Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/XH_BcWqUdbqXRmUQhzbzvaoolz0.roa
File: XH_BcWqUdbqXRmUQhzbzvaoolz0.roa (raw, json)
Hash identifier: pt34HE/iqK1K1s+q+fcpWVfsju38s8qNpwuLLfZ0xFI=
Subject key identifier: 5C:7F:C1:71:6A:94:75:BA:97:46:65:10:87:36:F3:BD:AA:28:97:3D
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 192131CA
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/XH_BcWqUdbqXRmUQhzbzvaoolz0.roa
Signing time: Thu 28 Apr 2022 12:36:26 +0000
ROA not before: Thu 28 Apr 2022 12:36:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8866
IP address blocks: 90.154.128.0/17 maxlen: 24
62.73.64.0/18 maxlen: 24
89.25.124.0/22 maxlen: 22
85.187.46.0/23 maxlen: 24
212.72.199.0/24 maxlen: 24
212.72.198.0/24 maxlen: 24
212.72.202.0/23 maxlen: 24
212.72.212.0/24 maxlen: 24
89.25.72.0/22 maxlen: 22
85.187.22.0/23 maxlen: 24
85.187.24.0/21 maxlen: 24
89.25.100.0/22 maxlen: 22
85.187.32.0/21 maxlen: 24
83.228.0.0/17 maxlen: 24
79.100.0.0/16 maxlen: 24
78.154.0.0/19 maxlen: 24
185.167.144.0/22 maxlen: 24
212.72.214.0/24 maxlen: 24
212.72.221.0/24 maxlen: 24
212.5.128.0/19 maxlen: 24
212.39.64.0/19 maxlen: 24
82.146.0.0/22 maxlen: 22
82.146.6.0/23 maxlen: 24
82.146.11.0/24 maxlen: 24
82.146.24.0/23 maxlen: 24
89.25.40.0/21 maxlen: 21
89.25.52.0/22 maxlen: 22
89.25.56.0/21 maxlen: 21
89.25.64.0/21 maxlen: 21
82.146.28.0/23 maxlen: 24
82.146.31.0/24 maxlen: 24
87.126.0.0/16 maxlen: 24
95.43.206.0/24 maxlen: 24
95.43.220.0/22 maxlen: 22
87.118.144.0/22 maxlen: 22
87.118.144.0/23 maxlen: 23
213.91.154.0/24 maxlen: 24
87.118.164.0/22 maxlen: 22
77.85.0.0/16 maxlen: 24
213.91.128.0/17 maxlen: 24
46.10.166.0/23 maxlen: 23
84.238.136.0/22 maxlen: 22
84.238.134.0/23 maxlen: 24
84.238.140.0/23 maxlen: 23
84.238.142.0/23 maxlen: 23
84.238.144.0/21 maxlen: 21
84.238.152.0/22 maxlen: 24
84.238.156.0/22 maxlen: 22
84.238.165.0/24 maxlen: 24
84.238.168.0/21 maxlen: 21
84.238.167.0/24 maxlen: 24
84.238.178.0/23 maxlen: 24
84.238.180.0/22 maxlen: 22
82.137.64.0/18 maxlen: 24
95.43.0.0/17 maxlen: 24
213.16.32.0/19 maxlen: 24
84.238.128.0/22 maxlen: 22
46.10.0.0/16 maxlen: 24
84.238.192.0/22 maxlen: 24
84.238.204.0/22 maxlen: 22
87.116.64.0/22 maxlen: 22
87.116.68.0/22 maxlen: 22
87.116.72.0/21 maxlen: 21
151.237.140.0/23 maxlen: 24
87.116.82.0/24 maxlen: 24
87.116.84.0/22 maxlen: 22
213.130.92.0/23 maxlen: 24
213.130.95.0/24 maxlen: 24
213.130.64.0/22 maxlen: 22
213.130.78.0/23 maxlen: 23
213.130.76.0/23 maxlen: 24
213.130.77.0/24 maxlen: 24
62.176.64.0/19 maxlen: 24
94.236.229.0/24 maxlen: 24
94.236.231.0/24 maxlen: 24
94.236.228.0/24 maxlen: 24
94.236.234.0/24 maxlen: 24
94.236.235.0/24 maxlen: 24
94.236.238.0/24 maxlen: 24
94.236.240.0/20 maxlen: 20
62.176.96.0/19 maxlen: 24
94.236.163.0/24 maxlen: 24
94.236.164.0/24 maxlen: 24
94.236.160.0/24 maxlen: 24
87.243.96.0/21 maxlen: 21
94.236.161.0/24 maxlen: 24
94.155.204.0/22 maxlen: 24
94.236.160.0/19 maxlen: 24
94.236.172.0/24 maxlen: 24
87.243.104.0/21 maxlen: 21
94.236.170.0/23 maxlen: 23
94.236.179.0/24 maxlen: 24
87.243.112.0/22 maxlen: 22
94.236.173.0/24 maxlen: 24
94.236.174.0/24 maxlen: 24
94.236.175.0/24 maxlen: 24
94.236.176.0/23 maxlen: 23
87.243.116.0/22 maxlen: 22
94.236.180.0/22 maxlen: 22
94.236.184.0/21 maxlen: 21
87.243.120.0/21 maxlen: 21
94.236.204.0/24 maxlen: 24
94.236.205.0/24 maxlen: 24
217.75.152.0/21 maxlen: 21
84.21.192.0/22 maxlen: 22
95.42.0.0/15 maxlen: 24
84.21.216.0/21 maxlen: 21
62.176.117.0/24 maxlen: 24
217.75.139.0/24 maxlen: 24
217.75.143.0/24 maxlen: 24
94.155.64.0/20 maxlen: 24
94.155.80.0/22 maxlen: 24
185.20.156.0/22 maxlen: 22
83.148.64.0/18 maxlen: 24
94.236.144.0/24 maxlen: 24
94.236.144.0/21 maxlen: 24
87.243.80.0/20 maxlen: 20
94.236.149.0/24 maxlen: 24
94.236.151.0/24 maxlen: 24
94.236.146.0/24 maxlen: 24
94.236.152.0/24 maxlen: 24
94.236.152.0/21 maxlen: 24
94.236.153.0/24 maxlen: 24
94.236.154.0/24 maxlen: 24
94.155.104.0/21 maxlen: 24
94.155.112.0/21 maxlen: 24
94.155.120.0/22 maxlen: 24
2a01:5a8:2:5::/64 maxlen: 64
2a01:5a8:1:ffff::/64 maxlen: 64
2a01:5a8:2:4::/64 maxlen: 64
2a01:5a8::/32 maxlen: 128
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421605834 (0x192131ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Apr 28 12:36:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c7fc1716a9475ba974665108736f3bdaa28973d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:17:9c:7e:ed:b0:65:0e:27:24:02:ba:66:
f7:35:07:ea:76:dc:84:c2:fd:c3:a2:e0:c2:cb:81:
ba:2f:7c:39:02:43:54:7c:dc:09:70:70:71:57:15:
07:b3:8a:65:bf:a5:2d:d8:e8:80:95:15:a8:b2:9a:
b1:d6:a4:1a:e7:9d:ee:cd:0f:7e:56:0d:5d:d9:d3:
77:40:ae:10:45:6f:e5:1f:11:98:45:b7:8b:aa:00:
26:c5:03:df:d1:2a:79:12:33:54:eb:fd:86:6d:df:
f9:a4:79:de:49:a0:2e:c1:97:ec:f4:e4:95:e1:ea:
38:99:c2:4b:3f:5c:9c:51:dc:22:dc:81:1b:0b:2a:
d9:90:7a:71:32:35:69:0b:a3:22:5d:59:71:23:72:
bb:65:85:88:89:f8:6c:84:bf:64:cf:91:15:cd:ee:
e4:8a:cc:57:e8:58:e8:8e:de:ba:2c:e4:9a:b0:1e:
b2:91:e8:bc:8a:8c:2b:8b:76:f6:43:e1:be:e0:c3:
d0:1c:98:13:9b:89:4e:14:c9:1f:b7:09:55:7c:7b:
c3:e4:b2:80:30:8e:c9:7d:4b:9a:68:af:18:73:3e:
32:a0:ba:9e:f0:e2:03:72:bd:fc:83:23:43:b0:f0:
13:03:44:a1:de:86:b2:77:5a:eb:70:e1:8a:db:ac:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7F:C1:71:6A:94:75:BA:97:46:65:10:87:36:F3:BD:AA:28:97:3D
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/XH_BcWqUdbqXRmUQhzbzvaoolz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.0.0/16
62.73.64.0/18
62.176.64.0/18
77.85.0.0/16
78.154.0.0/19
79.100.0.0/16
82.137.64.0/18
82.146.0.0/22
82.146.6.0/23
82.146.11.0/24
82.146.24.0/23
82.146.28.0/23
82.146.31.0/24
83.148.64.0/18
83.228.0.0/17
84.21.192.0/22
84.21.216.0/21
84.238.128.0/22
84.238.134.0-84.238.159.255
84.238.165.0/24
84.238.167.0-84.238.175.255
84.238.178.0-84.238.183.255
84.238.192.0/22
84.238.204.0/22
85.187.22.0-85.187.39.255
85.187.46.0/23
87.116.64.0/20
87.116.82.0/24
87.116.84.0/22
87.118.144.0/22
87.118.164.0/22
87.126.0.0/16
87.243.80.0-87.243.127.255
89.25.40.0/21
89.25.52.0-89.25.75.255
89.25.100.0/22
89.25.124.0/22
90.154.128.0/17
94.155.64.0-94.155.83.255
94.155.104.0-94.155.123.255
94.155.204.0/22
94.236.144.0-94.236.191.255
94.236.204.0/23
94.236.228.0/23
94.236.231.0/24
94.236.234.0/23
94.236.238.0/24
94.236.240.0/20
95.42.0.0/15
151.237.140.0/23
185.20.156.0/22
185.167.144.0/22
212.5.128.0/19
212.39.64.0/19
212.72.198.0/23
212.72.202.0/23
212.72.212.0/24
212.72.214.0/24
212.72.221.0/24
213.16.32.0/19
213.91.128.0/17
213.130.64.0/22
213.130.76.0/22
213.130.92.0/23
213.130.95.0/24
217.75.139.0/24
217.75.143.0/24
217.75.152.0/21
IPv6:
2a01:5a8::/32
Signature Algorithm: sha256WithRSAEncryption
0d:70:83:bf:78:fd:f0:5e:b7:c1:ff:60:dc:f9:c0:6c:ae:0d:
c6:9e:69:36:2d:36:c2:ef:84:af:ae:4b:71:1b:58:46:21:39:
09:db:55:db:f6:46:db:6a:7f:18:fb:c9:df:1f:d7:c3:ac:71:
00:4b:0a:54:7c:16:27:64:7d:ea:4d:8e:a1:43:88:38:af:62:
ea:18:c1:82:f0:a4:32:ef:55:f8:20:8e:c4:b1:c6:99:d0:cf:
d8:e8:e8:72:09:20:35:af:61:e6:1d:42:18:9c:cd:05:b7:3d:
1a:51:4c:82:4f:3e:0e:6a:55:c2:5f:86:27:ad:8a:3b:e3:8c:
2c:60:44:ef:88:49:c0:d9:1f:4f:b2:b3:60:75:c1:af:d8:94:
c8:7f:e9:90:bb:4d:45:8c:6a:d2:c4:3b:66:89:b7:2a:21:5c:
d0:c7:21:76:2e:1b:81:a0:61:6d:1b:32:a3:17:70:b0:83:0c:
95:3f:94:5d:06:2f:2d:91:3a:0a:39:34:11:b1:d6:e9:a5:00:
8e:66:45:5a:a0:a8:4c:c5:f3:4f:0a:86:07:ab:8a:51:cd:2c:
4d:4d:87:ea:66:f8:46:2f:52:84:2d:db:b4:71:bb:23:6b:3e:
03:fc:d5:f5:f0:da:85:92:ef:5c:e0:5a:7e:b2:f3:04:ef:7c:
34:cd:35:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org