Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/V_BLbiCJy-MzKak4rMdXMv7ZlNw.roa
File: V_BLbiCJy-MzKak4rMdXMv7ZlNw.roa (raw, json)
Hash identifier: 6qdRsQuTiTOtaaGN24Gnp1ov8781f2CMTwlMMEd8hfY=
Subject key identifier: 57:F0:4B:6E:20:89:CB:E3:33:29:A9:38:AC:C7:57:32:FE:D9:94:DC
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 018572B424720BEC6E3B8E0B40CE3BD5B729
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/V_BLbiCJy-MzKak4rMdXMv7ZlNw.roa
Signing time: Mon 02 Jan 2023 13:38:06 +0000
ROA not before: Mon 02 Jan 2023 13:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200435
IP address blocks: 185.149.13.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:24:72:0b:ec:6e:3b:8e:0b:40:ce:3b:d5:b7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jan 2 13:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57f04b6e2089cbe33329a938acc75732fed994dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:33:bd:2f:14:b4:1d:f0:70:a5:9a:54:d1:
8c:fb:ce:8d:3d:eb:ba:5b:3e:81:cf:3a:1d:50:ca:
58:f2:f7:2e:d7:87:cf:a2:2a:3d:26:02:2d:25:e8:
01:11:9f:c6:f0:c9:e8:a0:59:66:98:f5:24:a6:20:
db:d2:af:16:df:a2:72:03:52:96:55:7e:c6:18:e0:
38:50:7a:17:0e:f3:a7:96:5a:94:a5:31:57:16:bd:
07:44:de:98:7d:1e:9a:d1:1b:dd:a3:c9:63:22:13:
80:85:2d:61:0b:f1:e5:b1:07:c2:69:42:73:3e:71:
61:4b:55:04:93:24:0a:32:36:ec:52:35:92:90:d8:
7f:25:2f:10:8a:d4:c4:3a:5d:13:ff:53:e4:e0:a0:
13:0e:70:ba:6b:d9:b6:24:a1:bd:c2:2a:c9:28:45:
22:89:06:c8:1b:7c:7b:9b:b8:12:c0:59:f7:2a:7d:
7c:96:f2:b0:18:95:9e:c3:5b:0f:fd:01:a3:fd:0a:
a9:13:c6:8d:e9:14:c7:30:19:bb:28:f4:63:dc:b4:
43:ac:c0:5d:ff:f3:d4:73:ed:a7:e8:ed:bc:c9:8f:
6b:00:c2:7e:bd:23:5f:04:1d:47:f1:33:f2:50:bb:
d1:c7:95:bd:fb:42:f5:1c:c2:5c:80:65:1a:01:93:
1e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F0:4B:6E:20:89:CB:E3:33:29:A9:38:AC:C7:57:32:FE:D9:94:DC
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/V_BLbiCJy-MzKak4rMdXMv7ZlNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.13.0/24
Signature Algorithm: sha256WithRSAEncryption
08:4d:0c:54:94:74:31:2e:6d:89:9a:81:32:63:33:b5:4a:7b:
f3:e0:1e:f9:82:05:03:ce:89:74:ec:f0:52:bd:90:4c:da:3a:
70:7c:a1:e2:ac:6a:f7:b7:91:ec:83:8d:6a:bb:67:6a:8d:e4:
68:2e:78:ce:26:c1:6e:47:50:17:01:d7:89:90:be:e8:e0:0d:
c3:07:d1:77:b4:1c:6f:4d:69:54:5c:2c:42:47:60:ff:7f:aa:
3b:5a:75:9b:2a:b6:c0:67:dd:ca:26:ce:8a:12:d2:ea:73:df:
48:dd:f8:cf:85:70:90:60:21:eb:14:ca:ab:c9:7c:ae:ce:59:
81:d9:7a:be:0a:1b:3b:bf:9b:c9:ec:79:19:99:c8:91:82:62:
a4:ef:a8:3c:24:93:20:ff:54:7f:74:99:fe:40:dd:4f:1a:48:
14:0f:19:d7:a0:1b:d2:5c:d2:f9:c6:d8:91:93:f1:39:97:e3:
c8:77:fa:bd:39:e8:2e:83:16:2a:ba:14:08:42:e3:da:37:67:
65:6f:ab:1a:fa:c9:0d:0a:39:9c:f3:49:02:bb:e6:52:a9:7c:
f8:3f:95:d0:18:f5:66:e8:73:8f:71:4c:e7:4a:29:43:f7:11:
30:62:57:96:90:c7:ab:52:a5:f7:4c:b4:2b:a7:84:70:f6:8c:
44:6d:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:31 2024 by rpki-client on console-fra.rpki-client.org