Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/006i8SijIzByuoosspH_q6FdT4Q.roa
File: 006i8SijIzByuoosspH_q6FdT4Q.roa (raw, json)
Hash identifier: edxVgYb3es4tFcWO7SArRWjZKdG6V3z6V1yX6d1P9yo=
Subject key identifier: D3:4E:A2:F1:28:A3:23:30:72:BA:8A:2C:B2:91:FF:AB:A1:5D:4F:84
Certificate issuer: /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial: 018572D5C0BF1A792BC31B5345A80A16FAE1
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/006i8SijIzByuoosspH_q6FdT4Q.roa
Signing time: Mon 02 Jan 2023 14:14:49 +0000
ROA not before: Mon 02 Jan 2023 14:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56974
IP address blocks: 185.44.229.0/24 maxlen: 24
185.44.228.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:c0:bf:1a:79:2b:c3:1b:53:45:a8:0a:16:fa:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Validity
Not Before: Jan 2 14:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d34ea2f128a3233072ba8a2cb291ffaba15d4f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:84:fa:0d:9e:29:0c:0c:01:97:9f:38:d3:
f2:4d:ef:d3:ef:3c:8d:e4:7a:4f:a2:1e:cb:07:16:
16:ac:75:8d:44:70:f1:6c:67:4b:88:f8:f9:db:ad:
72:d6:a9:f1:e0:1e:83:c1:6d:d3:fd:e0:dc:9e:6c:
ec:b4:88:c3:b7:2b:a8:2c:bd:73:fd:d2:37:b7:9a:
51:3f:e1:9b:db:60:a6:4f:5c:ef:d9:0a:fc:c2:7f:
15:c8:9f:56:04:51:e2:05:c9:95:c9:81:41:3d:d8:
14:07:03:a4:86:06:79:04:46:15:36:5f:de:50:86:
3e:68:f6:a2:e5:d8:1d:31:98:0b:1e:bf:b4:e6:6b:
8d:48:2d:e6:72:be:87:6a:61:c9:fa:db:56:fe:77:
05:c5:78:9b:ad:40:0d:25:5e:37:da:ee:45:5d:cf:
46:c4:f1:33:8b:0d:a8:22:c9:d0:08:ec:48:a6:5f:
26:51:a7:0c:c2:a8:49:64:ac:c9:bd:64:35:89:a8:
e2:07:70:1c:21:5c:7f:3b:21:be:ae:10:62:db:d9:
e0:16:7a:45:99:9f:9a:f3:d9:92:0c:bb:e1:92:2d:
2b:71:65:11:ea:ba:da:55:fd:a3:37:25:40:df:09:
6d:9d:1b:1e:c6:2e:83:95:93:86:07:e0:ac:06:32:
55:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4E:A2:F1:28:A3:23:30:72:BA:8A:2C:B2:91:FF:AB:A1:5D:4F:84
X509v3 Authority Key Identifier:
keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/006i8SijIzByuoosspH_q6FdT4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.228.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:3d:2a:f9:9c:98:f0:99:71:9d:14:77:2c:3f:d2:8b:24:ff:
6a:ab:96:2b:e9:62:7d:42:cb:7e:88:a3:3d:f0:5d:4d:4d:63:
cc:f1:25:b3:d0:2b:ab:ee:d8:74:89:93:b8:fc:b2:41:d0:19:
d3:25:c0:dd:bb:f9:de:20:d4:98:6e:39:06:ca:f3:e5:96:89:
53:b4:2c:29:4b:1e:41:8d:77:34:3f:77:47:77:e3:32:9d:ef:
f1:78:ee:77:13:a0:a3:a7:4c:4b:6c:55:0c:76:75:f6:44:49:
8b:00:ac:53:8d:41:74:3a:b7:0b:e6:3f:d6:96:41:25:8f:55:
63:23:ee:73:d2:45:0f:b2:d7:b6:4e:f0:f1:71:ed:15:f1:b2:
7a:f9:17:32:30:90:44:12:6a:78:83:95:62:60:d4:1e:f6:8d:
db:33:d4:fe:8c:bb:a4:85:30:19:1b:74:47:02:37:99:4b:fb:
25:ad:1a:97:fa:34:11:40:95:3a:20:88:f0:7e:c9:b3:24:f8:
d0:60:94:35:07:74:b4:10:35:01:39:e9:e5:78:22:5e:db:32:
ab:1b:fd:1f:5f:9a:2b:98:c0:bf:cd:89:4e:67:c6:97:0e:bd:
87:98:00:2e:02:11:15:f2:20:98:7d:31:1b:34:f8:86:98:8d:
24:d2:98:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy1cC/GnkrwxtTRagKFvrhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMjM4NjBlMjBjZGIyY2ZkZjJjZWZiMzc1M2ExNWI4MjI4
MjkyNjYwHhcNMjMwMTAyMTQxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzRlYTJmMTI4YTMyMzMwNzJiYThhMmNiMjkxZmZhYmExNWQ0Zjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6SE+g2eKQwMAZefONPyTe/T7zyN
5HpPoh7LBxYWrHWNRHDxbGdLiPj5261y1qnx4B6DwW3T/eDcnmzstIjDtyuoLL1z
/dI3t5pRP+Gb22CmT1zv2Qr8wn8VyJ9WBFHiBcmVyYFBPdgUBwOkhgZ5BEYVNl/e
UIY+aPai5dgdMZgLHr+05muNSC3mcr6HamHJ+ttW/ncFxXibrUANJV432u5FXc9G
xPEziw2oIsnQCOxIpl8mUacMwqhJZKzJvWQ1iajiB3AcIVx/OyG+rhBi29ngFnpF
mZ+a89mSDLvhki0rcWUR6rraVf2jNyVA3wltnRsexi6DlZOGB+CsBjJVeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNNOovEooyMwcrqKLLKR/6uhXU+EMB8GA1UdIwQY
MBaAFOEjhg4gzbLP3yzvs3U6FbgigpJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFNPR0RpRE5zc19mTE8temRUb1Z1Q0tDa21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84MTA1OTktNzMxYS00ODZhLWIyM2Yt
NDc1MzdlYjY0NGY1LzEvMDA2aThTaWpJekJ5dW9vc3NwSF9xNkZkVDRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84MTA1OTktNzMxYS00ODZhLWIyM2YtNDc1MzdlYjY0NGY1
LzEvNFNPR0RpRE5zc19mTE8temRUb1Z1Q0tDa21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSzkMA0G
CSqGSIb3DQEBCwUAA4IBAQDTPSr5nJjwmXGdFHcsP9KLJP9qq5Yr6WJ9Qst+iKM9
8F1NTWPM8SWz0Cur7th0iZO4/LJB0BnTJcDdu/neINSYbjkGyvPllolTtCwpSx5B
jXc0P3dHd+Myne/xeO53E6Cjp0xLbFUMdnX2REmLAKxTjUF0OrcL5j/WlkElj1Vj
I+5z0kUPste2TvDxce0V8bJ6+RcyMJBEEmp4g5ViYNQe9o3bM9T+jLukhTAZG3RH
AjeZS/slrRqX+jQRQJU6IIjwfsmzJPjQYJQ1B3S0EDUBOenleCJe2zKrG/0fX5or
mMC/zYlOZ8aXDr2HmAAuAhEV8iCYfTEbNPiGmI0k0php
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:02 2024 by rpki-client on console-fra.rpki-client.org