Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/GaWTbAAtV89D193zo60Dzu3W_QU.roa
File: GaWTbAAtV89D193zo60Dzu3W_QU.roa (raw, json)
Hash identifier: dIk2m1WFlhPFdLiMuzow8fjmjjY57J4umomvXNjhZBA=
Subject key identifier: 19:A5:93:6C:00:2D:57:CF:43:D7:DD:F3:A3:AD:03:CE:ED:D6:FD:05
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 0551B30C
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/GaWTbAAtV89D193zo60Dzu3W_QU.roa
Signing time: Sat 01 Jan 2022 06:53:49 +0000
ROA not before: Sat 01 Jan 2022 06:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203872
IP address blocks: 185.121.164.0/23 maxlen: 24
185.121.166.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89240332 (0x551b30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Jan 1 06:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19a5936c002d57cf43d7ddf3a3ad03ceedd6fd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9d:e6:94:4f:50:9f:7c:ad:ea:3a:74:99:5e:
7f:42:5b:c7:88:08:06:f4:00:40:3c:8a:7c:dc:2d:
ae:74:71:aa:97:c3:92:66:2f:a4:3d:53:eb:dd:2c:
a5:d2:72:18:eb:ef:b0:6c:2b:3c:7c:c2:a7:ab:5b:
c1:58:8b:80:a9:4e:06:2b:41:38:5f:af:eb:26:ab:
36:14:5b:68:f8:79:ec:27:f1:e2:a8:97:82:50:9c:
03:60:fb:b2:6f:af:c0:32:34:8a:c6:08:93:56:1d:
26:67:7e:de:9f:c1:4f:39:ca:42:28:f2:1e:a6:45:
9f:e9:77:65:92:8f:ca:ad:8e:a1:b2:eb:3a:7d:63:
c1:8f:9e:8a:4c:14:96:d4:41:ab:e3:1e:27:08:c5:
08:a4:6f:b5:6f:e6:d9:9f:30:d4:4b:98:bc:63:b1:
98:c0:18:9a:52:ad:8f:af:ee:4f:20:1d:e9:1b:dc:
40:87:8e:f9:fc:7c:61:1f:f1:a8:0f:2d:cd:f6:7b:
37:a4:df:a0:26:b8:78:4f:cb:cb:21:02:32:9b:8e:
9b:40:38:13:9c:15:37:d7:be:e5:c4:b3:9a:c9:49:
e8:59:00:3f:07:66:c9:68:8a:f0:ce:42:e0:05:93:
aa:e3:4f:ea:cf:19:f2:2a:24:11:1e:04:be:2d:b8:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A5:93:6C:00:2D:57:CF:43:D7:DD:F3:A3:AD:03:CE:ED:D6:FD:05
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/GaWTbAAtV89D193zo60Dzu3W_QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.164.0/22
Signature Algorithm: sha256WithRSAEncryption
52:b1:f9:ec:35:e8:33:c7:60:ad:5e:f2:39:91:5e:e8:22:b1:
b2:bd:dd:7d:41:1b:7b:09:25:6c:41:30:af:92:13:c6:63:b0:
6f:d3:39:69:35:fc:c8:cb:c2:f1:0c:31:91:02:7c:c5:29:c2:
f9:c0:a4:e1:58:bc:a3:1e:23:63:37:65:df:96:6e:16:2c:6e:
ea:24:cf:ad:44:b0:03:9e:ed:6a:23:46:8a:1d:ab:cd:2b:25:
3c:5a:34:b3:ff:14:97:3a:50:5c:fb:f1:b5:93:ad:db:ce:69:
d6:df:8d:95:76:e6:ed:6a:25:35:0f:1f:50:96:54:2b:b0:54:
2d:78:8f:c9:9b:f0:98:7c:c9:e3:fe:ab:56:b8:0b:91:4e:57:
a3:f9:57:49:7f:7e:4d:cd:dc:54:50:e3:f5:d9:09:59:52:3a:
cb:d3:1d:09:e5:9d:3e:17:6c:3c:50:39:f1:42:87:74:40:be:
8b:d9:28:03:0b:f7:b9:9b:33:57:0f:84:0c:c3:70:ad:d3:a6:
e8:98:9d:d4:89:55:eb:f3:a5:6e:32:82:3e:19:7e:4e:10:08:
84:07:fa:c7:a4:e7:69:c3:02:95:82:ee:4d:79:36:29:14:9b:
12:0f:f0:52:b1:53:02:05:04:d5:be:2e:31:d7:dd:8e:c7:1a:
34:50:78:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org