813ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 27 09:37:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b2c984883de5be97b077c7ffd3c930275e6c60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b8:1d:93:ab:07:2d:dc:bb:99:88:07:7b:92:
4d:81:20:62:38:2e:33:86:9a:f5:d8:3e:02:bb:43:
f6:85:92:85:96:e5:70:1d:36:8c:ea:89:d7:44:70:
14:2f:29:61:81:e3:57:5a:4a:ed:ed:d4:90:e2:d3:
d8:08:8b:23:d6:23:55:31:7d:42:ce:4d:45:e5:80:
f2:8b:d1:36:06:06:f1:fd:10:af:f2:7e:92:a8:1c:
3d:27:75:59:d5:ac:4f:d0:e1:8c:a8:e7:9b:d7:f4:
11:2e:ad:72:4c:cf:ad:5d:b4:b4:df:3f:e0:91:1a:
97:6e:62:8e:91:0e:26:b0:4c:8c:83:51:d6:5a:bb:
3f:60:22:b5:2f:fb:30:f0:a4:91:5c:e6:08:66:17:
3a:25:3f:95:78:fa:e6:dc:b9:2c:cb:53:18:4b:64:
8e:59:70:b2:6b:43:57:6e:47:c8:73:58:b8:bb:0b:
b5:01:a1:8f:6c:36:3a:3a:5f:bf:90:c8:c6:79:a0:
3a:ce:c7:20:0f:fb:d1:12:da:06:15:4a:04:72:4c:
62:ca:3a:94:2d:4e:c6:3a:f3:9a:b2:f3:d3:96:17:
bc:99:0e:96:91:3f:1d:17:1b:6f:69:ea:53:d2:56:
82:59:a6:07:3c:96:c2:d6:d0:00:98:2a:17:e3:96:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2C:98:48:83:DE:5B:E9:7B:07:7C:7F:FD:3C:93:02:75:E6:C6:0A
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/CyyYSIPeW-l7B3x__TyTAnXmxgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.179.0/24
185.199.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d9:6d:61:b4:c2:5d:26:9f:73:d8:cf:ab:7f:6d:30:b9:19:
8c:b9:c0:0b:92:82:4e:e9:f5:4c:13:8b:83:fc:38:49:3c:7b:
c8:cd:ea:a6:ff:02:ac:d9:e6:82:fe:3a:d8:42:fc:bc:ba:a4:
c3:65:db:5d:e6:ac:08:56:f6:01:dd:cc:b6:b0:22:31:3b:40:
5e:f5:6c:20:41:15:4e:ba:55:59:e9:c6:22:e7:fa:53:5e:4c:
78:ac:2d:f7:a8:3c:56:e5:89:15:21:2f:1a:4d:a9:52:bc:1e:
13:91:d8:cc:4a:b2:10:a9:76:4b:be:ea:c7:e6:4e:e9:39:a2:
bb:c0:36:c7:ec:9e:c8:18:d1:b5:34:0e:c5:96:38:18:ec:7b:
5f:6b:6f:a8:18:fe:67:57:df:3e:b9:7f:7c:f3:76:5a:4e:d0:
cb:ee:b9:94:39:44:02:bc:24:9a:fb:17:d0:17:7a:9e:b8:d0:
10:32:d0:e5:da:b5:52:70:b4:ca:0c:49:33:40:cf:06:57:44:
79:55:85:cd:78:d5:79:c6:88:3b:75:36:37:05:97:93:4f:65:
9a:44:21:8f:c6:0a:b0:b0:89:78:dd:eb:93:bd:fb:37:77:be:
78:04:17:12:d7:90:c5:07:e0:50:0d:c2:10:55:f6:ae:d2:31:
c4:9e:15:5b
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBKgT6jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NjhiZmI4YTVlZWU0OTA4MmVhNjI4ZGYyNWE0YTVkNTBmM2FhOWIzMB4XDTIyMDYy
NzA5Mzc0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGIyYzk4NDg4M2Rl
NWJlOTdiMDc3YzdmZmQzYzkzMDI3NWU2YzYwYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJC4HZOrBy3cu5mIB3uSTYEgYjguM4aa9dg+ArtD9oWShZbl
cB02jOqJ10RwFC8pYYHjV1pK7e3UkOLT2AiLI9YjVTF9Qs5NReWA8ovRNgYG8f0Q
r/J+kqgcPSd1WdWsT9DhjKjnm9f0ES6tckzPrV20tN8/4JEal25ijpEOJrBMjINR
1lq7P2AitS/7MPCkkVzmCGYXOiU/lXj65ty5LMtTGEtkjllwsmtDV25HyHNYuLsL
tQGhj2w2Ojpfv5DIxnmgOs7HIA/70RLaBhVKBHJMYso6lC1OxjrzmrLz05YXvJkO
lpE/HRcbb2nqU9JWglmmBzyWwtbQAJgqF+OWGo0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQLLJhIg95b6XsHfH/9PJMCdebGCjAfBgNVHSMEGDAWgBQ2i/uKXu5JCC6m
KN8lpKXVDzqpszAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05vdjdpbDd1U1FndXBpamZKYVNsMVE4NnFiTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvYWE1OGMzLWU3MDYtNGE0OS1hN2M1LTBhZTJlOTIyYTI5Mi8x
L0N5eVlTSVBlVy1sN0IzeF9fVHlUQW5YbXhnby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUv
YWE1OGMzLWU3MDYtNGE0OS1hN2M1LTBhZTJlOTIyYTI5Mi8xL05vdjdpbDd1U1Fn
dXBpamZKYVNsMVE4NnFiTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALnCswMEALnHnTANBgkqhkiG9w0B
AQsFAAOCAQEAi9ltYbTCXSafc9jPq39tMLkZjLnAC5KCTun1TBOLg/w4STx7yM3q
pv8CrNnmgv462EL8vLqkw2XbXeasCFb2Ad3MtrAiMTtAXvVsIEEVTrpVWenGIuf6
U15MeKwt96g8VuWJFSEvGk2pUrweE5HYzEqyEKl2S77qx+ZO6Tmiu8A2x+yeyBjR
tTQOxZY4GOx7X2tvqBj+Z1ffPrl/fPN2Wk7Qy+65lDlEArwkmvsX0Bd6nrjQEDLQ
5dq1UnC0ygxJM0DPBldEeVWFzXjVecaIO3U2NwWXk09lmkQhj8YKsLCJeN3rk737
N3e+eAQXEteQxQfgUA3CEFX2rtIxxJ4VWw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:26 2023 by rpki-client on console-fra.rpki-client.org