Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/S3X2v14HPPYE-4ts58wQyhtWjgM.roa
File: S3X2v14HPPYE-4ts58wQyhtWjgM.roa (raw, json)
Hash identifier: EbAOXcqpCE87NYpdmALBVvXBGDLCCvNb5iZ61uqqhfw=
Subject key identifier: 4B:75:F6:BF:5E:07:3C:F6:04:FB:8B:6C:E7:CC:10:CA:1B:56:8E:03
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 0186A22B8FB625B5AF4D353BCB9242F99101
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/S3X2v14HPPYE-4ts58wQyhtWjgM.roa
Signing time: Thu 02 Mar 2023 11:53:29 +0000
ROA not before: Thu 02 Mar 2023 11:53:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210756
IP address blocks: 5.188.3.0/24 maxlen: 24
5.188.2.0/24 maxlen: 24
5.188.7.0/24 maxlen: 24
45.147.162.0/24 maxlen: 24
45.147.163.0/24 maxlen: 24
5.188.35.0/24 maxlen: 24
5.188.37.0/24 maxlen: 24
5.188.38.0/24 maxlen: 24
5.188.39.0/24 maxlen: 24
95.181.179.0/24 maxlen: 24
95.181.181.0/24 maxlen: 24
95.181.182.0/24 maxlen: 24
95.181.183.0/24 maxlen: 24
95.181.180.0/24 maxlen: 24
5.188.121.0/24 maxlen: 24
5.188.149.0/24 maxlen: 24
5.188.150.0/24 maxlen: 24
92.38.188.0/24 maxlen: 24
92.38.189.0/24 maxlen: 24
92.38.190.0/24 maxlen: 24
92.38.191.0/24 maxlen: 24
79.133.127.0/24 maxlen: 24
95.85.88.0/24 maxlen: 24
92.38.137.0/24 maxlen: 24
92.38.138.0/24 maxlen: 24
92.38.139.0/24 maxlen: 24
92.38.136.0/24 maxlen: 24
92.38.152.0/24 maxlen: 24
92.38.156.0/24 maxlen: 24
92.38.153.0/24 maxlen: 24
92.38.130.0/24 maxlen: 24
92.38.131.0/24 maxlen: 24
92.38.128.0/24 maxlen: 24
92.38.129.0/24 maxlen: 24
146.185.197.0/24 maxlen: 24
146.185.198.0/24 maxlen: 24
146.185.199.0/24 maxlen: 24
146.185.196.0/24 maxlen: 24
193.17.93.0/24 maxlen: 24
146.185.218.0/24 maxlen: 24
146.185.215.0/24 maxlen: 24
31.184.204.0/24 maxlen: 24
31.184.205.0/24 maxlen: 24
37.9.37.0/24 maxlen: 24
37.9.38.0/24 maxlen: 24
37.9.36.0/24 maxlen: 24
37.9.39.0/24 maxlen: 24
37.9.54.0/24 maxlen: 24
37.9.55.0/24 maxlen: 24
37.9.52.0/24 maxlen: 24
37.9.53.0/24 maxlen: 24
92.223.103.0/24 maxlen: 24
92.223.111.0/24 maxlen: 24
92.223.108.0/24 maxlen: 24
92.223.109.0/24 maxlen: 24
92.223.110.0/24 maxlen: 24
92.223.106.0/24 maxlen: 24
92.223.114.0/24 maxlen: 24
92.223.115.0/24 maxlen: 24
92.223.122.0/24 maxlen: 24
92.223.123.0/24 maxlen: 24
5.189.205.0/24 maxlen: 24
5.189.201.0/24 maxlen: 24
5.189.223.0/24 maxlen: 24
92.223.41.0/24 maxlen: 24
92.223.43.0/24 maxlen: 24
92.223.49.0/24 maxlen: 24
92.223.60.0/24 maxlen: 24
92.223.64.0/24 maxlen: 24
92.223.67.0/24 maxlen: 24
92.223.65.0/24 maxlen: 24
92.223.72.0/24 maxlen: 24
92.223.80.0/24 maxlen: 24
92.223.87.0/24 maxlen: 24
92.223.91.0/24 maxlen: 24
5.8.43.0/24 maxlen: 24
5.8.42.0/24 maxlen: 24
5.101.68.0/24 maxlen: 24
5.101.69.0/24 maxlen: 24
5.101.70.0/24 maxlen: 24
5.188.224.0/24 maxlen: 24
5.188.229.0/24 maxlen: 24
5.188.170.0/24 maxlen: 24
5.188.171.0/24 maxlen: 24
5.188.176.0/24 maxlen: 24
5.188.177.0/24 maxlen: 24
5.188.178.0/24 maxlen: 24
5.188.179.0/24 maxlen: 24
5.188.212.0/24 maxlen: 24
92.223.4.0/24 maxlen: 24
92.223.5.0/24 maxlen: 24
92.223.6.0/24 maxlen: 24
92.223.8.0/24 maxlen: 24
92.223.9.0/24 maxlen: 24
92.223.14.0/24 maxlen: 24
91.243.82.0/24 maxlen: 24
5.101.218.0/24 maxlen: 24
91.243.83.0/24 maxlen: 24
91.243.84.0/24 maxlen: 24
91.243.80.0/24 maxlen: 24
91.243.86.0/24 maxlen: 24
92.223.32.0/24 maxlen: 24
92.223.33.0/24 maxlen: 24
92.223.38.0/24 maxlen: 24
92.223.34.0/24 maxlen: 24
92.223.36.0/24 maxlen: 24
185.101.137.0/24 maxlen: 24
2a11:27c0:1b0::/44 maxlen: 44
2a11:27c0:130::/44 maxlen: 44
2a11:27c0:160::/44 maxlen: 44
2a11:27c0:1e0::/44 maxlen: 44
2a11:27c0:10::/44 maxlen: 44
2a11:27c0:190::/44 maxlen: 44
2a11:27c0:110::/44 maxlen: 44
2a11:27c0:1010::/44 maxlen: 44
2a11:27c0:1c0::/44 maxlen: 44
2a11:27c0:140::/44 maxlen: 44
2a11:27c0:170::/44 maxlen: 44
2a11:27c0:1f0::/44 maxlen: 44
2a11:27c0:120::/44 maxlen: 44
2a11:27c0:1a0::/44 maxlen: 44
2a11:27c0:150::/44 maxlen: 44
2a11:27c0:1d0::/44 maxlen: 44
2a11:27c0::/44 maxlen: 44
2a11:27c0:180::/44 maxlen: 44
2a11:27c0:1000::/44 maxlen: 44
2a11:27c0:100::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:2b:8f:b6:25:b5:af:4d:35:3b:cb:92:42:f9:91:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Mar 2 11:53:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b75f6bf5e073cf604fb8b6ce7cc10ca1b568e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3a:00:e4:d3:7c:ec:a4:2b:51:5b:0b:01:7d:
a7:b6:26:b8:eb:9c:b3:90:1c:c3:b9:b0:b7:f9:40:
41:4d:36:11:43:39:4a:75:57:60:d0:b7:e4:ad:2a:
28:e0:c2:19:e1:8c:de:77:ed:28:2d:db:8e:55:1c:
b9:8b:63:4d:f8:d2:d4:61:ca:a3:dd:b7:06:4d:2d:
dd:88:b2:81:20:46:54:9c:24:e4:0b:14:c3:45:30:
f4:68:03:55:20:63:fd:48:60:c4:dc:19:b7:50:19:
40:37:5b:3b:86:01:92:36:4a:e4:30:e5:09:41:ec:
8a:02:c5:04:8a:b1:0d:89:e8:bf:2e:a2:4c:58:61:
2f:b0:6b:de:2b:07:03:92:99:10:39:10:78:4b:02:
08:76:8b:52:eb:ef:6e:0d:03:29:65:ec:5c:1b:4e:
25:2c:96:17:0c:cb:10:35:00:30:63:f2:29:dc:be:
89:f8:42:67:34:a4:fb:99:d5:cd:95:e4:06:34:d1:
0c:21:6d:20:5f:f1:0d:31:29:c7:eb:14:21:8e:a5:
31:4f:2e:e9:a4:8e:f5:75:47:7a:5e:ba:4e:41:75:
16:db:57:55:55:7c:c2:49:1b:c7:74:c6:e7:28:d5:
31:16:2e:fb:12:b9:f5:bb:1a:ed:91:fb:fb:f8:92:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:75:F6:BF:5E:07:3C:F6:04:FB:8B:6C:E7:CC:10:CA:1B:56:8E:03
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/S3X2v14HPPYE-4ts58wQyhtWjgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.42.0/23
5.101.68.0-5.101.70.255
5.101.218.0/24
5.188.2.0/23
5.188.7.0/24
5.188.35.0/24
5.188.37.0-5.188.39.255
5.188.121.0/24
5.188.149.0-5.188.150.255
5.188.170.0/23
5.188.176.0/22
5.188.212.0/24
5.188.224.0/24
5.188.229.0/24
5.189.201.0/24
5.189.205.0/24
5.189.223.0/24
31.184.204.0/23
37.9.36.0/22
37.9.52.0/22
45.147.162.0/23
79.133.127.0/24
91.243.80.0/24
91.243.82.0-91.243.84.255
91.243.86.0/24
92.38.128.0/22
92.38.136.0/22
92.38.152.0/23
92.38.156.0/24
92.38.188.0/22
92.223.4.0-92.223.6.255
92.223.8.0/23
92.223.14.0/24
92.223.32.0-92.223.34.255
92.223.36.0/24
92.223.38.0/24
92.223.41.0/24
92.223.43.0/24
92.223.49.0/24
92.223.60.0/24
92.223.64.0/23
92.223.67.0/24
92.223.72.0/24
92.223.80.0/24
92.223.87.0/24
92.223.91.0/24
92.223.103.0/24
92.223.106.0/24
92.223.108.0/22
92.223.114.0/23
92.223.122.0/23
95.85.88.0/24
95.181.179.0-95.181.183.255
146.185.196.0/22
146.185.215.0/24
146.185.218.0/24
185.101.137.0/24
193.17.93.0/24
IPv6:
2a11:27c0::/43
2a11:27c0:100::/40
2a11:27c0:1000::/43
Signature Algorithm: sha256WithRSAEncryption
94:b8:74:54:31:32:c8:39:f1:1e:87:a5:90:f1:97:74:be:c8:
33:6d:a0:31:5f:94:3e:2c:c6:1a:d5:3e:3e:6c:74:40:e6:db:
07:ed:55:0f:8c:88:c1:9a:e2:5b:34:7f:02:36:41:6a:28:2d:
76:72:69:4c:34:9d:43:0e:1a:9b:7a:3c:d4:4f:a0:71:fe:57:
e9:5e:06:2d:2c:d8:8c:9b:b6:07:30:43:33:d8:ef:99:21:a3:
ac:d6:30:d6:93:43:4a:fd:08:d8:dc:d2:39:bd:55:2b:45:8f:
50:c7:1e:95:6f:09:74:2f:2d:58:1f:9b:dc:f3:dd:4e:4c:47:
06:4e:7a:8e:2c:58:81:ac:8d:f0:7e:8d:ac:51:ab:af:db:aa:
e4:21:ec:bd:ec:75:1e:14:fc:f2:65:09:6e:cd:42:51:e5:c3:
a1:90:14:7f:f7:cc:8b:90:36:95:e1:87:42:f5:1a:0c:f9:b1:
e8:ea:c8:28:03:1a:66:93:2a:15:8e:5b:33:90:7d:46:28:39:
9b:90:2f:08:b6:e8:ad:c7:60:d8:a8:1e:34:71:c4:40:77:1c:
69:dd:0d:85:59:ac:a3:0f:35:9b:af:8b:40:8f:87:69:fe:59:
88:5e:fd:35:68:21:db:ec:56:53:9d:67:6a:d7:a0:c6:44:62:
94:68:15:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:42 2023 by rpki-client on console.sobornost.net