Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/Z8pkm2tzbbfvG-Bvv-81N0Tkoa4.roa
File: Z8pkm2tzbbfvG-Bvv-81N0Tkoa4.roa (raw, json)
Hash identifier: vzHXmSCor9vQ1plFWPGmLTOfBFb5py+u/GCv623wTf0=
Subject key identifier: 67:CA:64:9B:6B:73:6D:B7:EF:1B:E0:6F:BF:EF:35:37:44:E4:A1:AE
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 01856C4A6B36242A3B83B14E55D7ABCA79C8
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/Z8pkm2tzbbfvG-Bvv-81N0Tkoa4.roa
Signing time: Sun 01 Jan 2023 07:44:54 +0000
ROA not before: Sun 01 Jan 2023 07:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6799
IP address blocks: 85.73.128.0/18 maxlen: 18
83.235.64.0/24 maxlen: 24
2.87.0.0/16 maxlen: 16
83.235.71.0/24 maxlen: 24
83.235.70.0/24 maxlen: 24
83.235.67.0/24 maxlen: 24
83.235.73.0/24 maxlen: 24
83.235.72.0/24 maxlen: 24
94.66.220.0/22 maxlen: 22
83.235.77.0/24 maxlen: 24
83.235.76.0/24 maxlen: 24
83.235.75.0/24 maxlen: 24
83.235.74.0/24 maxlen: 24
80.107.91.0/24 maxlen: 24
80.107.0.0/16 maxlen: 24
83.235.0.0/16 maxlen: 16
85.74.0.0/16 maxlen: 16
87.202.0.0/16 maxlen: 16
87.202.0.0/15 maxlen: 15
94.67.0.0/16 maxlen: 16
85.73.192.0/18 maxlen: 18
80.107.116.0/22 maxlen: 22
195.167.0.0/17 maxlen: 17
2.86.64.0/19 maxlen: 19
94.66.0.0/16 maxlen: 16
45.139.212.0/22 maxlen: 22
2.86.0.0/16 maxlen: 16
195.167.92.0/24 maxlen: 24
94.66.96.0/22 maxlen: 22
94.66.96.0/20 maxlen: 20
80.106.217.0/24 maxlen: 24
80.106.237.0/24 maxlen: 24
94.66.128.0/18 maxlen: 18
94.66.56.0/22 maxlen: 22
85.73.0.0/16 maxlen: 16
94.65.0.0/16 maxlen: 16
80.106.4.0/23 maxlen: 23
80.106.0.0/16 maxlen: 16
80.106.6.0/24 maxlen: 24
80.106.0.0/15 maxlen: 15
85.72.0.0/16 maxlen: 16
85.72.0.0/14 maxlen: 14
94.64.0.0/13 maxlen: 13
94.71.0.0/16 maxlen: 16
212.205.221.0/24 maxlen: 24
94.64.0.0/16 maxlen: 16
2.84.64.0/19 maxlen: 19
2.85.0.0/16 maxlen: 16
62.103.228.0/24 maxlen: 24
212.205.0.0/16 maxlen: 16
62.103.147.0/24 maxlen: 24
62.103.146.0/24 maxlen: 24
62.103.163.0/24 maxlen: 24
94.70.0.0/19 maxlen: 20
94.70.0.0/16 maxlen: 16
2.84.0.0/16 maxlen: 16
2.84.0.0/14 maxlen: 14
79.131.0.0/16 maxlen: 16
79.131.32.0/19 maxlen: 19
62.103.0.0/24 maxlen: 24
62.103.0.0/16 maxlen: 16
79.130.0.0/19 maxlen: 19
79.130.0.0/16 maxlen: 16
85.75.224.0/20 maxlen: 20
94.69.64.0/19 maxlen: 19
79.130.64.0/19 maxlen: 19
87.203.64.0/18 maxlen: 18
85.75.80.0/21 maxlen: 21
85.75.0.0/18 maxlen: 18
87.203.0.0/16 maxlen: 16
85.75.0.0/16 maxlen: 16
79.129.0.0/16 maxlen: 16
195.170.2.0/24 maxlen: 24
195.170.0.0/24 maxlen: 24
195.170.0.0/19 maxlen: 19
94.69.0.0/16 maxlen: 16
85.75.112.0/21 maxlen: 21
87.202.96.0/19 maxlen: 19
87.202.128.0/18 maxlen: 18
80.107.204.0/24 maxlen: 24
79.128.0.0/16 maxlen: 16
79.128.0.0/14 maxlen: 14
94.67.128.0/17 maxlen: 17
217.195.128.0/21 maxlen: 21
217.195.128.0/20 maxlen: 20
217.195.128.0/22 maxlen: 22
85.74.192.0/19 maxlen: 19
94.68.0.0/16 maxlen: 16
79.128.177.0/24 maxlen: 24
79.128.176.0/24 maxlen: 24
79.128.179.0/24 maxlen: 24
79.128.178.0/24 maxlen: 24
79.128.186.0/24 maxlen: 24
79.128.185.0/24 maxlen: 24
79.128.184.0/24 maxlen: 24
79.128.183.0/24 maxlen: 24
79.128.182.0/24 maxlen: 24
79.128.181.0/24 maxlen: 24
79.128.180.0/24 maxlen: 24
79.128.191.0/24 maxlen: 24
79.128.190.0/24 maxlen: 24
79.128.188.0/24 maxlen: 24
79.128.187.0/24 maxlen: 24
79.128.192.0/24 maxlen: 24
79.128.199.0/24 maxlen: 24
79.128.198.0/24 maxlen: 24
79.128.197.0/24 maxlen: 24
79.128.196.0/24 maxlen: 24
79.128.195.0/24 maxlen: 24
79.128.194.0/24 maxlen: 24
79.128.193.0/24 maxlen: 24
79.128.203.0/24 maxlen: 24
79.128.202.0/24 maxlen: 24
79.128.201.0/24 maxlen: 24
79.128.200.0/24 maxlen: 24
85.74.160.0/20 maxlen: 20
2a02:587:4800::/38 maxlen: 38
2a02:587:8400::/40 maxlen: 40
2a02:587:5400::/38 maxlen: 38
2a02:587:5800::/38 maxlen: 38
2a02:587:5c00::/38 maxlen: 38
2a02:587:1800::/38 maxlen: 38
2a02:587:6000::/38 maxlen: 38
2a02:587:3000::/36 maxlen: 36
2a02:587:8000::/34 maxlen: 34
2a02:587::/35 maxlen: 35
2a02:587:6400::/38 maxlen: 38
2a02:587:2000::/36 maxlen: 36
2a02:587:c000::/34 maxlen: 34
2a02:587:4000::/34 maxlen: 34
2a02:587:4c00::/38 maxlen: 38
2a02:587:50f7::/48 maxlen: 48
2a02:587:50fa::/48 maxlen: 48
2a02:586:2000::/36 maxlen: 36
2a02:586:3000::/36 maxlen: 36
2a02:586::/35 maxlen: 35
2a02:586:c000::/34 maxlen: 34
2a02:586:8000::/34 maxlen: 34
2a02:586:4000::/34 maxlen: 34
2a02:587:501e::/48 maxlen: 48
2a02:582:5800::/38 maxlen: 38
2a02:582:1800::/38 maxlen: 38
2a02:582:7000::/38 maxlen: 38
2a02:582:4800::/38 maxlen: 38
2a02:587:50da::/48 maxlen: 48
2a02:587:501d::/48 maxlen: 48
2a02:580::/29 maxlen: 29
2a02:587:501a::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:6b:36:24:2a:3b:83:b1:4e:55:d7:ab:ca:79:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Jan 1 07:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67ca649b6b736db7ef1be06fbfef353744e4a1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3b:00:3f:a8:e5:c7:2e:c8:81:26:5b:3f:15:
39:a2:97:8b:14:91:0c:85:75:24:0a:4c:37:3b:29:
8b:6d:ae:f6:2f:09:f8:8b:b5:a4:14:bb:71:00:c6:
41:7c:5a:f7:13:76:69:da:e4:f5:0e:9b:e9:38:89:
b2:d1:96:e1:e5:c5:1f:9c:67:41:22:7f:7c:1d:92:
c1:5d:8b:c8:44:00:27:3a:66:75:8c:c0:cb:c3:f0:
57:9e:5c:a4:94:33:b9:85:2f:08:63:10:85:06:65:
97:12:c2:e9:cf:77:f9:e0:d2:64:5e:ee:00:0a:24:
f9:99:f3:c4:86:6e:9f:85:c0:17:3a:ec:e7:8e:a4:
cb:fe:3a:95:e3:80:c2:98:b0:40:cf:50:c0:3e:75:
67:c0:8e:6b:37:c8:68:8b:ed:3e:21:87:3f:b1:03:
21:1b:1a:e6:af:c7:8e:54:df:83:26:df:c9:b8:ba:
7c:67:30:94:f1:0a:4f:c2:30:d2:7a:b2:28:5f:07:
c7:12:ac:c7:9d:27:0a:69:d8:e6:b7:39:27:a6:46:
19:fa:ef:80:07:2b:f6:f0:9a:ec:8a:11:3b:9a:c1:
b2:17:dc:5d:87:5a:44:d1:8c:37:48:c1:04:ae:f2:
e7:37:03:6c:36:33:22:9b:20:20:70:17:9e:55:0b:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CA:64:9B:6B:73:6D:B7:EF:1B:E0:6F:BF:EF:35:37:44:E4:A1:AE
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/Z8pkm2tzbbfvG-Bvv-81N0Tkoa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.84.0.0/14
45.139.212.0/22
62.103.0.0/16
79.128.0.0/14
80.106.0.0/15
83.235.0.0/16
85.72.0.0/14
87.202.0.0/15
94.64.0.0/13
195.167.0.0/17
195.170.0.0/19
212.205.0.0/16
217.195.128.0/20
IPv6:
2a02:580::/29
Signature Algorithm: sha256WithRSAEncryption
9a:0c:72:ee:f7:9c:47:66:6c:ee:18:ec:59:90:2d:86:96:f6:
6b:57:69:ca:58:79:69:a4:79:57:45:ca:10:7f:6e:85:10:27:
cc:9b:54:8c:f4:9a:eb:9c:fb:c3:c9:c3:a2:a9:dd:c1:cd:c5:
8a:90:b9:3f:2a:7e:05:3c:48:c1:b8:8f:a9:a3:ee:dc:62:4a:
9f:fc:73:43:e5:7e:40:3f:2f:33:ec:18:a3:d3:fb:09:75:1c:
3c:b2:37:bc:46:0c:99:62:01:e9:2b:6e:01:a9:62:6a:13:ff:
2e:f5:40:56:52:8a:df:b9:fc:c8:2d:93:c1:f6:98:3e:34:30:
2e:75:ca:2e:29:e0:98:24:8b:5d:17:41:7f:db:c7:81:9a:7f:
2d:c0:d6:10:34:ab:25:e4:e8:dd:68:92:a0:df:a3:55:c9:b5:
a6:3f:81:0c:47:81:cb:ab:8e:40:0c:e9:d9:18:a3:de:53:59:
ad:3e:df:93:e7:d3:34:cb:e8:55:c9:60:5e:7a:54:38:48:2f:
89:1b:e6:7c:c5:ef:6c:45:8b:25:bc:17:26:4d:b2:f5:ad:e9:
6a:86:4b:10:4d:79:da:46:80:fc:17:af:b7:b4:5b:e3:50:cd:
8e:ed:46:c7:b0:36:03:a2:fd:1f:b9:43:dd:30:9c:77:f3:a6:
d4:82:75:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net