Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/TL3f-8lUo60CtJ8ANKeC8A4aHUg.roa
File: TL3f-8lUo60CtJ8ANKeC8A4aHUg.roa (raw, json)
Hash identifier: 6C8y8VTMNSstBP21z/fRrI42kJ+wVB9PcGGFz8/ndvM=
Subject key identifier: 4C:BD:DF:FB:C9:54:A3:AD:02:B4:9F:00:34:A7:82:F0:0E:1A:1D:48
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 043DA5D8
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/TL3f-8lUo60CtJ8ANKeC8A4aHUg.roa
Signing time: Sat 01 Jan 2022 07:00:16 +0000
ROA not before: Sat 01 Jan 2022 07:00:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204554
IP address blocks: 85.187.215.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71149016 (0x43da5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Jan 1 07:00:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cbddffbc954a3ad02b49f0034a782f00e1a1d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:c2:93:aa:9f:18:d7:4b:94:9d:85:e1:02:
ba:db:f9:39:63:1f:2b:fc:56:8f:d7:58:4b:7c:a6:
5c:29:00:38:b1:86:be:b9:0f:11:0e:33:22:e6:15:
fc:4f:b8:a8:dc:d7:97:82:ae:48:71:9f:c7:a8:32:
f2:f2:3b:04:0f:71:ee:74:76:65:f9:61:f7:ea:8a:
11:7c:df:5a:0e:fa:df:e3:98:be:4f:f7:88:24:f5:
ad:22:13:47:70:56:a3:b4:08:4c:44:98:04:4b:75:
92:a0:1b:60:d9:b5:5c:7c:50:89:55:40:e2:bd:dd:
8e:11:58:10:c4:e2:e1:e1:2c:46:f8:9c:e4:36:7c:
cf:89:75:97:f7:b9:32:85:67:a0:22:e8:5e:5e:ca:
1a:ab:76:70:25:f6:6f:06:4e:9a:14:21:46:26:db:
55:16:d5:5b:59:c7:22:79:0d:f4:50:b6:52:71:05:
e5:b9:07:72:81:27:50:49:c7:3b:af:56:1e:95:41:
98:19:0e:a7:2b:45:8c:8f:99:17:a4:9a:58:5e:2a:
98:55:63:e3:d0:11:92:9f:11:64:21:53:ff:92:e8:
a7:75:5a:12:22:26:e9:85:af:97:5f:38:0d:97:3c:
1c:d5:e2:ac:25:b7:e5:55:1e:bb:6f:4b:fc:9e:99:
89:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BD:DF:FB:C9:54:A3:AD:02:B4:9F:00:34:A7:82:F0:0E:1A:1D:48
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/TL3f-8lUo60CtJ8ANKeC8A4aHUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.215.0/24
Signature Algorithm: sha256WithRSAEncryption
61:05:80:51:b1:f0:bd:39:06:8c:88:46:df:06:6f:eb:30:80:
f8:68:70:99:d5:bb:0f:c9:12:dd:73:a3:9f:20:af:1b:b4:07:
97:87:0d:95:0b:cc:1b:83:f5:99:fa:93:27:55:2d:2b:df:e7:
87:0b:c0:78:c7:06:96:d4:48:7a:1e:29:82:99:a0:a1:5c:a1:
3a:bd:92:52:53:40:01:e4:88:06:b3:9e:68:9f:ca:88:57:cb:
a8:be:71:bf:9c:3a:a9:50:ef:40:53:3c:86:d0:ba:c5:39:02:
4d:3f:37:ef:cc:92:84:48:7c:f0:23:5e:fc:54:ee:0b:ce:60:
f4:c5:1a:7e:36:b7:b1:e9:44:fe:8c:5e:11:26:88:5e:08:02:
77:a7:a8:c0:63:a8:be:64:bb:85:7d:e1:4c:7c:67:be:58:5d:
e0:9f:82:bc:e9:b9:0d:a4:19:0b:58:0b:09:0c:64:06:7e:16:
76:0f:63:f7:3b:93:15:63:67:09:d7:27:5f:70:b0:75:7e:76:
1f:b2:42:0b:73:cd:25:b4:9a:4e:b1:d5:a4:48:4e:46:9e:48:
e5:1f:ae:64:c7:e3:1b:29:6e:97:33:e7:db:b5:ec:77:ba:93:
86:7e:9e:b2:f6:af:27:fa:c4:0c:8e:0b:a8:08:c0:1f:3e:9d:
03:58:82:39
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBD2l2DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDdiNGJjYWJlYjI5NjA1ZWE1MTFkZTk3M2U0Njc1YzRiOGEyOWRmMB4XDTIyMDEw
MTA3MDAxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGNiZGRmZmJjOTU0
YTNhZDAyYjQ5ZjAwMzRhNzgyZjAwZTFhMWQ0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJVGwpOqnxjXS5SdheECutv5OWMfK/xWj9dYS3ymXCkAOLGG
vrkPEQ4zIuYV/E+4qNzXl4KuSHGfx6gy8vI7BA9x7nR2Zflh9+qKEXzfWg763+OY
vk/3iCT1rSITR3BWo7QITESYBEt1kqAbYNm1XHxQiVVA4r3djhFYEMTi4eEsRvic
5DZ8z4l1l/e5MoVnoCLoXl7KGqt2cCX2bwZOmhQhRibbVRbVW1nHInkN9FC2UnEF
5bkHcoEnUEnHO69WHpVBmBkOpytFjI+ZF6SaWF4qmFVj49ARkp8RZCFT/5Lop3Va
EiIm6YWvl184DZc8HNXirCW35VUeu29L/J6ZiXMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRMvd/7yVSjrQK0nwA0p4LwDhodSDAfBgNVHSMEGDAWgBR9e0vKvrKWBepR
Helz5GdcS4op3zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZYdEx5cjZ5bGdYcVVSM3BjLVJuWEV1S0tkOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTcvODg5N2ZkLTE4NjItNDM5My1hYTRiLTQ0NzYxN2E0YTc0NC8x
L1RMM2YtOGxVbzYwQ3RKOEFOS2VDOEE0YUhVZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcv
ODg5N2ZkLTE4NjItNDM5My1hYTRiLTQ0NzYxN2E0YTc0NC8xL2ZYdEx5cjZ5bGdY
cVVSM3BjLVJuWEV1S0tkOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFW71zANBgkqhkiG9w0BAQsFAAOC
AQEAYQWAUbHwvTkGjIhG3wZv6zCA+GhwmdW7D8kS3XOjnyCvG7QHl4cNlQvMG4P1
mfqTJ1UtK9/nhwvAeMcGltRIeh4pgpmgoVyhOr2SUlNAAeSIBrOeaJ/KiFfLqL5x
v5w6qVDvQFM8htC6xTkCTT8378yShEh88CNe/FTuC85g9MUafja3selE/oxeESaI
XggCd6eowGOovmS7hX3hTHxnvlhd4J+CvOm5DaQZC1gLCQxkBn4Wdg9j9zuTFWNn
CdcnX3CwdX52H7JCC3PNJbSaTrHVpEhORp5I5R+uZMfjGylulzPn27Xsd7qThn6e
svavJ/rEDI4LqAjAHz6dA1iCOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:31 2024 by rpki-client on console-fra.rpki-client.org