Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/LYAY7DiOoBMh5mmbdjqk1CJ-2i8.roa
File: LYAY7DiOoBMh5mmbdjqk1CJ-2i8.roa (raw, json)
Hash identifier: K4QWpK0nGL9PWoplAnmfdbigbw2OPODy423y1eS38Eg=
Subject key identifier: 2D:80:18:EC:38:8E:A0:13:21:E6:69:9B:76:3A:A4:D4:22:7E:DA:2F
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01871CB74A26AB99BC1E09FF0CF1FFA4647A
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/LYAY7DiOoBMh5mmbdjqk1CJ-2i8.roa
Signing time: Sun 26 Mar 2023 06:59:46 +0000
ROA not before: Sun 26 Mar 2023 06:59:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 95.82.8.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1c:b7:4a:26:ab:99:bc:1e:09:ff:0c:f1:ff:a4:64:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Mar 26 06:59:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d8018ec388ea01321e6699b763aa4d4227eda2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:e2:6d:bb:41:e7:3c:b0:ab:88:60:87:e4:
89:67:8f:d7:1d:1e:3c:7d:d0:92:86:0d:a4:e8:6a:
12:94:ae:42:67:fe:0f:d7:72:d7:b9:c4:37:65:53:
3b:50:3c:c5:5f:3c:63:ad:9a:a6:30:3d:73:b5:9c:
fa:73:1c:3e:1c:61:8a:b0:63:39:5c:e3:3f:6a:90:
fc:72:f9:79:d9:ef:8c:ea:0d:5f:45:c6:cb:7f:01:
db:c3:b9:16:0b:40:ea:33:1a:4a:76:3f:d6:3e:1c:
68:a6:6c:d7:33:6e:a6:6b:af:87:7c:be:29:9f:e8:
9b:be:35:49:79:fa:2d:8d:ee:bd:34:52:04:46:15:
d4:c0:8e:7f:45:fe:39:ce:17:9f:dd:06:04:da:4c:
b0:9f:bc:7a:b7:33:21:37:7f:7b:38:28:78:3c:02:
04:f7:11:26:d3:23:59:64:9d:8f:0c:6d:eb:c7:6f:
5b:38:73:30:0f:ba:59:ba:b4:5a:6c:ba:b7:22:8d:
f3:32:aa:85:fa:1a:07:2c:e8:a9:5f:42:1b:b5:94:
ca:32:54:59:50:b5:8e:71:cc:e7:26:90:53:00:6a:
08:a5:4f:88:12:95:12:3d:15:dc:33:6a:8c:80:e3:
90:d8:ba:7f:7b:8e:6f:20:31:35:b2:11:ce:05:b3:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:80:18:EC:38:8E:A0:13:21:E6:69:9B:76:3A:A4:D4:22:7E:DA:2F
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/LYAY7DiOoBMh5mmbdjqk1CJ-2i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.8.0/21
Signature Algorithm: sha256WithRSAEncryption
42:e8:ad:93:dc:7a:a5:8e:df:4b:f1:ff:69:26:12:7d:00:08:
e1:c5:4e:dc:6d:74:a6:0a:aa:03:e8:6b:4b:d9:d5:ef:f9:7d:
7b:ab:ae:73:9d:ea:33:bb:54:8d:ce:f4:56:bb:4d:fc:8b:b0:
cd:44:3b:e7:aa:4c:ae:9a:80:2a:d0:0a:ad:ba:49:27:39:ea:
04:17:27:c4:79:b3:ee:82:9b:4c:f0:4b:cb:cd:58:49:20:29:
21:fb:d3:fb:ce:e4:17:f8:e8:43:f4:b7:91:0e:1f:de:7f:70:
56:fb:59:75:23:a2:da:71:47:df:98:99:90:30:c2:67:a8:26:
e7:e9:bd:ca:7b:63:92:c2:0e:95:57:d1:cb:32:b7:08:c0:29:
46:b0:5b:34:77:cd:93:d7:42:f2:07:f2:4a:fe:c8:62:d6:19:
9c:20:3e:e2:91:62:81:ab:26:9c:31:ac:98:76:91:f4:43:49:
6b:ac:ad:54:a1:16:6d:d7:ae:53:12:84:bb:16:6e:56:6a:fa:
36:3b:77:f2:77:29:1e:7d:a7:a8:70:55:cd:25:98:46:29:2c:
85:65:1f:2a:8a:33:4e:0f:86:d0:8a:e0:e1:cf:5d:49:34:6d:
fa:3b:36:81:40:18:e1:bd:5b:2b:7c:56:8b:b7:02:db:17:40:
ad:6b:bc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:18 2025 by rpki-client