Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EIlZ3XQvir9i009tWrCJQunFPXU.roa
File: EIlZ3XQvir9i009tWrCJQunFPXU.roa (raw, json)
Hash identifier: 1EZlU1GqwMX3EjyA2elI/iMHfT+MdU6EfTUiFyMB534=
Subject key identifier: 10:89:59:DD:74:2F:8A:BF:62:D3:4F:6D:5A:B0:89:42:E9:C5:3D:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01835A115D3940D281BB54952EED3291D877
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EIlZ3XQvir9i009tWrCJQunFPXU.roa
Signing time: Tue 20 Sep 2022 08:43:50 +0000
ROA not before: Tue 20 Sep 2022 08:43:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.31.45.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
82.115.209.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
84.54.49.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
193.25.218.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:11:5d:39:40:d2:81:bb:54:95:2e:ed:32:91:d8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 20 08:43:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=108959dd742f8abf62d34f6d5ab08942e9c53d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:23:7e:c3:76:3b:6d:49:e0:c8:d5:5d:15:
ae:b1:81:8f:22:7e:11:67:6f:1d:fd:29:ab:56:a7:
6c:b6:26:2b:d7:3e:ee:87:85:62:4b:0c:16:3e:48:
95:28:76:8f:59:d9:5a:c3:c3:9b:fd:61:78:3e:47:
62:d3:75:2e:06:69:7a:0b:a2:55:c9:be:a6:52:ad:
ed:d6:7e:78:3b:f0:50:1d:2a:71:f0:1b:17:cb:b2:
6f:1b:57:ab:e1:8e:76:2c:55:30:5a:5b:2a:79:5c:
05:b0:14:6b:c8:35:28:d6:4c:a8:57:48:ea:34:c4:
a1:39:d3:b9:fc:68:0f:11:9d:53:7d:0c:8a:cb:a3:
31:ba:f0:1a:a6:91:ae:f9:47:0a:b0:84:a2:32:6f:
5f:a9:c4:61:5d:b3:83:a3:71:44:2a:17:8c:3e:b6:
11:ff:2e:8c:eb:a5:08:5a:ac:74:e6:1a:b5:8f:d7:
99:b8:b1:cf:60:27:0b:90:f2:08:77:30:62:22:5c:
61:3d:f9:42:52:dc:15:3e:fd:d2:7e:c4:12:65:42:
af:bb:9d:0d:56:a9:af:f4:34:71:0f:ca:e5:19:6a:
78:70:ae:27:83:82:0e:8a:14:b8:bd:52:9e:95:11:
d9:32:44:7c:4e:03:8a:84:10:18:ba:43:8b:53:21:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:89:59:DD:74:2F:8A:BF:62:D3:4F:6D:5A:B0:89:42:E9:C5:3D:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EIlZ3XQvir9i009tWrCJQunFPXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.48.0/24
82.115.208.0/22
84.21.172.0/23
84.54.48.0/23
85.31.45.0/24
85.31.47.0/24
87.120.84.0/24
87.120.87.0/24
87.121.221.0/24
92.249.50.0/24
94.103.125.0-94.103.126.255
94.154.172.0/24
178.215.225.0-178.215.227.255
178.215.236.0/24
178.215.239.0/24
185.216.69.0-185.216.70.255
185.246.221.0/24
193.25.217.0-193.25.218.255
193.35.19.0/24
193.37.42.0/24
193.42.32.0/24
193.47.63.0/24
193.222.97.0/24
193.222.99.0/24
194.55.224.0/22
194.180.36.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e3:19:c8:28:0c:0c:a8:c1:80:b3:7b:a7:e0:88:d5:c6:5c:
7d:77:5d:83:88:48:c4:62:e1:7f:61:eb:5d:cd:b1:31:9a:29:
e2:1d:42:64:ff:2b:a5:0a:fe:c7:22:88:66:c9:28:95:e2:da:
0a:69:6e:3a:32:07:3e:a0:7c:cf:22:99:71:6b:2c:85:d8:b9:
68:a8:ed:72:8e:11:24:1e:9e:d2:03:c4:b1:fb:f0:76:e4:91:
71:b1:8e:50:d9:d0:cb:ef:53:eb:14:d3:b4:e1:42:1d:fa:0e:
b3:76:f4:20:a9:53:25:d5:d6:cb:e1:d2:dc:9f:0d:ee:73:49:
29:dd:41:cd:c3:c4:a2:0e:41:55:ef:27:17:b4:5d:89:57:eb:
a6:52:44:68:c5:bf:a7:36:fc:0a:d2:34:04:7b:7e:6a:e0:b1:
2c:b1:07:42:10:f5:fb:c1:8e:52:b9:95:dc:f6:c0:83:72:96:
f3:6d:2a:e4:95:df:1c:c3:83:1e:1d:32:53:85:97:26:29:78:
6f:7d:1f:e6:51:55:93:2d:bd:51:3c:39:8d:b9:18:96:53:05:
16:a4:5e:91:ec:db:be:92:ed:3c:e2:14:68:2d:af:09:12:2e:
97:90:9f:18:f9:31:b1:46:47:fc:d2:a2:6a:3f:28:94:a9:5a:
bc:dd:ed:a7
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgISAYNaEV05QNKBu1SVLu0ykdh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwOTIwMDg0MzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDg5NTlkZDc0MmY4YWJmNjJkMzRmNmQ1YWIwODk0MmU5YzUzZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KMjfsN2O21J4MjVXRWusYGPIn4R
Z28d/SmrVqdstiYr1z7uh4ViSwwWPkiVKHaPWdlaw8Ob/WF4Pkdi03UuBml6C6JV
yb6mUq3t1n54O/BQHSpx8BsXy7JvG1er4Y52LFUwWlsqeVwFsBRryDUo1kyoV0jq
NMShOdO5/GgPEZ1TfQyKy6MxuvAappGu+UcKsISiMm9fqcRhXbODo3FEKheMPrYR
/y6M66UIWqx05hq1j9eZuLHPYCcLkPIIdzBiIlxhPflCUtwVPv3SfsQSZUKvu50N
Vqmv9DRxD8rlGWp4cK4ng4IOihS4vVKelRHZMkR8TgOKhBAYukOLUyHLKwIDAQAB
o4ICxDCCAsAwHQYDVR0OBBYEFBCJWd10L4q/YtNPbVqwiULpxT11MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRUlsWjNYUXZpcjlpMDA5dFdyQ0pRdW5GUFhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHZBggrBgEFBQcBBwEB/wSByTCBxjCBwwQCAAEwgbwDBABQ
TDADBAJSc9ADBAFUFawDBAFUNjADBABVHy0DBABVHy8DBABXeFQDBABXeFcDBABX
ed0DBABc+TIwDAMEAF5nfQMEAF5nfgMEAF6arDAMAwQAstfhAwQCstfgAwQAstfs
AwQAstfvMAwDBAC52EUDBAC52EYDBAC59t0wDAMEAMEZ2QMEAMEZ2gMEAMEjEwME
AMElKgMEAMEqIAMEAMEvPwMEAMHeYQMEAMHeYwMEAsI34AMEAMK0JDANBgkqhkiG
9w0BAQsFAAOCAQEAGeMZyCgMDKjBgLN7p+CI1cZcfXddg4hIxGLhf2HrXc2xMZop
4h1CZP8rpQr+xyKIZskoleLaCmluOjIHPqB8zyKZcWsshdi5aKjtco4RJB6e0gPE
sfvwduSRcbGOUNnQy+9T6xTTtOFCHfoOs3b0IKlTJdXWy+HS3J8N7nNJKd1BzcPE
og5BVe8nF7RdiVfrplJEaMW/pzb8CtI0BHt+auCxLLEHQhD1+8GOUrmV3PbAg3KW
820q5JXfHMODHh0yU4WXJil4b30f5lFVky29UTw5jbkYllMFFqRekezbvpLtPOIU
aC2vCRIul5CfGPkxsUZH/NKiaj8olKlavN3tpw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:28 2024 by rpki-client on console-ams.rpki-client.org