Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/YUs7BNn2y2b0tboV-o1dxAR0yfo.roa
File: YUs7BNn2y2b0tboV-o1dxAR0yfo.roa (raw, json)
Hash identifier: nLQj/yw0cv75edQvP6FW4mNFEIQJL7Zzv5SSFnu24eM=
Subject key identifier: 61:4B:3B:04:D9:F6:CB:66:F4:B5:BA:15:FA:8D:5D:C4:04:74:C9:FA
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 0D0C12A7
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/YUs7BNn2y2b0tboV-o1dxAR0yfo.roa
Signing time: Tue 21 Jun 2022 12:21:44 +0000
ROA not before: Tue 21 Jun 2022 12:21:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44066
IP address blocks: 79.132.136.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218895015 (0xd0c12a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Jun 21 12:21:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=614b3b04d9f6cb66f4b5ba15fa8d5dc40474c9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:db:a5:96:48:fe:0f:d2:60:3c:94:5b:3c:
e4:22:63:51:fc:d6:f9:69:6c:a5:9b:fa:d6:9b:cb:
7c:1b:13:93:45:d4:20:b8:73:24:1f:5c:54:ea:0f:
9d:b2:32:b8:ec:06:38:31:3b:b9:51:2a:18:e8:2a:
3e:1d:53:3c:4c:16:b2:2b:f8:8b:ff:db:08:48:06:
71:ee:68:79:70:aa:3c:e5:73:91:d9:4e:9a:99:82:
d0:a0:94:9a:7a:ae:a4:27:bf:b9:77:04:b2:e8:66:
9a:e2:45:89:56:cb:de:d3:8d:1c:70:cb:86:59:6e:
82:72:cf:65:75:35:0c:9a:11:f0:70:d1:76:e9:4e:
ef:55:3f:95:07:27:af:f8:0b:a3:ca:5a:f5:63:91:
1c:d8:7c:56:bd:ac:d2:0f:fb:12:a5:d3:53:7b:3d:
1b:b2:30:da:13:55:73:58:e8:8e:a9:fd:6b:47:f6:
43:74:c6:1c:49:c8:1f:00:24:95:ce:31:d8:75:62:
50:11:fc:e1:be:e2:e3:b5:61:80:36:76:54:cb:a2:
91:03:11:e5:52:78:4e:fa:bf:c3:6f:ea:cd:d7:88:
e2:7e:7f:5d:38:95:73:81:dd:9f:1a:b6:40:db:dd:
ac:3e:97:46:2f:6c:13:4c:f1:2a:72:58:b3:54:9a:
9c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4B:3B:04:D9:F6:CB:66:F4:B5:BA:15:FA:8D:5D:C4:04:74:C9:FA
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/YUs7BNn2y2b0tboV-o1dxAR0yfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.136.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:14:96:41:b4:14:06:a8:19:de:0f:8b:ab:65:69:5d:e8:a5:
77:03:a8:0c:ed:93:e3:e4:02:d2:09:e8:e0:e0:61:e7:0d:2d:
91:83:e8:ff:79:3e:ce:50:75:a0:62:5b:60:6b:30:2b:6c:53:
37:98:c6:b0:a1:2c:f8:43:d9:bf:fe:df:09:4e:e4:b9:20:1e:
83:31:96:16:1c:12:95:37:de:95:3f:8a:3e:9d:29:ed:6d:70:
11:a7:f3:6b:a8:ee:7e:c8:41:7e:6c:6b:4c:f7:62:de:46:a0:
a1:dd:a4:ad:01:66:7f:61:3e:44:7a:b4:30:fb:b6:1e:6b:dd:
8c:df:06:96:49:ef:b4:b9:ae:b1:a9:0a:2e:a4:6d:09:18:8f:
98:2e:fb:0d:11:31:b4:1c:eb:5b:35:cd:9a:14:51:59:ca:c9:
b9:35:2d:5e:14:2b:f1:9a:7f:b6:0e:13:e5:bc:af:c2:15:ad:
08:1a:d2:6f:4a:42:87:05:f0:d5:d3:a7:6b:e5:ff:e7:32:da:
b9:9f:68:51:a1:a3:ee:45:06:05:4f:b6:69:a2:8a:a8:42:06:
66:b3:77:55:24:29:7f:15:6b:bf:87:80:e1:2b:ea:9f:d9:52:
e7:f5:1b:1b:8d:40:42:1c:5f:ea:80:ef:cb:f2:b3:46:88:34:
f4:e3:dc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:55 2024 by rpki-client on console-ams.rpki-client.org