Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/YilAmwgJofmhLfhT60jwefqQ7b4.roa
File: YilAmwgJofmhLfhT60jwefqQ7b4.roa (raw, json)
Hash identifier: uE5nLqknqD+i38gg0UReAant+j+q88H4KC1uUf1lDlU=
Subject key identifier: 62:29:40:9B:08:09:A1:F9:A1:2D:F8:53:EB:48:F0:79:FA:90:ED:BE
Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Certificate serial: 18821613
Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/YilAmwgJofmhLfhT60jwefqQ7b4.roa
Signing time: Sat 01 Jan 2022 04:57:34 +0000
ROA not before: Sat 01 Jan 2022 04:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34513
IP address blocks: 85.198.28.0/24 maxlen: 24
85.198.29.0/24 maxlen: 24
85.198.25.0/24 maxlen: 24
85.198.26.0/24 maxlen: 24
85.198.27.0/24 maxlen: 24
85.198.0.0/24 maxlen: 24
85.198.1.0/24 maxlen: 24
85.198.2.0/24 maxlen: 24
85.198.3.0/24 maxlen: 24
85.198.4.0/24 maxlen: 24
78.110.112.0/24 maxlen: 24
85.198.9.0/24 maxlen: 24
85.198.6.0/24 maxlen: 24
85.198.5.0/24 maxlen: 24
78.110.113.0/24 maxlen: 24
78.110.118.0/24 maxlen: 24
78.110.114.0/24 maxlen: 24
85.198.7.0/24 maxlen: 24
78.110.115.0/24 maxlen: 24
85.198.8.0/24 maxlen: 24
85.198.10.0/24 maxlen: 24
85.198.11.0/24 maxlen: 24
78.110.116.0/24 maxlen: 24
78.110.117.0/24 maxlen: 24
78.110.122.0/24 maxlen: 24
85.198.14.0/24 maxlen: 24
85.198.13.0/24 maxlen: 24
85.198.15.0/24 maxlen: 24
78.110.123.0/24 maxlen: 24
85.198.16.0/24 maxlen: 24
78.110.121.0/24 maxlen: 24
78.110.124.0/24 maxlen: 24
85.198.17.0/24 maxlen: 24
85.198.12.0/24 maxlen: 24
78.110.125.0/24 maxlen: 24
78.110.119.0/24 maxlen: 24
78.110.120.0/24 maxlen: 24
85.198.23.0/24 maxlen: 24
85.198.21.0/24 maxlen: 24
85.198.22.0/24 maxlen: 24
85.198.24.0/24 maxlen: 24
85.198.18.0/24 maxlen: 24
78.110.126.0/24 maxlen: 24
85.198.19.0/24 maxlen: 24
78.110.127.0/24 maxlen: 24
85.198.20.0/24 maxlen: 24
185.58.241.0/24 maxlen: 24
185.58.242.0/24 maxlen: 24
185.58.240.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411178515 (0x18821613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Validity
Not Before: Jan 1 04:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6229409b0809a1f9a12df853eb48f079fa90edbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:e8:1e:90:e3:78:e9:80:fe:79:ca:f2:8e:
b2:04:ed:fc:4a:00:70:a0:ae:14:7b:ab:9c:e6:1e:
f7:4e:1c:11:13:04:8f:cc:90:7e:2b:8b:3a:2f:16:
e3:d6:fa:4e:a7:1e:31:73:39:e9:02:b1:2d:d3:9f:
8d:7c:11:7b:cf:0a:59:74:f8:55:5b:df:74:ab:90:
4b:52:1b:c6:36:b7:f1:9f:94:4a:89:32:16:57:4b:
e3:5d:0c:dc:c9:aa:6d:58:f2:fe:b3:49:8d:69:02:
2c:0e:14:65:d4:50:25:3a:22:7c:28:bf:c1:83:88:
9b:31:30:6e:b5:c1:2d:f3:ef:ef:31:f7:37:01:a0:
23:dc:0e:2c:bd:69:3e:c9:b6:b5:ec:56:51:1d:b8:
0f:e3:57:b3:67:94:70:7e:ab:40:f4:a8:03:65:44:
49:b6:6f:aa:6c:61:04:72:48:e7:66:d3:dd:3b:c0:
d3:7c:23:2a:0a:ff:e6:c9:34:50:6e:99:0f:72:67:
ff:d8:48:fe:e9:99:32:90:ad:b9:97:ae:30:4b:28:
35:4a:c9:1f:52:82:fa:77:5f:b5:3f:2b:83:c9:57:
7f:f9:f9:d6:b4:68:54:b9:08:5f:0e:c9:59:0c:d9:
2d:c0:99:98:8f:2c:bd:5a:04:f6:bf:54:69:09:83:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:29:40:9B:08:09:A1:F9:A1:2D:F8:53:EB:48:F0:79:FA:90:ED:BE
X509v3 Authority Key Identifier:
keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/YilAmwgJofmhLfhT60jwefqQ7b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.112.0/20
85.198.0.0-85.198.29.255
185.58.240.0-185.58.242.255
Signature Algorithm: sha256WithRSAEncryption
76:59:f6:9e:17:0d:78:6a:a0:e8:21:2d:ac:4f:de:b8:58:b8:
3c:bc:cb:65:23:cf:7f:5d:73:91:0c:a2:9c:1f:18:fa:33:13:
5b:00:cc:f2:8b:b6:26:f1:74:17:fe:7b:13:b5:e1:86:4e:fd:
d3:a2:49:ad:6b:e6:c0:d5:e5:58:da:99:b8:e7:4f:10:07:00:
2e:70:4f:de:05:b8:2e:a2:a2:37:0b:6a:04:15:0f:43:2b:80:
95:6a:49:28:53:eb:41:4a:48:83:b9:cb:3d:ce:10:3c:02:98:
c2:97:b6:c2:b9:26:c5:1f:aa:74:6f:79:c5:6f:9c:79:e5:30:
36:15:f8:0e:1c:ea:4d:d1:45:29:60:7b:5d:91:b4:bc:a3:2c:
87:e3:78:b8:59:c2:02:db:6e:5a:50:ff:64:ee:8f:64:0b:4f:
68:d7:6a:03:41:a6:44:e6:fa:5c:a2:1c:2d:44:c8:6f:fd:73:
43:bf:78:8d:6c:67:06:a0:76:27:f1:4c:3f:a1:d3:c7:38:08:
7a:b7:3a:b4:6e:77:69:d1:2f:4b:64:a3:14:11:66:d5:cc:61:
9d:aa:14:7d:9d:60:19:2b:8f:9c:24:3e:e5:3a:6b:d4:af:04:
92:0c:1b:09:5f:1f:91:a6:48:bb:b4:81:46:23:c8:37:5a:dc:
ca:1c:37:13
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org