Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/3E0I7K-FNNuL9fETP7v0eQ0cv9w.roa
File: 3E0I7K-FNNuL9fETP7v0eQ0cv9w.roa (raw, json)
Hash identifier: 0sXzXt+I5V/Cnt7ZncAx+l/da1pQAlFFyXKMEPq/Oqc=
Subject key identifier: DC:4D:08:EC:AF:85:34:DB:8B:F5:F1:13:3F:BB:F4:79:0D:1C:BF:DC
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 018CC493646DAECA5978E5913AA6266FA38C
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/3E0I7K-FNNuL9fETP7v0eQ0cv9w.roa
Signing time: Mon 01 Jan 2024 10:30:42 +0000
ROA not before: Mon 01 Jan 2024 10:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6799
IP address blocks: 85.73.128.0/18 maxlen: 18
83.235.64.0/24 maxlen: 24
2.87.0.0/16 maxlen: 16
83.235.71.0/24 maxlen: 24
83.235.70.0/24 maxlen: 24
83.235.67.0/24 maxlen: 24
83.235.73.0/24 maxlen: 24
83.235.72.0/24 maxlen: 24
94.66.220.0/22 maxlen: 22
83.235.77.0/24 maxlen: 24
83.235.76.0/24 maxlen: 24
83.235.75.0/24 maxlen: 24
83.235.74.0/24 maxlen: 24
80.107.91.0/24 maxlen: 24
83.235.0.0/16 maxlen: 16
80.107.0.0/16 maxlen: 24
85.74.0.0/16 maxlen: 16
87.202.0.0/16 maxlen: 16
87.202.0.0/15 maxlen: 15
85.73.192.0/18 maxlen: 18
94.67.0.0/16 maxlen: 16
80.107.116.0/22 maxlen: 22
195.167.0.0/17 maxlen: 17
2.86.64.0/19 maxlen: 19
94.66.0.0/16 maxlen: 16
45.139.212.0/22 maxlen: 22
2.86.0.0/16 maxlen: 16
195.167.92.0/24 maxlen: 24
94.66.96.0/22 maxlen: 22
94.66.96.0/20 maxlen: 20
80.106.217.0/24 maxlen: 24
80.106.237.0/24 maxlen: 24
94.66.128.0/18 maxlen: 18
178.147.0.0/16 maxlen: 16
94.66.56.0/22 maxlen: 22
85.73.0.0/16 maxlen: 16
178.146.0.0/16 maxlen: 16
178.146.0.0/15 maxlen: 15
94.65.0.0/16 maxlen: 16
80.106.4.0/23 maxlen: 23
80.106.6.0/24 maxlen: 24
80.106.0.0/16 maxlen: 16
80.106.0.0/15 maxlen: 15
85.72.0.0/16 maxlen: 16
85.72.0.0/14 maxlen: 14
94.64.0.0/13 maxlen: 13
94.71.0.0/16 maxlen: 16
212.205.221.0/24 maxlen: 24
94.64.0.0/16 maxlen: 16
2.84.64.0/19 maxlen: 19
185.44.144.0/22 maxlen: 22
2.85.0.0/16 maxlen: 16
62.103.228.0/24 maxlen: 24
212.205.0.0/16 maxlen: 16
62.103.147.0/24 maxlen: 24
62.103.146.0/24 maxlen: 24
62.103.163.0/24 maxlen: 24
94.70.0.0/19 maxlen: 20
94.70.0.0/16 maxlen: 16
2.84.0.0/16 maxlen: 16
2.84.0.0/14 maxlen: 14
79.131.0.0/16 maxlen: 16
79.131.32.0/19 maxlen: 19
62.103.0.0/24 maxlen: 24
62.103.0.0/16 maxlen: 16
79.130.0.0/19 maxlen: 19
79.130.0.0/16 maxlen: 16
31.217.160.0/19 maxlen: 19
85.75.224.0/20 maxlen: 20
94.69.64.0/19 maxlen: 19
79.130.64.0/19 maxlen: 19
87.203.64.0/18 maxlen: 18
85.75.80.0/21 maxlen: 21
85.75.0.0/18 maxlen: 18
85.75.0.0/16 maxlen: 16
87.203.0.0/16 maxlen: 16
79.129.0.0/16 maxlen: 16
195.170.2.0/24 maxlen: 24
195.170.0.0/24 maxlen: 24
195.170.0.0/19 maxlen: 19
94.69.0.0/16 maxlen: 16
85.75.112.0/21 maxlen: 21
87.202.96.0/19 maxlen: 19
87.202.128.0/18 maxlen: 18
80.107.204.0/24 maxlen: 24
79.128.0.0/16 maxlen: 16
79.128.0.0/14 maxlen: 14
94.67.128.0/17 maxlen: 17
217.195.128.0/21 maxlen: 21
217.195.128.0/20 maxlen: 20
217.195.128.0/22 maxlen: 22
85.74.192.0/19 maxlen: 19
94.68.0.0/16 maxlen: 16
79.128.177.0/24 maxlen: 24
79.128.176.0/24 maxlen: 24
79.128.179.0/24 maxlen: 24
79.128.178.0/24 maxlen: 24
79.128.186.0/24 maxlen: 24
79.128.185.0/24 maxlen: 24
79.128.184.0/24 maxlen: 24
79.128.183.0/24 maxlen: 24
79.128.182.0/24 maxlen: 24
79.128.181.0/24 maxlen: 24
79.128.180.0/24 maxlen: 24
79.128.191.0/24 maxlen: 24
79.128.190.0/24 maxlen: 24
79.128.188.0/24 maxlen: 24
79.128.187.0/24 maxlen: 24
79.128.192.0/24 maxlen: 24
79.128.198.0/24 maxlen: 24
79.128.197.0/24 maxlen: 24
79.128.196.0/24 maxlen: 24
79.128.195.0/24 maxlen: 24
79.128.194.0/24 maxlen: 24
79.128.193.0/24 maxlen: 24
79.128.199.0/24 maxlen: 24
79.128.203.0/24 maxlen: 24
79.128.202.0/24 maxlen: 24
79.128.201.0/24 maxlen: 24
79.128.200.0/24 maxlen: 24
85.74.160.0/20 maxlen: 20
2a02:587:6400::/38 maxlen: 38
2a02:587:4800::/38 maxlen: 38
2a02:587:1800::/38 maxlen: 38
2a02:587:5400::/38 maxlen: 38
2a02:587:8400::/40 maxlen: 40
2a02:587:5c00::/38 maxlen: 38
2a02:587:6000::/38 maxlen: 38
2a02:587:4c00::/38 maxlen: 38
2a02:587:5800::/38 maxlen: 38
2a02:587:3000::/36 maxlen: 36
2a02:587:8000::/34 maxlen: 34
2a02:587::/35 maxlen: 35
2a02:587:2000::/36 maxlen: 36
2a02:587:c000::/34 maxlen: 34
2a02:587:4000::/34 maxlen: 34
2a02:587:50f7::/48 maxlen: 48
2a02:587:50fa::/48 maxlen: 48
2a02:586:2000::/36 maxlen: 36
2a02:586:3000::/36 maxlen: 36
2a02:586::/35 maxlen: 35
2a02:586:c000::/34 maxlen: 34
2a02:586:8000::/34 maxlen: 34
2a02:586:4000::/34 maxlen: 34
2a02:587:501e::/48 maxlen: 48
2a02:582:1800::/38 maxlen: 38
2a02:582:7000::/38 maxlen: 38
2a02:582:4800::/38 maxlen: 38
2a02:582:5800::/38 maxlen: 38
2a02:587:50da::/48 maxlen: 48
2a02:587:501d::/48 maxlen: 48
2a02:580::/29 maxlen: 29
2a02:587:501a::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 18 Jan 2024 15:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:64:6d:ae:ca:59:78:e5:91:3a:a6:26:6f:a3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Jan 1 10:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc4d08ecaf8534db8bf5f1133fbbf4790d1cbfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:39:5e:2b:ef:36:86:86:ef:ec:4d:95:3d:
47:39:66:81:f3:6d:24:39:76:52:58:a4:ec:4b:d7:
11:4d:c8:a5:03:5c:a6:09:25:d1:6e:2f:04:eb:e0:
5c:af:46:41:58:72:91:69:ea:16:d5:a8:c4:ce:3f:
9f:18:9f:33:e3:32:22:03:d2:3f:44:4a:e7:6b:36:
95:8f:19:53:02:df:63:9e:5d:1b:67:49:a1:cd:ef:
d4:88:28:7b:67:d9:c6:23:a6:41:45:77:1d:a8:00:
e8:04:85:aa:9f:f1:b2:c2:a4:5a:a9:9b:85:af:27:
fa:ca:ad:9d:9f:74:93:49:15:57:95:6c:1b:b1:83:
e2:c1:0a:90:5f:76:07:cd:30:78:8b:fd:93:04:3e:
27:02:f3:88:2c:a5:80:a6:46:b9:9d:09:be:d7:a3:
ce:41:75:0c:17:b8:82:d3:14:8b:af:2c:e3:08:28:
db:58:40:39:f3:54:90:c6:17:af:a7:21:a9:74:39:
dc:f3:8a:31:8d:31:a7:3d:95:8f:e2:9e:f8:7f:88:
a6:0a:88:57:c7:87:ab:b8:90:bf:b6:6e:99:cc:41:
72:91:fe:5a:48:9d:10:6e:b3:04:20:35:33:ac:e5:
1f:eb:19:ba:df:c0:50:32:04:1c:21:7a:15:26:13:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4D:08:EC:AF:85:34:DB:8B:F5:F1:13:3F:BB:F4:79:0D:1C:BF:DC
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/3E0I7K-FNNuL9fETP7v0eQ0cv9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.84.0.0/14
31.217.160.0/19
45.139.212.0/22
62.103.0.0/16
79.128.0.0/14
80.106.0.0/15
83.235.0.0/16
85.72.0.0/14
87.202.0.0/15
94.64.0.0/13
178.146.0.0/15
185.44.144.0/22
195.167.0.0/17
195.170.0.0/19
212.205.0.0/16
217.195.128.0/20
IPv6:
2a02:580::/29
Signature Algorithm: sha256WithRSAEncryption
60:9c:82:0b:a2:e9:3b:ab:53:2a:23:9c:ac:52:9b:26:9c:9f:
be:6d:4f:8b:e9:2b:c5:1d:bd:2f:23:d2:90:19:86:aa:9f:5b:
b0:81:c5:4d:6a:9f:37:5d:b6:02:9e:66:4e:92:cf:92:b4:0a:
6b:2c:00:19:61:42:0a:e3:5e:b1:9d:46:78:cf:ae:d8:ad:29:
32:2a:b8:4d:d4:e6:af:5f:0e:20:93:eb:c1:68:21:66:80:df:
38:b3:02:9b:1f:e8:c7:ea:a6:e7:66:37:82:a7:a4:ae:92:f4:
94:5e:10:95:82:82:9c:19:46:6b:91:9a:ab:2f:db:40:0c:79:
20:28:18:65:3c:5c:82:03:66:c1:53:31:af:9b:67:0d:98:1a:
1f:f8:e8:c2:74:c9:7d:27:18:b5:f4:ec:4b:ee:fb:83:d1:7a:
2e:2f:45:a8:aa:8f:03:ce:dc:b1:5f:af:76:96:c5:2b:73:5f:
5d:11:55:0e:00:67:dc:b2:b7:6d:e1:3f:08:cc:94:b0:68:f0:
0e:9c:70:e7:43:20:a5:99:a8:89:79:6e:d1:37:c6:4e:c2:61:
c3:a0:7d:fb:c0:38:2d:d6:d1:24:1b:94:6a:c5:7f:fd:a6:40:
5b:71:96:61:b4:a5:00:ff:6f:1e:44:97:c8:06:dc:37:34:28:
f9:5c:3d:93
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgISAYzEk2RtrspZeOWROqYmb6OMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjljNTRmMTkxOTNlMDY1NDgxNjNmODk1YzNhNDZiOWY4
YmZiYjUwHhcNMjQwMTAxMTAzMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzRkMDhlY2FmODUzNGRiOGJmNWYxMTMzZmJiZjQ3OTBkMWNiZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOA5XivvNoaG7+xNlT1HOWaB820k
OXZSWKTsS9cRTcilA1ymCSXRbi8E6+Bcr0ZBWHKRaeoW1ajEzj+fGJ8z4zIiA9I/
RErnazaVjxlTAt9jnl0bZ0mhze/UiCh7Z9nGI6ZBRXcdqADoBIWqn/GywqRaqZuF
ryf6yq2dn3STSRVXlWwbsYPiwQqQX3YHzTB4i/2TBD4nAvOILKWApka5nQm+16PO
QXUMF7iC0xSLryzjCCjbWEA581SQxhevpyGpdDnc84oxjTGnPZWP4p74f4imCohX
x4eruJC/tm6ZzEFykf5aSJ0QbrMEIDUzrOUf6xm638BQMgQcIXoVJhP5iQIDAQAB
o4ICaDCCAmQwHQYDVR0OBBYEFNxNCOyvhTTbi/XxEz+79HkNHL/cMB8GA1UdIwQY
MBaAFDj5xU8ZGT4GVIFj+JXDpGufi/u1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMt
NzI0OTQ5YjQ2MGU5LzEvM0UwSTdLLUZOTnVMOWZFVFA3djBlUTBjdjl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMtNzI0OTQ5YjQ2MGU5
LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBcBAIAATBWAwMCAlQDBAUf
2aADBAIti9QDAwA+ZwMDAk+AAwMBUGoDAwBT6wMDAlVIAwMBV8oDAwNeQAMDAbKS
AwQCuSyQAwQHw6cAAwQFw6oAAwMA1M0DBATZw4AwDQQCAAIwBwMFAyoCBYAwDQYJ
KoZIhvcNAQELBQADggEBAGCcggui6TurUyojnKxSmyacn75tT4vpK8UdvS8j0pAZ
hqqfW7CBxU1qnzddtgKeZk6Sz5K0CmssABlhQgrjXrGdRnjPrtitKTIquE3U5q9f
DiCT68FoIWaA3zizApsf6MfqpudmN4KnpK6S9JReEJWCgpwZRmuRmqsv20AMeSAo
GGU8XIIDZsFTMa+bZw2YGh/46MJ0yX0nGLX07Evu+4PRei4vRaiqjwPO3LFfr3aW
xStzX10RVQ4AZ9yyt23hPwjMlLBo8A6ccOdDIKWZqIl5btE3xk7CYcOgffvAOC3W
0SQblGrFf/2mQFtxlmG0pQD/bx5El8gG3Dc0KPlcPZM=
-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:08 2024 by rpki-client on console.sobornost.net