Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/x410HWYmovgL-2MtNr12rGJhkUU.roa
File: x410HWYmovgL-2MtNr12rGJhkUU.roa (raw, json)
Hash identifier: WGCE9zOy4KCOIRivRO82AQHvZsLUe68S0cb0Fm28uqQ=
Subject key identifier: C7:8D:74:1D:66:26:A2:F8:0B:FB:63:2D:36:BD:76:AC:62:61:91:45
Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Certificate serial: 0189DE5F3029E533E75A7E8980342869FF1C
Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/x410HWYmovgL-2MtNr12rGJhkUU.roa
Signing time: Thu 10 Aug 2023 07:35:27 +0000
ROA not before: Thu 10 Aug 2023 07:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34513
IP address blocks: 85.198.28.0/24 maxlen: 24
85.198.29.0/24 maxlen: 24
85.198.0.0/24 maxlen: 24
85.198.1.0/24 maxlen: 24
85.198.2.0/24 maxlen: 24
85.198.3.0/24 maxlen: 24
85.198.4.0/24 maxlen: 24
85.198.5.0/24 maxlen: 24
85.198.6.0/24 maxlen: 24
85.198.7.0/24 maxlen: 24
85.198.16.0/24 maxlen: 24
78.110.124.0/24 maxlen: 24
85.198.17.0/24 maxlen: 24
78.110.125.0/24 maxlen: 24
85.198.18.0/24 maxlen: 24
78.110.126.0/24 maxlen: 24
85.198.19.0/24 maxlen: 24
78.110.127.0/24 maxlen: 24
85.198.20.0/24 maxlen: 24
85.198.21.0/24 maxlen: 24
85.198.22.0/24 maxlen: 24
85.198.23.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:5f:30:29:e5:33:e7:5a:7e:89:80:34:28:69:ff:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Validity
Not Before: Aug 10 07:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c78d741d6626a2f80bfb632d36bd76ac62619145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:84:83:a7:74:b0:3a:a8:f3:05:3d:e7:41:
2f:21:92:ec:ca:d4:a3:28:8e:ee:cc:cb:fb:65:02:
92:c8:c5:b8:1e:3f:9c:ed:60:fc:a5:bf:7a:48:f8:
aa:a2:d0:e1:fd:3d:bb:5c:39:52:56:95:74:99:a7:
3b:02:1b:cf:be:4f:84:c6:86:7c:91:90:51:1b:74:
cc:1c:e5:91:3f:f1:e9:37:34:f4:04:32:04:c2:13:
87:62:dd:2f:5d:51:5b:e5:90:36:4a:f2:a0:f8:d6:
bb:bc:bc:d0:f4:18:8e:2a:a3:ba:47:14:70:0d:05:
a3:e3:d7:5b:c1:3c:a3:ca:48:ed:e5:41:d3:9f:58:
f0:6d:81:be:35:55:4e:2a:26:a1:cc:38:d8:cd:11:
48:75:4b:05:01:96:53:8d:8a:93:e5:f0:0f:3d:b8:
da:21:0b:54:4e:c0:9e:30:bf:1c:a0:1c:3d:43:00:
ff:f5:83:04:d0:13:86:8c:60:88:8d:e9:fc:ac:39:
07:3c:e5:5d:bd:04:d9:6e:e7:c0:87:f3:c3:e7:7e:
80:71:7e:85:f0:ed:d2:42:b7:e5:27:54:4a:51:3b:
46:b1:36:10:bd:26:83:36:11:0d:16:96:10:93:85:
57:46:61:2b:a8:ba:07:d4:86:69:ed:1c:24:f2:8a:
b7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8D:74:1D:66:26:A2:F8:0B:FB:63:2D:36:BD:76:AC:62:61:91:45
X509v3 Authority Key Identifier:
keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/x410HWYmovgL-2MtNr12rGJhkUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.124.0/22
85.198.0.0/21
85.198.16.0/21
85.198.28.0/23
Signature Algorithm: sha256WithRSAEncryption
07:22:7d:1d:2d:01:10:2f:97:8d:b4:8b:98:3f:b1:1b:b2:7c:
8c:cd:91:3e:23:16:d0:9e:92:7f:c0:28:55:45:0f:41:03:16:
ec:73:f7:18:4c:3a:97:40:66:bc:25:a5:e7:3a:05:2a:7b:54:
fc:16:ad:a3:4a:ba:7c:9d:ed:a3:03:64:12:66:cd:47:81:27:
d4:da:ef:55:94:3a:89:c9:43:01:bd:f8:e5:0b:8e:4b:bb:2a:
56:8b:db:dd:fd:2f:b7:5c:14:54:9d:f7:90:79:29:f1:ac:b2:
23:cf:df:6a:53:64:fb:ab:46:f5:37:04:46:57:64:4d:d8:70:
02:d9:23:33:ce:1a:a1:ba:53:f4:5d:fe:38:72:18:5a:28:4c:
0f:eb:b5:00:e0:d0:62:a3:fb:ca:67:ac:61:00:50:0f:d6:5e:
b0:81:0b:a4:02:98:05:7c:3e:fa:02:2d:cf:06:f9:3d:0f:9f:
79:55:b8:df:f5:a6:35:7a:85:04:c9:8d:79:1e:47:aa:51:a5:
94:df:2c:04:97:58:23:81:2b:60:64:c1:ac:7a:75:68:cc:ce:
11:0d:e5:56:51:72:52:c5:dd:37:ef:40:ee:9a:89:59:7b:8a:
27:31:1e:b2:9a:5a:a0:10:99:c9:a4:47:a5:3c:f5:35:53:1b:
62:88:2b:9c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYneXzAp5TPnWn6JgDQoaf8cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NzMwYmI4YjI2MjNlN2Y2NWE2MTYzNjA0ZDFjODVmOTEw
NjI4OGYwHhcNMjMwODEwMDczNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzhkNzQxZDY2MjZhMmY4MGJmYjYzMmQzNmJkNzZhYzYyNjE5MTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGmEg6d0sDqo8wU950EvIZLsytSj
KI7uzMv7ZQKSyMW4Hj+c7WD8pb96SPiqotDh/T27XDlSVpV0mac7AhvPvk+ExoZ8
kZBRG3TMHOWRP/HpNzT0BDIEwhOHYt0vXVFb5ZA2SvKg+Na7vLzQ9BiOKqO6RxRw
DQWj49dbwTyjykjt5UHTn1jwbYG+NVVOKiahzDjYzRFIdUsFAZZTjYqT5fAPPbja
IQtUTsCeML8coBw9QwD/9YME0BOGjGCIjen8rDkHPOVdvQTZbufAh/PD536AcX6F
8O3SQrflJ1RKUTtGsTYQvSaDNhENFpYQk4VXRmErqLoH1IZp7Rwk8oq3gwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMeNdB1mJqL4C/tjLTa9dqxiYZFFMB8GA1UdIwQY
MBaAFDVzC7iyYj5/ZaYWNgTRyF+RBiiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2Mt
M2E0ZGZmOGU4ZGVkLzEveDQxMEhXWW1vdmdMLTJNdE5yMTJyR0poa1VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2MtM2E0ZGZmOGU4ZGVk
LzEvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCTm58AwQD
VcYAAwQDVcYQAwQBVcYcMA0GCSqGSIb3DQEBCwUAA4IBAQAHIn0dLQEQL5eNtIuY
P7EbsnyMzZE+IxbQnpJ/wChVRQ9BAxbsc/cYTDqXQGa8JaXnOgUqe1T8Fq2jSrp8
ne2jA2QSZs1HgSfU2u9VlDqJyUMBvfjlC45LuypWi9vd/S+3XBRUnfeQeSnxrLIj
z99qU2T7q0b1NwRGV2RN2HAC2SMzzhqhulP0Xf44chhaKEwP67UA4NBio/vKZ6xh
AFAP1l6wgQukApgFfD76Ai3PBvk9D595Vbjf9aY1eoUEyY15HkeqUaWU3ywEl1gj
gStgZMGsenVozM4RDeVWUXJSxd0370DumolZe4onMR6ymlqgEJnJpEelPPU1Uxti
iCuc
-----END CERTIFICATE-----
Generated at Tue Aug 15 08:03:21 2023 by rpki-client on console-fra.rpki-client.org