Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/gMbuk1xRRAdzLA-oLLFgJXjwG40.roa
File: gMbuk1xRRAdzLA-oLLFgJXjwG40.roa (raw, json)
Hash identifier: 5NwwrhWvi9y+5cxRLTr2T7Kj/wwOozR1r2inzQ5I+kM=
Subject key identifier: 80:C6:EE:93:5C:51:44:07:73:2C:0F:A8:2C:B1:60:25:78:F0:1B:8D
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 01856FF97FBD750D70BE34DB4FB7A92A4AB8
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/gMbuk1xRRAdzLA-oLLFgJXjwG40.roa
Signing time: Mon 02 Jan 2023 00:55:00 +0000
ROA not before: Mon 02 Jan 2023 00:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34143
IP address blocks: 83.142.208.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:7f:bd:75:0d:70:be:34:db:4f:b7:a9:2a:4a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: Jan 2 00:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80c6ee935c514407732c0fa82cb1602578f01b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:db:0f:f8:91:8e:df:d1:5a:d2:d6:06:17:c5:
11:cf:b7:be:ae:71:2b:d6:b9:4d:cc:18:17:ab:1d:
9b:86:85:8c:06:24:18:c0:d9:7d:c1:bf:83:39:6e:
06:e9:90:e0:5f:b7:59:07:6a:e6:1b:84:af:33:e4:
6c:fb:54:68:06:59:f7:39:ef:35:36:c9:c9:1e:ee:
4c:08:26:1b:82:1d:92:c2:df:4c:f4:f4:ec:c5:c9:
09:ed:38:06:f8:25:a2:b6:b1:68:ad:c2:fe:f4:53:
11:60:ca:1f:67:84:ab:7e:38:5c:c7:66:8c:4c:7e:
ac:61:ac:99:a8:bc:38:7b:c4:ea:19:00:9b:b8:54:
8f:d1:7e:3e:15:b0:d8:54:2c:67:42:78:1d:bd:64:
ba:fc:2b:66:c5:21:c0:7a:30:a5:da:f0:a6:b3:3f:
4f:14:a5:d5:cc:66:6e:fc:a5:16:65:d1:64:0f:8d:
4a:f2:9a:6a:05:57:f8:2e:e3:0d:c8:c5:94:d7:e4:
06:33:65:a0:f4:2b:2b:55:e3:46:85:79:52:03:14:
d8:48:21:b1:ff:4e:57:85:f5:67:51:19:b5:67:b9:
fb:b1:f3:9e:f6:b6:b4:61:e2:0a:65:f6:8d:6f:a9:
c9:5d:2e:5e:89:08:d5:ea:04:01:45:fd:0c:eb:6d:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C6:EE:93:5C:51:44:07:73:2C:0F:A8:2C:B1:60:25:78:F0:1B:8D
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/gMbuk1xRRAdzLA-oLLFgJXjwG40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.208.0/21
Signature Algorithm: sha256WithRSAEncryption
57:c0:ca:2c:93:e1:71:8d:bc:f6:8c:73:8f:25:86:9d:09:fa:
57:c7:f2:ba:26:dc:2b:60:33:07:26:da:b1:d9:19:75:a7:5f:
b9:cf:c3:ed:7e:50:02:4d:45:16:36:7a:7f:31:e1:fa:aa:72:
77:1d:39:26:ff:04:e4:15:69:40:97:c5:6f:a1:32:0f:12:5f:
af:c1:79:6e:08:53:df:7a:60:63:45:35:22:23:77:45:44:8f:
8f:da:d5:e4:19:d0:cc:69:30:b9:1a:a6:2b:8e:ba:53:84:0e:
5f:68:8b:a0:68:ee:c1:c4:70:e7:24:79:c8:a6:7d:29:37:74:
45:05:fe:3f:8c:2e:c1:f2:3d:25:b8:30:b0:fe:27:71:29:1f:
6c:81:fc:6d:35:22:db:66:bd:5a:10:57:da:4f:0a:e5:54:d7:
78:59:39:64:e1:2f:8c:13:8e:94:b3:bb:f3:43:ed:31:e7:a2:
f2:c0:f8:ac:ce:5e:c0:bf:4a:11:24:3b:40:92:48:6d:b3:af:
f7:3e:99:bb:a9:ea:21:d4:37:e6:18:32:42:7c:d2:06:44:0c:
65:d2:7c:8a:a0:ab:fd:49:5a:29:97:57:03:cc:f4:3b:f0:60:
2e:e4:d6:9a:5d:50:8a:fc:1c:f2:f5:28:e7:15:3b:ab:63:a9:
e4:cc:65:18
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 28 09:30:48 2023 by rpki-client on console-fra.rpki-client.org