Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hIxY9JY7BvTSjVBBe0xhzciIrms.roa
File: hIxY9JY7BvTSjVBBe0xhzciIrms.roa (raw, json)
Hash identifier: pJm5209nr/Uz5cTdfJMNsdCvoAj9klcp9PH+7+vIYKs=
Subject key identifier: 84:8C:58:F4:96:3B:06:F4:D2:8D:50:41:7B:4C:61:CD:C8:88:AE:6B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1DC5031C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hIxY9JY7BvTSjVBBe0xhzciIrms.roa
Signing time: Thu 07 Apr 2022 06:35:07 +0000
ROA not before: Thu 07 Apr 2022 06:35:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34224
IP address blocks: 212.73.131.0/24 maxlen: 24
212.73.128.0/23 maxlen: 24
212.73.130.0/23 maxlen: 24
212.73.132.0/24 maxlen: 24
87.120.176.0/24 maxlen: 24
212.73.135.0/24 maxlen: 24
212.73.133.0/24 maxlen: 24
212.73.138.0/23 maxlen: 24
212.73.138.0/24 maxlen: 24
212.73.136.0/24 maxlen: 24
212.73.134.0/24 maxlen: 24
212.73.143.0/24 maxlen: 24
212.73.141.0/24 maxlen: 24
212.73.145.0/24 maxlen: 24
212.73.142.0/24 maxlen: 24
212.73.140.0/24 maxlen: 24
212.73.144.0/24 maxlen: 24
212.73.147.0/24 maxlen: 24
212.73.148.0/24 maxlen: 24
212.73.146.0/24 maxlen: 24
212.73.157.0/24 maxlen: 24
212.73.155.0/24 maxlen: 24
87.120.195.0/24 maxlen: 24
87.120.199.0/24 maxlen: 24
87.120.206.0/24 maxlen: 24
87.120.200.0/24 maxlen: 24
87.120.206.0/23 maxlen: 24
87.120.201.0/24 maxlen: 24
87.120.207.0/24 maxlen: 24
87.120.109.0/24 maxlen: 24
87.120.128.0/23 maxlen: 24
87.120.132.0/24 maxlen: 24
87.120.134.0/24 maxlen: 24
87.120.135.0/24 maxlen: 24
87.120.133.0/24 maxlen: 24
37.60.138.0/24 maxlen: 24
87.121.42.0/24 maxlen: 24
37.60.139.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
87.121.52.0/24 maxlen: 24
87.121.54.0/24 maxlen: 24
87.121.59.0/24 maxlen: 24
87.121.64.0/24 maxlen: 24
87.120.217.0/24 maxlen: 24
87.120.223.0/24 maxlen: 24
87.120.36.100/32 maxlen: 32
87.120.253.0/24 maxlen: 24
87.121.1.0/24 maxlen: 24
87.120.255.0/24 maxlen: 24
87.121.0.0/23 maxlen: 24
87.121.2.0/24 maxlen: 24
87.121.0.0/24 maxlen: 24
87.120.254.0/24 maxlen: 24
87.121.6.0/23 maxlen: 24
91.92.219.0/24 maxlen: 24
91.92.230.0/24 maxlen: 24
91.92.198.0/23 maxlen: 24
91.92.197.0/24 maxlen: 24
87.120.61.0/24 maxlen: 24
87.120.104.0/24 maxlen: 24
87.120.6.0/23 maxlen: 24
87.120.8.0/24 maxlen: 24
87.120.6.0/24 maxlen: 24
87.120.13.0/24 maxlen: 24
87.120.37.0/24 maxlen: 24
87.120.43.0/24 maxlen: 24
87.120.39.0/24 maxlen: 24
91.92.2.0/24 maxlen: 24
91.92.0.0/24 maxlen: 24
91.92.1.0/24 maxlen: 24
91.92.109.0/24 maxlen: 24
91.92.139.0/24 maxlen: 24
91.92.69.0/24 maxlen: 24
91.92.65.0/24 maxlen: 24
91.92.68.0/24 maxlen: 24
91.92.66.0/24 maxlen: 24
91.92.105.0/24 maxlen: 24
94.156.216.0/21 maxlen: 24
94.156.227.0/24 maxlen: 24
85.217.145.0/24 maxlen: 24
93.123.64.0/24 maxlen: 24
94.156.251.0/24 maxlen: 24
94.156.249.0/24 maxlen: 24
94.156.252.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
94.156.172.0/23 maxlen: 24
94.156.186.0/24 maxlen: 24
94.156.184.0/24 maxlen: 24
93.123.8.0/24 maxlen: 24
94.156.185.0/24 maxlen: 24
94.156.188.0/24 maxlen: 24
94.156.190.0/24 maxlen: 24
93.123.12.0/24 maxlen: 24
94.156.187.0/24 maxlen: 24
93.123.18.0/24 maxlen: 24
93.123.28.0/23 maxlen: 24
93.123.36.0/24 maxlen: 24
93.123.32.0/22 maxlen: 24
93.123.37.0/24 maxlen: 24
93.123.108.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
94.156.15.0/24 maxlen: 24
94.156.12.0/24 maxlen: 24
94.156.44.0/24 maxlen: 24
94.156.42.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.129.0/24 maxlen: 24
94.156.158.0/24 maxlen: 24
94.156.159.0/24 maxlen: 24
94.156.153.0/24 maxlen: 24
94.156.77.0/24 maxlen: 24
94.156.95.0/24 maxlen: 24
94.156.98.0/24 maxlen: 24
94.156.94.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
94.156.100.0/24 maxlen: 24
31.13.194.0/24 maxlen: 24
31.13.197.0/24 maxlen: 24
31.13.195.0/24 maxlen: 24
87.121.150.0/23 maxlen: 24
31.13.217.0/24 maxlen: 24
87.121.161.0/24 maxlen: 24
31.13.216.0/21 maxlen: 24
31.13.223.0/24 maxlen: 24
31.13.221.0/24 maxlen: 24
87.121.82.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.83.0/24 maxlen: 24
87.121.90.0/23 maxlen: 24
87.121.112.0/24 maxlen: 24
87.121.111.0/24 maxlen: 24
87.121.118.0/24 maxlen: 24
87.121.113.0/24 maxlen: 24
31.13.230.0/23 maxlen: 24
31.13.236.0/22 maxlen: 24
31.13.245.0/24 maxlen: 24
31.13.241.0/24 maxlen: 24
31.13.248.0/22 maxlen: 24
2a00:1728:35::/48 maxlen: 48
2a00:1728:27::/48 maxlen: 48
2a00:1728:21::/48 maxlen: 48
2a00:1728:0:d::/64 maxlen: 64
2a00:1728:1b::/48 maxlen: 48
2a00:1728:34::/48 maxlen: 48
2a00:1728:23::/48 maxlen: 48
2a00:1728:31::/48 maxlen: 48
2a00:1728:25::/48 maxlen: 48
2a00:1728:3::/48 maxlen: 48
2a00:1728:1f::/48 maxlen: 48
2a00:1728::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499450652 (0x1dc5031c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 7 06:35:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=848c58f4963b06f4d28d50417b4c61cdc888ae6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:31:21:23:8a:42:ee:dc:25:37:2c:0f:6f:
4c:9c:7c:13:c6:ab:ce:b1:23:d4:57:53:a9:7c:9c:
8e:7e:db:83:df:e8:e3:9a:22:54:69:c4:24:ce:e3:
8f:99:34:07:db:4e:3b:3c:e8:da:fe:6c:b1:8e:79:
07:70:6f:15:3e:b7:d2:8f:c8:9f:7d:2a:fc:7f:99:
34:00:45:f1:2d:db:56:d6:35:4f:57:9b:92:81:e9:
9a:78:b0:f6:d3:df:f8:7b:af:d7:cb:b1:e3:62:61:
af:35:94:c7:38:51:2d:82:3f:03:1a:11:60:fb:49:
f3:bf:86:e0:f5:6c:a2:de:3d:77:ad:7b:e4:d5:dd:
40:f0:16:16:fb:0a:55:23:8f:16:31:e3:f8:4f:0c:
a2:ff:b5:45:10:95:bd:f9:1e:b1:5f:46:cb:1d:c2:
d3:47:28:ce:ae:47:d4:1e:e2:27:35:49:72:13:07:
00:3b:d5:f7:46:50:79:57:c4:05:ae:e1:b9:cd:8c:
6f:28:77:0d:66:01:ee:a0:4a:cb:d8:8a:51:5e:16:
17:f1:b7:c5:c1:0f:0f:de:d7:c2:dd:12:e1:41:3b:
4f:cb:8a:36:a4:52:05:b5:1d:6d:d1:70:cb:32:05:
ad:79:c7:c5:d1:f7:fe:07:5d:1d:a3:40:db:64:0b:
0a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8C:58:F4:96:3B:06:F4:D2:8D:50:41:7B:4C:61:CD:C8:88:AE:6B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hIxY9JY7BvTSjVBBe0xhzciIrms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.194.0/23
31.13.197.0/24
31.13.216.0/21
31.13.230.0/23
31.13.236.0/22
31.13.241.0/24
31.13.245.0/24
31.13.248.0/22
37.60.138.0/23
85.217.145.0/24
87.120.6.0-87.120.8.255
87.120.13.0/24
87.120.36.100/32
87.120.37.0/24
87.120.39.0/24
87.120.43.0/24
87.120.61.0/24
87.120.104.0/24
87.120.109.0/24
87.120.128.0/23
87.120.132.0/22
87.120.176.0/24
87.120.195.0/24
87.120.199.0-87.120.201.255
87.120.206.0/23
87.120.217.0/24
87.120.223.0/24
87.120.253.0-87.121.2.255
87.121.6.0/23
87.121.42.0/24
87.121.52.0/24
87.121.54.0/24
87.121.59.0/24
87.121.64.0/24
87.121.79.0/24
87.121.82.0/23
87.121.90.0/23
87.121.111.0-87.121.113.255
87.121.118.0/24
87.121.150.0/23
87.121.161.0/24
91.92.0.0-91.92.2.255
91.92.65.0-91.92.66.255
91.92.68.0/23
91.92.105.0/24
91.92.109.0/24
91.92.139.0/24
91.92.197.0-91.92.199.255
91.92.219.0/24
91.92.230.0/24
92.249.48.0/24
93.123.8.0/24
93.123.12.0/24
93.123.18.0/24
93.123.28.0/23
93.123.32.0-93.123.37.255
93.123.64.0/24
93.123.108.0/24
94.156.10.0/24
94.156.12.0/24
94.156.15.0/24
94.156.42.0/24
94.156.44.0/24
94.156.77.0/24
94.156.94.0/23
94.156.98.0/24
94.156.100.0/24
94.156.102.0/24
94.156.106.0/24
94.156.129.0/24
94.156.153.0/24
94.156.158.0/23
94.156.172.0/23
94.156.184.0-94.156.188.255
94.156.190.0/24
94.156.216.0/21
94.156.227.0/24
94.156.248.0/23
94.156.251.0-94.156.252.255
212.73.128.0-212.73.136.255
212.73.138.0-212.73.148.255
212.73.155.0/24
212.73.157.0/24
IPv6:
2a00:1728::/32
Signature Algorithm: sha256WithRSAEncryption
60:94:eb:bf:6e:17:f6:5a:ed:fc:d8:3c:45:85:28:85:49:fc:
b8:26:0a:a7:7d:68:87:fa:9b:92:bb:5e:95:1a:62:f5:85:b8:
70:f4:29:c3:38:99:d4:8d:13:28:f5:e2:f2:ab:f5:7d:dc:63:
b8:68:d6:fc:6f:3b:fb:67:ee:9e:4e:f2:28:5c:40:2f:3e:17:
cc:49:93:fa:55:b5:21:85:3a:a8:83:94:58:8f:7b:b4:4d:c1:
26:78:ef:4a:7b:ae:f7:a6:ab:d1:ee:03:c2:dd:1e:66:eb:8b:
ac:a5:dc:7d:77:55:b4:c5:bc:ec:d6:e4:79:ae:6e:9b:e7:43:
ed:87:22:5c:17:39:71:a9:c5:21:d2:41:4c:cc:26:ce:dd:29:
54:2f:17:50:90:a2:64:f9:c8:88:18:da:1c:2f:61:ab:5e:0e:
18:c1:47:c0:97:9d:3b:56:8b:99:d1:ea:66:e8:10:d0:a8:35:
18:50:c0:4b:b2:98:c2:96:b2:7e:9a:50:f4:66:80:72:32:23:
90:c8:b2:e7:fb:bc:44:7d:71:5e:4f:c2:a0:de:c6:1b:0c:b4:
97:41:37:e0:26:88:6f:7c:11:74:32:79:35:85:ee:70:c1:47:
bf:25:73:0d:ed:9e:08:a8:14:c2:58:a8:d2:b2:73:bc:a9:f2:
c6:bf:4a:47
-----BEGIN CERTIFICATE-----
MIIHVDCCBjygAwIBAgIEHcUDHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDQw
NzA2MzUwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODQ4YzU4ZjQ5NjNi
MDZmNGQyOGQ1MDQxN2I0YzYxY2RjODg4YWU2YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJTBMSEjikLu3CU3LA9vTJx8E8arzrEj1FdTqXycjn7bg9/o
45oiVGnEJM7jj5k0B9tOOzzo2v5ssY55B3BvFT630o/In30q/H+ZNABF8S3bVtY1
T1ebkoHpmniw9tPf+Huv18ux42JhrzWUxzhRLYI/AxoRYPtJ87+G4PVsot49d617
5NXdQPAWFvsKVSOPFjHj+E8Mov+1RRCVvfkesV9Gyx3C00cozq5H1B7iJzVJchMH
ADvV90ZQeVfEBa7huc2Mbyh3DWYB7qBKy9iKUV4WF/G3xcEPD97Xwt0S4UE7T8uK
NqRSBbUdbdFwyzIFrXnHxdH3/gddHaNA22QLCvECAwEAAaOCBG4wggRqMB0GA1Ud
DgQWBBSEjFj0ljsG9NKNUEF7TGHNyIiuazAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L2hJeFk5Slk3QnZUU2pWQkJlMHhoemNpSXJtcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AoIGCCsGAQUFBwEHAQH/BIICcTCCAm0wggJaBAIAATCCAlIDBAEfDcIDBAAfDcUD
BAMfDdgDBAEfDeYDBAIfDewDBAAfDfEDBAAfDfUDBAIfDfgDBAElPIoDBABV2ZEw
DAMEAVd4BgMEAFd4CAMEAFd4DQMFAFd4JGQDBABXeCUDBABXeCcDBABXeCsDBABX
eD0DBABXeGgDBABXeG0DBAFXeIADBAJXeIQDBABXeLADBABXeMMwDAMEAFd4xwME
AVd4yAMEAVd4zgMEAFd42QMEAFd43zAMAwQAV3j9AwQAV3kCAwQBV3kGAwQAV3kq
AwQAV3k0AwQAV3k2AwQAV3k7AwQAV3lAAwQAV3lPAwQBV3lSAwQBV3laMAwDBABX
eW8DBAFXeXADBABXeXYDBAFXeZYDBABXeaEwCwMDAltcAwQAW1wCMAwDBABbXEED
BABbXEIDBAFbXEQDBABbXGkDBABbXG0DBABbXIswDAMEAFtcxQMEA1tcwAMEAFtc
2wMEAFtc5gMEAFz5MAMEAF17CAMEAF17DAMEAF17EgMEAV17HDAMAwQFXXsgAwQB
XXskAwQAXXtAAwQAXXtsAwQAXpwKAwQAXpwMAwQAXpwPAwQAXpwqAwQAXpwsAwQA
XpxNAwQBXpxeAwQAXpxiAwQAXpxkAwQAXpxmAwQAXpxqAwQAXpyBAwQAXpyZAwQB
XpyeAwQBXpysMAwDBANenLgDBABenLwDBABenL4DBANenNgDBABenOMDBAFenPgw
DAMEAF6c+wMEAF6c/DAMAwQH1EmAAwQA1EmIMAwDBAHUSYoDBADUSZQDBADUSZsD
BADUSZ0wDQQCAAIwBwMFACoAFygwDQYJKoZIhvcNAQELBQADggEBAGCU679uF/Za
7fzYPEWFKIVJ/LgmCqd9aIf6m5K7XpUaYvWFuHD0KcM4mdSNEyj14vKr9X3cY7ho
1vxvO/tn7p5O8ihcQC8+F8xJk/pVtSGFOqiDlFiPe7RNwSZ470p7rvemq9HuA8Ld
Hmbri6yl3H13VbTFvOzW5HmubpvnQ+2HIlwXOXGpxSHSQUzMJs7dKVQvF1CQomT5
yIgY2hwvYateDhjBR8CXnTtWi5nR6mboENCoNRhQwEuymMKWsn6aUPRmgHIyI5DI
suf7vER9cV5PwqDexhsMtJdBN+AmiG98EXQyeTWF7nDBR78lcw3tngioFMJYqNKy
c7yp8sa/Skc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org