Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/Ym49EZ0lTq0Q3d1voM9H5aJU3bI.roa
File: Ym49EZ0lTq0Q3d1voM9H5aJU3bI.roa (raw, json)
Hash identifier: 4exOWkoXYMqUgfg/noKP/fiSDMqEm9tZWTbMOU0IDPg=
Subject key identifier: 62:6E:3D:11:9D:25:4E:AD:10:DD:DD:6F:A0:CF:47:E5:A2:54:DD:B2
Certificate issuer: /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial: 01869D19D00488D451F54E4930DA5A0C6720
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/Ym49EZ0lTq0Q3d1voM9H5aJU3bI.roa
Signing time: Wed 01 Mar 2023 12:15:59 +0000
ROA not before: Wed 01 Mar 2023 12:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39501
IP address blocks: 89.33.18.0/23 maxlen: 23
89.46.94.0/23 maxlen: 23
89.39.186.0/23 maxlen: 23
89.33.128.0/23 maxlen: 23
89.40.78.0/23 maxlen: 23
89.40.90.0/23 maxlen: 23
89.40.38.0/23 maxlen: 23
89.38.242.0/23 maxlen: 23
45.140.28.0/22 maxlen: 22
89.45.126.0/23 maxlen: 23
89.46.44.0/23 maxlen: 23
89.32.196.0/23 maxlen: 23
89.46.60.0/23 maxlen: 23
185.46.0.0/22 maxlen: 22
188.159.96.0/19 maxlen: 19
188.159.128.0/19 maxlen: 19
188.159.128.0/18 maxlen: 18
188.159.64.0/19 maxlen: 19
89.44.190.0/23 maxlen: 23
89.44.202.0/23 maxlen: 23
89.38.24.0/23 maxlen: 23
89.45.68.0/23 maxlen: 23
89.45.80.0/23 maxlen: 23
89.38.102.0/23 maxlen: 23
188.159.192.0/19 maxlen: 19
89.165.64.0/18 maxlen: 18
89.165.80.0/21 maxlen: 21
188.158.160.0/21 maxlen: 21
188.158.160.0/20 maxlen: 20
188.158.160.0/19 maxlen: 19
89.165.105.0/24 maxlen: 24
89.37.102.0/23 maxlen: 23
89.165.16.0/21 maxlen: 21
89.43.204.0/23 maxlen: 23
89.37.30.0/23 maxlen: 23
188.158.96.0/21 maxlen: 21
188.158.96.0/20 maxlen: 20
188.158.96.0/19 maxlen: 19
89.37.42.0/23 maxlen: 23
89.165.56.0/21 maxlen: 21
188.158.128.0/18 maxlen: 18
188.158.128.0/19 maxlen: 19
89.44.112.0/23 maxlen: 23
89.44.118.0/23 maxlen: 23
188.159.0.0/18 maxlen: 18
188.159.0.0/19 maxlen: 19
89.37.198.0/23 maxlen: 23
89.37.218.0/23 maxlen: 23
89.44.146.0/23 maxlen: 23
188.159.32.0/19 maxlen: 19
188.158.192.0/19 maxlen: 19
86.104.232.0/21 maxlen: 21
188.158.224.0/19 maxlen: 19
89.43.70.0/23 maxlen: 23
89.43.88.0/21 maxlen: 21
89.43.36.0/23 maxlen: 23
188.158.32.0/19 maxlen: 19
188.158.32.0/20 maxlen: 20
89.36.226.0/23 maxlen: 23
188.158.64.0/19 maxlen: 19
89.36.252.0/23 maxlen: 23
89.43.182.0/23 maxlen: 23
89.165.0.0/18 maxlen: 18
89.43.188.0/23 maxlen: 23
89.165.0.0/17 maxlen: 17
89.165.8.0/21 maxlen: 21
89.43.96.0/21 maxlen: 21
188.158.0.0/19 maxlen: 19
188.158.0.0/18 maxlen: 18
89.36.194.0/23 maxlen: 23
188.158.0.0/16 maxlen: 16
188.158.16.0/20 maxlen: 20
89.35.156.0/23 maxlen: 23
85.204.30.0/23 maxlen: 23
89.35.176.0/23 maxlen: 23
89.35.194.0/23 maxlen: 23
89.42.32.0/23 maxlen: 23
89.42.56.0/23 maxlen: 23
89.35.132.0/23 maxlen: 23
89.42.68.0/23 maxlen: 23
89.36.16.0/23 maxlen: 23
89.42.228.0/23 maxlen: 23
94.177.72.0/21 maxlen: 21
89.42.150.0/23 maxlen: 23
85.204.76.0/23 maxlen: 23
85.204.104.0/23 maxlen: 23
89.34.200.0/23 maxlen: 23
94.176.32.0/21 maxlen: 21
89.34.176.0/23 maxlen: 23
89.41.240.0/21 maxlen: 21
89.35.58.0/23 maxlen: 23
89.33.234.0/23 maxlen: 23
89.33.240.0/23 maxlen: 23
89.34.20.0/23 maxlen: 23
89.40.110.0/23 maxlen: 23
89.40.106.0/23 maxlen: 23
89.40.128.0/23 maxlen: 23
89.33.204.0/23 maxlen: 23
89.41.16.0/21 maxlen: 21
89.34.88.0/23 maxlen: 23
89.34.94.0/23 maxlen: 23
89.41.32.0/23 maxlen: 23
89.41.58.0/23 maxlen: 23
89.41.8.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:19:d0:04:88:d4:51:f5:4e:49:30:da:5a:0c:67:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Validity
Not Before: Mar 1 12:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=626e3d119d254ead10dddd6fa0cf47e5a254ddb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:6e:ba:01:d3:b4:06:98:e7:03:ea:ac:a5:
94:83:a0:07:51:13:39:a4:83:39:15:e6:2c:da:b0:
89:f3:95:2b:f5:87:36:3a:da:3f:81:fc:05:8d:18:
4c:e6:ac:62:e0:31:46:b5:f4:77:e3:7f:82:25:da:
51:50:dd:0a:ab:69:92:a5:57:67:85:cb:3c:71:36:
ed:64:5f:69:c7:11:ab:4a:01:9e:97:3c:97:a7:26:
07:e2:33:61:67:bd:71:8d:65:27:f5:25:f1:d4:f0:
0f:1e:2e:ec:38:ae:96:ce:cc:b2:75:5e:0f:08:c0:
c4:e2:89:24:5b:9e:3d:c2:03:22:12:5b:70:44:8c:
de:6b:c3:c1:a8:3c:31:01:d3:63:06:44:f1:6f:1c:
03:c4:32:e6:34:ed:7b:13:53:52:16:d9:04:6e:42:
4b:6e:15:86:b4:05:c6:2f:d3:77:92:aa:c9:eb:fe:
31:ec:d8:d9:08:4f:88:45:7f:41:49:06:65:9e:d8:
3e:cb:d6:6f:36:6c:64:ae:b4:75:91:fd:fa:7d:50:
a3:4c:a7:e5:b4:d7:a6:23:20:41:d2:0c:b4:37:9c:
93:a7:96:91:ed:7a:33:02:19:e4:74:09:0c:3a:d0:
f4:0f:51:2e:46:36:8a:40:70:da:a8:ac:be:8c:d5:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6E:3D:11:9D:25:4E:AD:10:DD:DD:6F:A0:CF:47:E5:A2:54:DD:B2
X509v3 Authority Key Identifier:
keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/Ym49EZ0lTq0Q3d1voM9H5aJU3bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.28.0/22
85.204.30.0/23
85.204.76.0/23
85.204.104.0/23
86.104.232.0/21
89.32.196.0/23
89.33.18.0/23
89.33.128.0/23
89.33.204.0/23
89.33.234.0/23
89.33.240.0/23
89.34.20.0/23
89.34.88.0/23
89.34.94.0/23
89.34.176.0/23
89.34.200.0/23
89.35.58.0/23
89.35.132.0/23
89.35.156.0/23
89.35.176.0/23
89.35.194.0/23
89.36.16.0/23
89.36.194.0/23
89.36.226.0/23
89.36.252.0/23
89.37.30.0/23
89.37.42.0/23
89.37.102.0/23
89.37.198.0/23
89.37.218.0/23
89.38.24.0/23
89.38.102.0/23
89.38.242.0/23
89.39.186.0/23
89.40.38.0/23
89.40.78.0/23
89.40.90.0/23
89.40.106.0/23
89.40.110.0/23
89.40.128.0/23
89.41.8.0-89.41.23.255
89.41.32.0/23
89.41.58.0/23
89.41.240.0/21
89.42.32.0/23
89.42.56.0/23
89.42.68.0/23
89.42.150.0/23
89.42.228.0/23
89.43.36.0/23
89.43.70.0/23
89.43.88.0-89.43.103.255
89.43.182.0/23
89.43.188.0/23
89.43.204.0/23
89.44.112.0/23
89.44.118.0/23
89.44.146.0/23
89.44.190.0/23
89.44.202.0/23
89.45.68.0/23
89.45.80.0/23
89.45.126.0/23
89.46.44.0/23
89.46.60.0/23
89.46.94.0/23
89.165.0.0/17
94.176.32.0/21
94.177.72.0/21
185.46.0.0/22
188.158.0.0-188.159.223.255
Signature Algorithm: sha256WithRSAEncryption
a3:63:9c:e6:30:d9:7c:a1:86:15:19:08:8b:09:ae:26:71:11:
f7:e4:a1:03:37:1c:9a:05:ca:f4:0c:15:a2:01:02:a7:39:fb:
cf:c6:64:81:3c:d0:f8:91:13:5d:eb:0e:77:70:13:1a:1e:37:
ff:97:15:cf:8e:9d:27:7e:fb:84:33:fa:92:e1:41:9c:e8:19:
2b:89:df:b7:5c:a1:8e:e5:ac:3d:63:c8:0b:d7:03:3f:a5:59:
2b:51:39:8c:f8:9f:63:8e:1b:9e:c4:bc:8f:68:cf:e6:f3:4e:
ef:ef:3b:1c:cc:cf:81:56:5c:93:88:f0:03:ab:8b:95:2e:b5:
d7:54:ad:7f:3e:a0:b9:75:9d:e2:31:69:b6:94:33:ec:b0:4d:
7d:87:a3:cf:29:19:42:f8:d8:bf:35:4c:f6:bd:f0:ee:67:b0:
01:be:a7:c2:e8:89:5e:d4:0c:36:9e:b4:0e:63:ec:33:49:da:
b2:20:e6:f2:20:76:3d:f3:b2:5e:de:e9:f4:da:00:a5:36:79:
a5:cf:65:7d:34:ff:9b:2b:b7:11:56:2b:a5:ec:6d:07:1b:ec:
fc:1b:fb:3a:ec:93:d7:85:d2:5e:03:c5:ea:08:97:c0:cb:88:
ad:8b:e8:b5:23:80:36:8c:8b:32:88:a2:80:e7:b5:21:a9:7d:
4c:93:eb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:31 2024 by rpki-client on console.sobornost.net