Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/WCN5yct3w84uXmwFFjsLs4BmDGg.roa
File: WCN5yct3w84uXmwFFjsLs4BmDGg.roa (raw, json)
Hash identifier: 3aoO2Hkprv6dYm2Im/nvWLTFyY5TEFd2GccAzE9lTOI=
Subject key identifier: 58:23:79:C9:CB:77:C3:CE:2E:5E:6C:05:16:3B:0B:B3:80:66:0C:68
Certificate issuer: /CN=3daa5d24dcbe5862e82e4f5cd5134f9e5c23c258
Certificate serial: 01857227FE76FBE6A4B8D4F63BAAA2AA7C36
Authority key identifier: 3D:AA:5D:24:DC:BE:58:62:E8:2E:4F:5C:D5:13:4F:9E:5C:23:C2:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PapdJNy-WGLoLk9c1RNPnlwjwlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/WCN5yct3w84uXmwFFjsLs4BmDGg.roa
Signing time: Mon 02 Jan 2023 11:05:01 +0000
ROA not before: Mon 02 Jan 2023 11:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61364
IP address blocks: 185.9.44.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:fe:76:fb:e6:a4:b8:d4:f6:3b:aa:a2:aa:7c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3daa5d24dcbe5862e82e4f5cd5134f9e5c23c258
Validity
Not Before: Jan 2 11:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=582379c9cb77c3ce2e5e6c05163b0bb380660c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:67:0e:42:33:bb:cf:1d:79:51:c5:b9:e8:
3d:e9:94:86:ad:be:66:76:9d:20:0c:aa:a6:14:0d:
6b:29:8c:d3:a9:04:9c:71:bd:39:71:08:85:23:ed:
4e:70:cf:c9:48:aa:5e:05:0e:a5:6a:c8:2a:e5:23:
a3:4d:e5:88:1f:b4:73:df:8c:19:e9:96:22:af:6b:
60:8a:a1:2c:ca:a4:3a:8e:00:90:24:5a:c4:78:9e:
b2:25:46:ca:92:70:93:f0:f7:7d:80:b7:17:b8:9e:
aa:0b:9a:a3:3d:8e:6f:1b:41:cd:42:15:a0:f6:03:
01:32:97:db:1b:2f:fd:ba:ab:9c:71:e4:6f:51:c2:
83:8a:66:a6:fd:91:7f:be:80:aa:79:e8:6c:0b:f7:
93:76:ce:15:fb:1e:31:4d:69:94:a9:8f:0d:c5:9f:
e1:d6:68:c2:0e:8a:00:3c:71:f3:be:23:fc:e3:15:
0b:fc:80:34:4c:62:c1:07:31:a0:05:06:48:54:79:
f2:88:91:61:52:6e:cb:be:28:c6:10:25:70:3e:d3:
1c:4d:ba:17:27:1b:25:17:f2:12:e7:85:26:e3:d9:
ba:10:a6:8c:dc:6f:69:43:a4:97:15:78:3b:3b:23:
6b:b4:53:a2:61:ce:67:9c:e0:47:cb:6a:4d:08:24:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:23:79:C9:CB:77:C3:CE:2E:5E:6C:05:16:3B:0B:B3:80:66:0C:68
X509v3 Authority Key Identifier:
keyid:3D:AA:5D:24:DC:BE:58:62:E8:2E:4F:5C:D5:13:4F:9E:5C:23:C2:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PapdJNy-WGLoLk9c1RNPnlwjwlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/WCN5yct3w84uXmwFFjsLs4BmDGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/PapdJNy-WGLoLk9c1RNPnlwjwlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.44.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:e1:34:54:cc:94:4c:73:e7:b8:4a:65:a0:82:97:db:b2:77:
a3:cd:30:02:1c:9f:32:08:26:30:51:3c:46:47:c4:38:40:26:
bc:bb:09:86:20:63:13:1a:c8:05:75:3a:10:8b:cc:95:90:a5:
8a:ca:16:69:1f:17:bf:6d:7e:27:ce:e1:9f:81:dd:8a:af:fc:
63:f2:1f:d3:aa:44:3d:ac:66:f4:fa:02:b3:6f:49:0a:50:fc:
4c:b8:d0:97:ea:d8:8b:d2:3c:8d:2c:5c:8d:39:a8:bf:4e:80:
87:81:f5:21:27:b2:33:f7:3b:72:23:22:90:4f:d0:a5:c5:c1:
bc:aa:2f:cf:53:c2:34:c3:80:a8:45:5e:08:4f:97:04:4f:80:
30:c2:4a:01:1e:6c:6d:6d:55:18:a1:eb:97:ab:a6:7e:65:6f:
2c:e5:31:97:38:e9:f3:c0:4b:69:41:77:b5:54:02:14:14:ff:
b4:27:32:69:85:3f:9b:81:43:95:cf:c6:29:d0:65:04:90:6c:
0a:cd:02:cb:cc:3e:03:19:ca:cb:89:92:b1:67:0e:0c:3a:a2:
12:e8:fa:b1:dc:8f:34:af:b8:d6:37:ba:cf:9e:f7:15:79:7b:
86:2c:0e:27:ac:43:35:a0:dd:b7:a2:44:02:02:fd:3d:ff:81:
a9:65:53:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:50 2023 by rpki-client on console-fra.rpki-client.org