Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/1RPf39ItdKKNBgi2RQh7Dn0CUbo.roa
File: 1RPf39ItdKKNBgi2RQh7Dn0CUbo.roa (raw, json)
Hash identifier: x4yXB8erIQ2/hnSsZOAQzr8afgO1i0y9G9LvqdOKNOM=
Subject key identifier: D5:13:DF:DF:D2:2D:74:A2:8D:06:08:B6:45:08:7B:0E:7D:02:51:BA
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 0186BAE255B90B12075CAE1A1F34A3F0CFF3
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/1RPf39ItdKKNBgi2RQh7Dn0CUbo.roa
Signing time: Tue 07 Mar 2023 07:04:00 +0000
ROA not before: Tue 07 Mar 2023 07:04:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210756
IP address blocks: 5.188.3.0/24 maxlen: 24
5.188.2.0/24 maxlen: 24
5.188.7.0/24 maxlen: 24
45.147.162.0/24 maxlen: 24
45.147.163.0/24 maxlen: 24
5.188.35.0/24 maxlen: 24
5.188.37.0/24 maxlen: 24
5.188.38.0/24 maxlen: 24
5.188.39.0/24 maxlen: 24
95.181.179.0/24 maxlen: 24
95.181.181.0/24 maxlen: 24
95.181.182.0/24 maxlen: 24
95.181.183.0/24 maxlen: 24
95.181.180.0/24 maxlen: 24
5.188.121.0/24 maxlen: 24
5.188.149.0/24 maxlen: 24
5.188.150.0/24 maxlen: 24
92.38.188.0/24 maxlen: 24
92.38.189.0/24 maxlen: 24
92.38.190.0/24 maxlen: 24
92.38.191.0/24 maxlen: 24
79.133.127.0/24 maxlen: 24
95.85.88.0/24 maxlen: 24
92.38.137.0/24 maxlen: 24
92.38.138.0/24 maxlen: 24
92.38.139.0/24 maxlen: 24
92.38.136.0/24 maxlen: 24
92.38.152.0/24 maxlen: 24
92.38.156.0/24 maxlen: 24
92.38.153.0/24 maxlen: 24
92.38.130.0/24 maxlen: 24
92.38.131.0/24 maxlen: 24
92.38.128.0/24 maxlen: 24
92.38.129.0/24 maxlen: 24
82.97.207.0/24 maxlen: 24
146.185.197.0/24 maxlen: 24
146.185.198.0/24 maxlen: 24
146.185.199.0/24 maxlen: 24
146.185.196.0/24 maxlen: 24
193.17.93.0/24 maxlen: 24
146.185.218.0/24 maxlen: 24
146.185.215.0/24 maxlen: 24
31.184.204.0/24 maxlen: 24
31.184.205.0/24 maxlen: 24
37.9.37.0/24 maxlen: 24
37.9.38.0/24 maxlen: 24
37.9.36.0/24 maxlen: 24
37.9.39.0/24 maxlen: 24
37.9.54.0/24 maxlen: 24
37.9.55.0/24 maxlen: 24
37.9.52.0/24 maxlen: 24
37.9.53.0/24 maxlen: 24
92.223.103.0/24 maxlen: 24
92.223.111.0/24 maxlen: 24
92.223.108.0/24 maxlen: 24
92.223.109.0/24 maxlen: 24
92.223.110.0/24 maxlen: 24
92.223.106.0/24 maxlen: 24
92.223.114.0/24 maxlen: 24
92.223.115.0/24 maxlen: 24
92.223.122.0/24 maxlen: 24
92.223.123.0/24 maxlen: 24
5.189.205.0/24 maxlen: 24
5.189.201.0/24 maxlen: 24
5.189.223.0/24 maxlen: 24
92.223.41.0/24 maxlen: 24
92.223.43.0/24 maxlen: 24
92.223.49.0/24 maxlen: 24
92.223.60.0/24 maxlen: 24
92.223.64.0/24 maxlen: 24
92.223.67.0/24 maxlen: 24
92.223.65.0/24 maxlen: 24
92.223.72.0/24 maxlen: 24
92.223.80.0/24 maxlen: 24
92.223.87.0/24 maxlen: 24
92.223.91.0/24 maxlen: 24
5.8.43.0/24 maxlen: 24
5.8.42.0/24 maxlen: 24
5.101.68.0/24 maxlen: 24
5.101.69.0/24 maxlen: 24
5.101.70.0/24 maxlen: 24
5.188.224.0/24 maxlen: 24
5.188.229.0/24 maxlen: 24
83.229.14.0/24 maxlen: 24
5.188.170.0/24 maxlen: 24
5.188.171.0/24 maxlen: 24
83.229.25.0/24 maxlen: 24
5.188.176.0/24 maxlen: 24
5.188.177.0/24 maxlen: 24
5.188.178.0/24 maxlen: 24
5.188.179.0/24 maxlen: 24
5.188.212.0/24 maxlen: 24
92.223.4.0/24 maxlen: 24
92.223.5.0/24 maxlen: 24
92.223.6.0/24 maxlen: 24
185.14.46.0/24 maxlen: 24
92.223.8.0/24 maxlen: 24
92.223.9.0/24 maxlen: 24
92.223.14.0/24 maxlen: 24
91.243.82.0/24 maxlen: 24
5.101.218.0/24 maxlen: 24
91.243.83.0/24 maxlen: 24
91.243.84.0/24 maxlen: 24
91.243.80.0/24 maxlen: 24
92.223.32.0/24 maxlen: 24
91.243.86.0/24 maxlen: 24
92.223.33.0/24 maxlen: 24
92.223.38.0/24 maxlen: 24
92.223.34.0/24 maxlen: 24
92.223.36.0/24 maxlen: 24
185.101.137.0/24 maxlen: 24
2a11:27c0:130::/44 maxlen: 44
2a11:27c0:1b0::/44 maxlen: 44
2a11:27c0:1e0::/44 maxlen: 44
2a11:27c0:160::/44 maxlen: 44
2a11:27c0:1010::/44 maxlen: 44
2a11:27c0:110::/44 maxlen: 44
2a11:27c0:190::/44 maxlen: 44
2a11:27c0:10::/44 maxlen: 44
2a11:27c0:140::/44 maxlen: 44
2a11:27c0:1c0::/44 maxlen: 44
2a11:27c0:1f0::/44 maxlen: 44
2a11:27c0:170::/44 maxlen: 44
2a11:27c0:1a0::/44 maxlen: 44
2a11:27c0:120::/44 maxlen: 44
2a11:27c0:1d0::/44 maxlen: 44
2a11:27c0:150::/44 maxlen: 44
2a11:27c0:100::/44 maxlen: 44
2a11:27c0:1000::/44 maxlen: 44
2a11:27c0:180::/44 maxlen: 44
2a11:27c0::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:e2:55:b9:0b:12:07:5c:ae:1a:1f:34:a3:f0:cf:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Mar 7 07:04:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d513dfdfd22d74a28d0608b645087b0e7d0251ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:25:ad:d6:e6:2b:a8:33:a0:bd:49:eb:7e:
a3:09:61:d1:f7:e7:a9:99:be:c2:54:2c:f2:df:a8:
69:f2:6b:e0:2f:0b:1b:7e:2d:d4:7b:55:1d:1d:bd:
d8:49:a0:ed:10:a2:f4:76:b5:f4:dd:bf:f9:fd:fb:
bc:45:4c:fe:60:ca:9a:5e:8e:fc:5d:f9:6f:b8:aa:
45:dc:b7:4d:17:48:2a:b3:0a:9c:fd:78:78:f2:af:
df:3c:16:9e:44:50:07:87:4a:62:0e:ce:cc:50:0e:
f7:cf:f2:0e:e9:90:0d:4a:92:60:73:50:06:cd:8d:
27:29:51:73:60:fd:1a:80:14:e9:d7:0b:ce:7e:51:
1e:28:c4:38:a2:3d:1b:06:d5:80:4f:04:81:d3:83:
68:3f:c8:52:54:b9:0c:64:df:61:cc:e8:49:cb:99:
1c:06:3c:27:f8:53:0f:31:06:54:5c:90:fc:58:69:
df:2c:28:36:7f:31:c1:93:8b:e0:92:5c:d4:7d:3c:
d7:74:df:3e:ff:c8:fd:4c:74:2d:e9:04:81:24:15:
88:0d:f0:19:dc:68:e3:11:34:88:c8:db:67:7b:b8:
8c:ea:ee:21:4d:d2:bf:03:61:d2:e2:af:cc:fc:2b:
a2:4a:78:fd:d3:19:24:fc:24:8c:68:b8:f9:09:81:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:13:DF:DF:D2:2D:74:A2:8D:06:08:B6:45:08:7B:0E:7D:02:51:BA
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/1RPf39ItdKKNBgi2RQh7Dn0CUbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.42.0/23
5.101.68.0-5.101.70.255
5.101.218.0/24
5.188.2.0/23
5.188.7.0/24
5.188.35.0/24
5.188.37.0-5.188.39.255
5.188.121.0/24
5.188.149.0-5.188.150.255
5.188.170.0/23
5.188.176.0/22
5.188.212.0/24
5.188.224.0/24
5.188.229.0/24
5.189.201.0/24
5.189.205.0/24
5.189.223.0/24
31.184.204.0/23
37.9.36.0/22
37.9.52.0/22
45.147.162.0/23
79.133.127.0/24
82.97.207.0/24
83.229.14.0/24
83.229.25.0/24
91.243.80.0/24
91.243.82.0-91.243.84.255
91.243.86.0/24
92.38.128.0/22
92.38.136.0/22
92.38.152.0/23
92.38.156.0/24
92.38.188.0/22
92.223.4.0-92.223.6.255
92.223.8.0/23
92.223.14.0/24
92.223.32.0-92.223.34.255
92.223.36.0/24
92.223.38.0/24
92.223.41.0/24
92.223.43.0/24
92.223.49.0/24
92.223.60.0/24
92.223.64.0/23
92.223.67.0/24
92.223.72.0/24
92.223.80.0/24
92.223.87.0/24
92.223.91.0/24
92.223.103.0/24
92.223.106.0/24
92.223.108.0/22
92.223.114.0/23
92.223.122.0/23
95.85.88.0/24
95.181.179.0-95.181.183.255
146.185.196.0/22
146.185.215.0/24
146.185.218.0/24
185.14.46.0/24
185.101.137.0/24
193.17.93.0/24
IPv6:
2a11:27c0::/43
2a11:27c0:100::/40
2a11:27c0:1000::/43
Signature Algorithm: sha256WithRSAEncryption
52:23:a9:5f:90:09:a4:c1:42:67:2f:f6:12:c2:31:58:d3:7a:
b7:1c:30:6f:59:da:52:f6:83:b7:0b:e0:c6:06:dd:a2:39:85:
d6:71:18:3b:27:40:6b:66:bb:d9:ea:cf:9b:91:f8:07:15:2e:
a3:09:3d:53:e2:a4:09:41:5f:49:12:c2:88:12:17:ee:c6:f2:
65:bb:8e:9d:e7:55:22:1a:17:2a:d7:56:10:8a:f0:d3:fa:d5:
af:93:d3:36:90:71:01:83:03:89:73:8f:fc:71:66:b6:bd:3e:
7a:61:f6:0b:2e:5b:f3:74:7b:3d:5e:dd:3b:1a:2d:0e:55:12:
17:9c:27:54:30:93:7a:22:64:8f:2c:c4:6a:4c:07:c7:e2:90:
08:0c:ff:ed:64:af:66:f4:a1:ab:32:b8:61:fc:03:04:db:30:
ea:5a:31:e4:8e:25:d1:91:39:11:cf:43:8b:67:cf:25:48:ac:
49:4a:ae:99:1b:f8:f3:4b:8b:c7:5f:c1:7c:b2:4c:a3:7a:cc:
b3:e6:04:fc:47:91:9c:c8:7e:6f:ba:86:0d:38:6a:e0:5e:9e:
a6:4f:64:67:b3:1a:17:8d:c8:3b:86:5f:85:36:78:cf:51:42:
6c:cc:5f:5d:f2:82:c8:81:6a:8c:3b:d2:76:96:9f:c5:24:a9:
67:ba:c3:2b
-----BEGIN CERTIFICATE-----
MIIGzzCCBbegAwIBAgISAYa64lW5CxIHXK4aHzSj8M/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2U1ODVhNTliNTIzYmI4NmQ2NjBhNzE2OGUxYzFlYmEw
OTRkYTAwHhcNMjMwMzA3MDcwNDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTEzZGZkZmQyMmQ3NGEyOGQwNjA4YjY0NTA4N2IwZTdkMDI1MWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotslrdbmK6gzoL1J636jCWHR9+ep
mb7CVCzy36hp8mvgLwsbfi3Ue1UdHb3YSaDtEKL0drX03b/5/fu8RUz+YMqaXo78
XflvuKpF3LdNF0gqswqc/Xh48q/fPBaeRFAHh0piDs7MUA73z/IO6ZANSpJgc1AG
zY0nKVFzYP0agBTp1wvOflEeKMQ4oj0bBtWATwSB04NoP8hSVLkMZN9hzOhJy5kc
Bjwn+FMPMQZUXJD8WGnfLCg2fzHBk4vgklzUfTzXdN8+/8j9THQt6QSBJBWIDfAZ
3GjjETSIyNtne7iM6u4hTdK/A2HS4q/M/CuiSnj90xkk/CSMaLj5CYEgIwIDAQAB
o4ID2zCCA9cwHQYDVR0OBBYEFNUT39/SLXSijQYItkUIew59AlG6MB8GA1UdIwQY
MBaAFHw+WFpZtSO7htZgpxaOHB66CU2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUt
NmRjMWY1NjAzMWViLzEvMVJQZjM5SXRkS0tOQmdpMlJRaDdEbjBDVWJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUtNmRjMWY1NjAzMWVi
LzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB7wYIKwYBBQUHAQcBAf8EggHeMIIB2jCCAbQEAgABMIIB
rAMEAQUIKjAMAwQCBWVEAwQABWVGAwQABWXaAwQBBbwCAwQABbwHAwQABbwjMAwD
BAAFvCUDBAMFvCADBAAFvHkwDAMEAAW8lQMEAAW8lgMEAQW8qgMEAgW8sAMEAAW8
1AMEAAW84AMEAAW85QMEAAW9yQMEAAW9zQMEAAW93wMEAR+4zAMEAiUJJAMEAiUJ
NAMEAS2TogMEAE+FfwMEAFJhzwMEAFPlDgMEAFPlGQMEAFvzUDAMAwQBW/NSAwQA
W/NUAwQAW/NWAwQCXCaAAwQCXCaIAwQBXCaYAwQAXCacAwQCXCa8MAwDBAJc3wQD
BABc3wYDBAFc3wgDBABc3w4wDAMEBVzfIAMEAFzfIgMEAFzfJAMEAFzfJgMEAFzf
KQMEAFzfKwMEAFzfMQMEAFzfPAMEAVzfQAMEAFzfQwMEAFzfSAMEAFzfUAMEAFzf
VwMEAFzfWwMEAFzfZwMEAFzfagMEAlzfbAMEAVzfcgMEAVzfegMEAF9VWDAMAwQA
X7WzAwQDX7WwAwQCkrnEAwQAkrnXAwQAkrnaAwQAuQ4uAwQAuWWJAwQAwRFdMCAE
AgACMBoDBwUqESfAAAADBgAqESfAAQMHBSoRJ8AQADANBgkqhkiG9w0BAQsFAAOC
AQEAUiOpX5AJpMFCZy/2EsIxWNN6txwwb1naUvaDtwvgxgbdojmF1nEYOydAa2a7
2erPm5H4BxUuowk9U+KkCUFfSRLCiBIX7sbyZbuOnedVIhoXKtdWEIrw0/rVr5PT
NpBxAYMDiXOP/HFmtr0+emH2Cy5b83R7PV7dOxotDlUSF5wnVDCTeiJkjyzEakwH
x+KQCAz/7WSvZvShqzK4YfwDBNsw6lox5I4l0ZE5Ec9Di2fPJUisSUqumRv480uL
x1/BfLJMo3rMs+YE/EeRnMh+b7qGDThq4F6epk9kZ7MaF43IO4ZfhTZ4z1FCbMxf
XfKCyIFqjDvSdpafxSSpZ7rDKw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:42 2023 by rpki-client on console.sobornost.net