Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c969de-e693-457c-90c3-0cc58ba311ba/1/VNUfPEIBcVyMXSSP4fLwxRdMeSM.roa
File: VNUfPEIBcVyMXSSP4fLwxRdMeSM.roa (raw, json)
Hash identifier: WMxOXkJwyCwvR0Y2Ho+FqJCsn3ablQdQY/6bTcB9oXo=
Subject key identifier: 54:D5:1F:3C:42:01:71:5C:8C:5D:24:8F:E1:F2:F0:C5:17:4C:79:23
Certificate issuer: /CN=0e6b8ee976c918364f5184ff31cea4525a79d353
Certificate serial: 0313D351
Authority key identifier: 0E:6B:8E:E9:76:C9:18:36:4F:51:84:FF:31:CE:A4:52:5A:79:D3:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmuO6XbJGDZPUYT_Mc6kUlp501M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c969de-e693-457c-90c3-0cc58ba311ba/1/VNUfPEIBcVyMXSSP4fLwxRdMeSM.roa
Signing time: Thu 19 May 2022 11:10:29 +0000
ROA not before: Thu 19 May 2022 11:10:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 77.220.202.0/24 maxlen: 24
77.220.203.0/24 maxlen: 24
77.220.200.0/24 maxlen: 24
77.220.201.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51630929 (0x313d351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b8ee976c918364f5184ff31cea4525a79d353
Validity
Not Before: May 19 11:10:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54d51f3c4201715c8c5d248fe1f2f0c5174c7923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9c:87:ec:2f:55:94:a4:90:6e:4c:06:ff:0f:
74:2a:d8:f9:62:2e:d2:98:65:87:8c:dc:57:9a:3a:
25:db:63:0a:47:62:ef:fc:9c:ea:34:ad:9c:04:1b:
8d:dc:82:9c:6b:85:eb:5d:0e:f8:c8:a2:39:df:e3:
28:8d:f3:60:29:30:de:a7:b7:d6:9b:68:24:75:06:
1f:24:73:b5:84:59:50:27:1c:f5:8f:74:4f:b5:4a:
5f:df:8c:88:45:ce:a7:27:6f:96:9d:c5:c7:e5:6b:
89:fd:8a:0a:76:7b:23:28:2e:03:c6:c8:72:89:0a:
ef:5e:44:4f:e1:7b:e8:e9:b1:2d:18:e2:7f:c7:f9:
25:fc:ea:a5:0e:6a:18:f2:0f:e1:f8:81:d6:86:53:
67:b0:36:36:4a:e8:f4:2d:2f:bb:84:08:d0:87:7c:
cc:6d:41:63:75:47:72:1a:fd:fb:94:c2:ae:0c:08:
69:1d:d1:46:6f:1c:bd:06:98:75:61:51:0f:cf:66:
4a:bd:42:30:e6:bb:b2:b9:8e:2f:65:11:1a:b6:ce:
cb:82:f2:86:36:bc:e4:56:7c:c5:7a:b1:4a:83:61:
2e:e4:de:1f:47:b8:b3:33:6e:a4:0e:6c:f3:e5:cb:
a1:3b:c4:e0:e8:c5:6c:99:9c:62:fc:81:bb:ee:56:
4f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D5:1F:3C:42:01:71:5C:8C:5D:24:8F:E1:F2:F0:C5:17:4C:79:23
X509v3 Authority Key Identifier:
keyid:0E:6B:8E:E9:76:C9:18:36:4F:51:84:FF:31:CE:A4:52:5A:79:D3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmuO6XbJGDZPUYT_Mc6kUlp501M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c969de-e693-457c-90c3-0cc58ba311ba/1/VNUfPEIBcVyMXSSP4fLwxRdMeSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c969de-e693-457c-90c3-0cc58ba311ba/1/DmuO6XbJGDZPUYT_Mc6kUlp501M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:9d:45:c1:36:5c:26:48:6e:6e:74:3e:39:0f:5c:d7:53:a2:
ff:66:96:96:25:6b:49:19:56:cb:44:2b:96:ca:8b:df:35:d2:
59:c0:b9:cd:4e:43:1d:67:73:71:18:1e:30:e5:f9:2f:a0:71:
79:3a:b6:34:73:97:52:6f:10:9f:44:16:48:0e:16:f6:b1:be:
ae:28:ab:ce:8a:e9:72:87:fb:b8:13:12:e4:53:f1:c4:3f:66:
33:dc:ac:2c:31:27:62:28:bf:57:fd:cc:db:60:f7:e7:b3:cf:
e2:11:bc:30:ed:8e:f4:60:05:71:fa:92:71:78:fb:ce:c6:2f:
a0:af:3e:25:40:86:b3:1a:23:ef:6c:cd:43:17:ea:50:69:d7:
85:cd:30:a1:c9:fa:ca:bc:c6:cf:e8:d2:56:46:3b:30:61:15:
29:b8:ae:0f:5b:40:aa:6a:87:26:cf:d0:c1:83:9f:03:3d:66:
16:6c:25:5c:49:e1:41:40:b3:83:d0:02:15:3a:1a:c7:7d:eb:
09:8a:3f:eb:55:cf:dc:db:4d:4f:9a:77:8a:8c:1a:be:a2:07:
58:b4:18:50:57:c6:8a:a1:29:c5:98:63:18:b0:86:9c:ad:d9:
28:65:35:78:68:47:3b:97:63:16:66:fd:69:3c:9d:0f:29:82:
c1:51:c0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net