Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/8MiqzjajkeDI98495DU26aDigyg.roa
File: 8MiqzjajkeDI98495DU26aDigyg.roa (raw, json)
Hash identifier: BXvW7n0Z99Kwr1VXj+JQLd7w4us71OaPFRwHAwFFZvE=
Subject key identifier: F0:C8:AA:CE:36:A3:91:E0:C8:F7:CE:3D:E4:35:36:E9:A0:E2:83:28
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 03C6CBCD
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/8MiqzjajkeDI98495DU26aDigyg.roa
Signing time: Thu 31 Mar 2022 09:16:48 +0000
ROA not before: Thu 31 Mar 2022 09:16:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 185.126.80.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.158.0/23 maxlen: 23
185.108.206.0/24 maxlen: 24
185.194.178.0/24 maxlen: 24
185.36.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63359949 (0x3c6cbcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 31 09:16:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0c8aace36a391e0c8f7ce3de43536e9a0e28328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:b0:8f:87:e1:90:ec:63:8c:d7:68:6e:d8:
88:4f:55:48:69:6e:29:30:6b:96:cd:f1:a2:58:ca:
70:aa:97:18:fd:27:0f:18:f4:73:62:ea:ee:ea:d9:
05:06:60:61:44:e7:84:81:4a:f8:4f:94:5f:24:78:
4e:f0:6d:95:b6:44:51:f0:6c:19:30:59:10:f0:34:
d8:ca:0e:df:17:7d:48:44:75:3c:73:1d:1b:55:82:
06:ea:e3:2a:e8:51:90:c5:ef:19:20:01:e5:2d:b8:
72:fd:41:18:85:60:b7:b2:e2:ad:5e:4b:75:d5:17:
2c:b4:9f:5e:77:2c:40:91:55:70:74:05:f1:57:a7:
b1:32:9d:51:03:ec:04:71:17:70:3b:89:fa:7f:e1:
5a:3e:c5:f0:31:46:7e:05:75:f8:09:71:b7:1a:fd:
db:15:be:59:e7:e6:0c:d5:95:2f:61:2e:d6:68:0d:
e0:5c:4f:e6:e0:b0:5d:5c:a8:ec:5d:a6:b9:54:3f:
17:da:4d:f0:a5:09:92:2e:87:d0:95:2b:bb:24:c3:
a7:c6:d0:95:a5:bb:e2:93:f6:05:2f:f2:56:f5:54:
38:11:8b:fd:c8:4f:a8:07:34:da:5c:2e:dd:f7:95:
d8:56:4e:33:4e:03:32:be:b3:b5:a5:e0:07:cf:af:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C8:AA:CE:36:A3:91:E0:C8:F7:CE:3D:E4:35:36:E9:A0:E2:83:28
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/8MiqzjajkeDI98495DU26aDigyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.207.0/24
185.108.206.0/24
185.126.80.0/24
185.194.178.0/24
185.199.151.0/24
185.199.158.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:ea:08:74:d8:ab:f8:04:88:a6:4a:a4:43:09:c0:74:07:10:
e3:fa:d8:41:3a:92:b8:12:ee:b4:f1:de:2c:2a:c7:81:98:9e:
f6:d7:df:14:81:a9:ba:17:a5:4c:38:b4:7a:18:46:8b:5b:9f:
3f:dd:ad:43:3c:dc:e2:fa:41:27:15:65:d5:28:39:c5:c9:59:
27:44:c7:fa:39:02:93:de:53:72:9b:ad:34:a3:01:dc:a2:ce:
cd:5d:dc:3b:08:cc:4f:d4:a1:f6:12:94:d4:a5:24:d4:b2:e1:
51:39:a0:97:fc:0a:52:b9:11:b8:2a:ba:13:ee:d6:09:23:7c:
80:11:26:71:43:bf:51:91:70:a0:d3:f0:d3:8f:38:f4:8d:f9:
7a:5a:40:14:99:f2:b6:1a:19:c0:6b:7b:67:52:20:5f:3c:d7:
7e:8c:c6:fa:90:25:60:45:14:27:61:1b:32:c7:b1:30:22:c9:
33:d2:cb:8b:26:60:b9:22:46:43:70:63:34:5d:a4:4a:51:29:
0c:de:bd:d1:ae:82:6b:90:bb:c4:92:7e:7f:fa:93:9a:bf:60:
f3:3a:66:33:53:67:1a:fd:fd:fc:ec:1b:e9:97:20:a7:7a:db:
f2:ac:5e:8c:5c:bd:ac:26:ef:ee:91:56:a4:9a:6f:8e:82:9d:
9e:b1:8d:e7
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEA8bLzTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NjhiZmI4YTVlZWU0OTA4MmVhNjI4ZGYyNWE0YTVkNTBmM2FhOWIzMB4XDTIyMDMz
MTA5MTY0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjBjOGFhY2UzNmEz
OTFlMGM4ZjdjZTNkZTQzNTM2ZTlhMGUyODMyODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMEesI+H4ZDsY4zXaG7YiE9VSGluKTBrls3xoljKcKqXGP0n
Dxj0c2Lq7urZBQZgYUTnhIFK+E+UXyR4TvBtlbZEUfBsGTBZEPA02MoO3xd9SER1
PHMdG1WCBurjKuhRkMXvGSAB5S24cv1BGIVgt7LirV5LddUXLLSfXncsQJFVcHQF
8VensTKdUQPsBHEXcDuJ+n/hWj7F8DFGfgV1+Alxtxr92xW+WefmDNWVL2Eu1mgN
4FxP5uCwXVyo7F2muVQ/F9pN8KUJki6H0JUruyTDp8bQlaW74pP2BS/yVvVUOBGL
/chPqAc02lwu3feV2FZOM04DMr6ztaXgB8+vQIMCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBTwyKrONqOR4Mj3zj3kNTbpoOKDKDAfBgNVHSMEGDAWgBQ2i/uKXu5JCC6m
KN8lpKXVDzqpszAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05vdjdpbDd1U1FndXBpamZKYVNsMVE4NnFiTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvYWE1OGMzLWU3MDYtNGE0OS1hN2M1LTBhZTJlOTIyYTI5Mi8x
LzhNaXF6amFqa2VESTk4NDk1RFUyNmFEaWd5Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUv
YWE1OGMzLWU3MDYtNGE0OS1hN2M1LTBhZTJlOTIyYTI5Mi8xL05vdjdpbDd1U1Fn
dXBpamZKYVNsMVE4NnFiTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEALkkzwMEALlszgMEALl+UAMEALnC
sgMEALnHlwMEAbnHnjANBgkqhkiG9w0BAQsFAAOCAQEAD+oIdNir+ASIpkqkQwnA
dAcQ4/rYQTqSuBLutPHeLCrHgZie9tffFIGpuhelTDi0ehhGi1ufP92tQzzc4vpB
JxVl1Sg5xclZJ0TH+jkCk95TcputNKMB3KLOzV3cOwjMT9Sh9hKU1KUk1LLhUTmg
l/wKUrkRuCq6E+7WCSN8gBEmcUO/UZFwoNPw04849I35elpAFJnythoZwGt7Z1Ig
XzzXfozG+pAlYEUUJ2EbMsexMCLJM9LLiyZguSJGQ3BjNF2kSlEpDN690a6Ca5C7
xJJ+f/qTmr9g8zpmM1NnGv39/Owb6Zcgp3rb8qxejFy9rCbv7pFWpJpvjoKdnrGN
5w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org