Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/cf5fMZxXStdTWNqYd_Rvade3NVU.roa
File: cf5fMZxXStdTWNqYd_Rvade3NVU.roa (raw, json)
Hash identifier: Pcon0kRu4zSnThbCL6mC2+PV0kiB6KK6hHJv19eLUSc=
Subject key identifier: 71:FE:5F:31:9C:57:4A:D7:53:58:DA:98:77:F4:6F:69:D7:B7:35:55
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 0189C08BAFA703FEC21AAAA4D3C155CDE72E
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/cf5fMZxXStdTWNqYd_Rvade3NVU.roa
Signing time: Fri 04 Aug 2023 12:35:27 +0000
ROA not before: Fri 04 Aug 2023 12:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3302
IP address blocks: 185.82.0.0/22 maxlen: 22
213.136.128.0/18 maxlen: 24
217.29.160.0/20 maxlen: 20
193.219.30.0/24 maxlen: 24
194.20.0.0/16 maxlen: 24
213.149.192.0/19 maxlen: 19
212.90.0.0/19 maxlen: 24
194.21.0.0/18 maxlen: 24
194.21.128.0/18 maxlen: 24
194.153.192.0/20 maxlen: 24
83.211.0.0/16 maxlen: 24
212.110.0.0/19 maxlen: 24
62.94.0.0/16 maxlen: 24
195.62.224.0/19 maxlen: 24
194.153.208.0/22 maxlen: 24
213.198.128.0/18 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:8b:af:a7:03:fe:c2:1a:aa:a4:d3:c1:55:cd:e7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Aug 4 12:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71fe5f319c574ad75358da9877f46f69d7b73555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c7:76:fc:a5:15:3a:dd:65:7d:ac:75:00:3c:
b9:e5:47:0f:3e:fa:c4:68:79:a4:a0:14:1a:12:53:
a9:37:d6:3d:f9:36:6f:99:d7:c5:18:03:ef:e4:22:
9d:94:3b:4d:39:a2:6b:8b:f0:82:2c:66:35:84:78:
a0:ab:b9:24:d0:5b:2e:a1:b8:bc:9f:6d:26:dc:3e:
cb:d6:0f:5a:bf:e9:f7:ff:5e:c2:d0:a8:3b:c5:c7:
b3:2b:f1:f7:16:6c:d4:a5:64:4a:21:f6:3b:ef:15:
01:89:1a:0b:a3:87:1d:18:68:78:80:aa:b4:64:25:
c9:e6:ba:7a:3d:5f:e9:04:f4:ed:0d:e7:c3:a6:63:
98:22:fd:06:5d:97:ba:78:7a:19:57:a4:04:41:36:
b7:82:41:29:4f:04:68:a0:0d:72:79:d0:7c:61:cb:
87:3d:1e:a1:ef:1b:a1:a3:f5:ea:48:64:51:9f:57:
6d:a6:2b:82:49:ad:ea:01:52:15:dc:2c:f9:50:80:
c7:3f:73:cb:9f:9d:4a:0f:8b:06:6c:da:f4:bd:f8:
da:45:03:1f:17:27:11:28:d4:21:44:f0:aa:d3:28:
93:cb:70:ea:23:19:d6:be:ca:e8:aa:57:ed:84:f7:
f5:1e:c6:c2:1f:03:46:6c:a5:d9:41:49:40:7d:79:
77:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FE:5F:31:9C:57:4A:D7:53:58:DA:98:77:F4:6F:69:D7:B7:35:55
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/cf5fMZxXStdTWNqYd_Rvade3NVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.94.0.0/16
83.211.0.0/16
185.82.0.0/22
193.219.30.0/24
194.20.0.0-194.21.63.255
194.21.128.0/18
194.153.192.0-194.153.211.255
195.62.224.0/19
212.90.0.0/19
212.110.0.0/19
213.136.128.0/18
213.149.192.0/19
213.198.128.0/18
217.29.160.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:44:69:75:ef:5e:f9:7b:ec:81:94:5f:6d:a7:86:71:44:d2:
f3:63:a0:6f:a5:73:25:c2:41:fd:a2:1b:cf:30:83:3c:be:5c:
b0:28:10:b0:f0:1e:ab:29:cb:31:a4:ce:e2:12:3d:37:2e:c9:
24:c4:91:a8:d9:45:ea:bd:65:ce:df:58:88:ba:2c:46:f3:8d:
dd:35:a2:94:9d:8b:a8:2a:28:de:ee:c9:90:86:c6:7f:40:92:
a4:f2:62:4a:2a:95:35:b8:e6:9e:d1:3b:52:1d:b7:82:0b:62:
af:f9:f1:3d:32:90:f5:30:c4:d4:22:95:5f:b4:fc:f0:7a:20:
4b:15:e9:8d:e0:d8:90:61:02:35:b9:68:f1:54:e5:6b:2c:8d:
47:84:38:0d:49:26:cc:ca:77:bd:71:8e:78:5e:34:fe:29:83:
7e:6f:44:17:10:f8:15:1c:44:cf:15:be:b0:f9:6b:3b:b8:d3:
d6:86:97:8f:dd:3f:f0:49:ab:01:39:a8:c1:9f:a1:a8:f4:a8:
3c:79:ad:f5:fd:55:20:a8:53:cf:61:01:43:73:bd:89:52:cf:
44:a4:96:c1:c2:59:6c:6e:0d:0b:50:1e:9e:43:44:31:7e:4a:
2a:04:bf:16:2b:71:9e:f2:48:d2:a0:55:6b:54:a5:b3:e0:f5:
ad:99:5e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net