Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/PAWGIyeg7uHCTKQVCHH8HYCSCAA.roa
File: PAWGIyeg7uHCTKQVCHH8HYCSCAA.roa (raw, json)
Hash identifier: NEXpHmqZeEiqjxhhGkofyHqoLEQlyP994Cm2xyJV2/Q=
Subject key identifier: 3C:05:86:23:27:A0:EE:E1:C2:4C:A4:15:08:71:FC:1D:80:92:08:00
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13C3457B
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/PAWGIyeg7uHCTKQVCHH8HYCSCAA.roa
Signing time: Wed 16 Feb 2022 12:14:27 +0000
ROA not before: Wed 16 Feb 2022 12:14:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.220.236.0/22 maxlen: 24
185.129.116.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331564411 (0x13c3457b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 16 12:14:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c05862327a0eee1c24ca4150871fc1d80920800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:30:6b:ca:cd:85:39:44:de:aa:4a:97:9c:
56:0a:6a:5c:17:32:5d:33:0a:07:b4:df:44:ea:d1:
5e:8b:e1:11:33:cd:f9:3b:47:4c:8c:d9:f8:41:7d:
c7:98:94:3e:bc:7e:c0:cb:bd:97:e0:8e:82:89:a7:
bc:4c:be:02:f4:ec:6e:44:c9:8d:9e:05:02:06:a3:
b5:89:04:47:29:dc:db:71:59:cd:08:79:20:d7:fe:
d8:7b:bb:78:07:19:a3:7f:07:1f:8e:c9:d9:5b:c3:
bd:6d:a4:7c:6a:4f:64:95:92:79:06:87:02:71:6a:
8a:0d:18:3f:27:ae:5a:65:52:1e:3a:15:78:13:c8:
4c:8e:38:72:df:11:2d:cb:f3:7a:14:59:83:ab:ff:
3f:01:b8:8d:d6:1b:5b:94:73:67:76:fb:b1:c8:08:
43:17:c3:a1:9c:1b:85:4e:5f:6e:67:34:35:ca:86:
10:5f:f9:bf:0f:09:17:0d:06:55:99:df:e7:ca:22:
5d:be:08:9c:7a:03:84:f4:77:df:82:56:00:83:e7:
91:ec:76:af:2a:19:5b:4e:3a:17:47:cd:85:db:be:
6c:b5:75:13:2c:82:6e:8b:61:ac:75:f5:01:18:53:
d9:aa:21:0e:21:c5:f9:a1:cb:ef:ff:e2:20:92:0f:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:05:86:23:27:A0:EE:E1:C2:4C:A4:15:08:71:FC:1D:80:92:08:00
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/PAWGIyeg7uHCTKQVCHH8HYCSCAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.116.0/22
185.220.236.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:37:2d:fb:9c:24:f0:81:67:8b:3e:a6:20:bc:63:1f:eb:61:
3a:4f:6d:8f:ab:cc:c2:a9:1d:ce:d5:e0:b9:78:5a:19:b2:53:
87:b3:c0:53:ed:5f:5c:69:05:2a:83:39:7a:97:44:5c:5f:8a:
a8:44:d8:ae:66:7d:02:4e:78:b0:0b:b4:46:28:0c:fd:bc:5e:
c8:b0:37:d7:54:7a:0a:bf:f8:a1:09:10:8d:fb:50:fa:49:b9:
c3:04:fb:96:b0:c3:89:d0:eb:cc:da:82:e9:ee:44:f6:29:8a:
d4:1b:ae:65:c0:03:d8:01:38:82:3b:ad:61:22:22:06:fb:5b:
b7:d9:78:c2:17:ba:62:c2:1d:24:a0:c6:b5:bc:70:e7:1e:96:
0f:05:4d:17:2b:69:f8:74:b4:bc:70:04:b6:9a:36:d1:c2:60:
95:ea:ed:40:48:b4:aa:8b:a3:d9:92:c2:cc:e2:a2:c9:b1:e6:
d8:8b:42:fa:bf:c4:e0:a9:62:4b:4a:1c:18:f4:21:44:e3:a2:
18:a9:04:c2:19:9a:a4:cd:24:80:92:44:a4:96:d0:c8:2c:28:
ff:5c:f1:29:85:4d:a8:ff:d2:bb:ba:b2:e2:07:9a:48:66:27:
82:30:c8:58:74:df:48:c8:eb:72:d2:ed:f1:5b:fb:08:91:a1:
d4:7d:86:13
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEE8NFezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWMzZGFhMWIxNDg1MGYyZTYxYzU5MmIyMTkxOTE1YTVlNjVhNDc4MB4XDTIyMDIx
NjEyMTQyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2MwNTg2MjMyN2Ew
ZWVlMWMyNGNhNDE1MDg3MWZjMWQ4MDkyMDgwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI7DMGvKzYU5RN6qSpecVgpqXBcyXTMKB7TfROrRXovhETPN
+TtHTIzZ+EF9x5iUPrx+wMu9l+COgomnvEy+AvTsbkTJjZ4FAgajtYkERync23FZ
zQh5INf+2Hu7eAcZo38HH47J2VvDvW2kfGpPZJWSeQaHAnFqig0YPyeuWmVSHjoV
eBPITI44ct8RLcvzehRZg6v/PwG4jdYbW5RzZ3b7scgIQxfDoZwbhU5fbmc0NcqG
EF/5vw8JFw0GVZnf58oiXb4InHoDhPR334JWAIPnkex2ryoZW046F0fNhdu+bLV1
EyyCbothrHX1ARhT2aohDiHF+aHL7//iIJIPpRsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ8BYYjJ6Du4cJMpBUIcfwdgJIIADAfBgNVHSMEGDAWgBQqw9qhsUhQ8uYc
WSshkZFaXmWkeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tzUGFvYkZJVVBMbUhGa3JJWkdSV2w1bHBIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8x
L1BBV0dJeWVnN3VIQ1RLUVZDSEg4SFlDU0NBQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8xL0tzUGFvYkZJVVBM
bUhGa3JJWkdSV2w1bHBIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArmBdAMEArnc7DANBgkqhkiG9w0B
AQsFAAOCAQEAqDct+5wk8IFniz6mILxjH+thOk9tj6vMwqkdztXguXhaGbJTh7PA
U+1fXGkFKoM5epdEXF+KqETYrmZ9Ak54sAu0RigM/bxeyLA311R6Cr/4oQkQjftQ
+km5wwT7lrDDidDrzNqC6e5E9imK1BuuZcAD2AE4gjutYSIiBvtbt9l4whe6YsId
JKDGtbxw5x6WDwVNFytp+HS0vHAEtpo20cJglertQEi0qouj2ZLCzOKiybHm2ItC
+r/E4KliS0ocGPQhROOiGKkEwhmapM0kgJJEpJbQyCwo/1zxKYVNqP/Su7qy4gea
SGYngjDIWHTfSMjrctLt8Vv7CJGh1H2GEw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org