Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/vioXtKCmChwbG7bRA8pK1S-AL0k.roa
File: vioXtKCmChwbG7bRA8pK1S-AL0k.roa (raw, json)
Hash identifier: Gb5MRFrTPZJ+nqhWctsuFLQ7FPQfZpua9a6QG5k5EGo=
Subject key identifier: BE:2A:17:B4:A0:A6:0A:1C:1B:1B:B6:D1:03:CA:4A:D5:2F:80:2F:49
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 018C8C4EB7CB19BF2FFA010DD08ACE990B4D
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/vioXtKCmChwbG7bRA8pK1S-AL0k.roa
Signing time: Thu 21 Dec 2023 12:16:58 +0000
ROA not before: Thu 21 Dec 2023 12:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6799
IP address blocks: 85.73.128.0/18 maxlen: 18
83.235.64.0/24 maxlen: 24
2.87.0.0/16 maxlen: 16
83.235.71.0/24 maxlen: 24
83.235.70.0/24 maxlen: 24
83.235.67.0/24 maxlen: 24
83.235.73.0/24 maxlen: 24
83.235.72.0/24 maxlen: 24
94.66.220.0/22 maxlen: 22
83.235.77.0/24 maxlen: 24
83.235.76.0/24 maxlen: 24
83.235.75.0/24 maxlen: 24
83.235.74.0/24 maxlen: 24
80.107.91.0/24 maxlen: 24
83.235.0.0/16 maxlen: 16
80.107.0.0/16 maxlen: 24
85.74.0.0/16 maxlen: 16
87.202.0.0/16 maxlen: 16
87.202.0.0/15 maxlen: 15
85.73.192.0/18 maxlen: 18
94.67.0.0/16 maxlen: 16
80.107.116.0/22 maxlen: 22
195.167.0.0/17 maxlen: 17
2.86.64.0/19 maxlen: 19
94.66.0.0/16 maxlen: 16
45.139.212.0/22 maxlen: 22
2.86.0.0/16 maxlen: 16
195.167.92.0/24 maxlen: 24
94.66.96.0/22 maxlen: 22
94.66.96.0/20 maxlen: 20
80.106.217.0/24 maxlen: 24
80.106.237.0/24 maxlen: 24
94.66.128.0/18 maxlen: 18
178.147.0.0/16 maxlen: 16
94.66.56.0/22 maxlen: 22
85.73.0.0/16 maxlen: 16
178.146.0.0/16 maxlen: 16
178.146.0.0/15 maxlen: 15
94.65.0.0/16 maxlen: 16
80.106.4.0/23 maxlen: 23
80.106.6.0/24 maxlen: 24
80.106.0.0/16 maxlen: 16
80.106.0.0/15 maxlen: 15
85.72.0.0/16 maxlen: 16
85.72.0.0/14 maxlen: 14
94.64.0.0/13 maxlen: 13
94.71.0.0/16 maxlen: 16
212.205.221.0/24 maxlen: 24
94.64.0.0/16 maxlen: 16
2.84.64.0/19 maxlen: 19
185.44.144.0/22 maxlen: 22
2.85.0.0/16 maxlen: 16
62.103.228.0/24 maxlen: 24
212.205.0.0/16 maxlen: 16
62.103.147.0/24 maxlen: 24
62.103.146.0/24 maxlen: 24
62.103.163.0/24 maxlen: 24
94.70.0.0/19 maxlen: 20
94.70.0.0/16 maxlen: 16
2.84.0.0/16 maxlen: 16
2.84.0.0/14 maxlen: 14
79.131.0.0/16 maxlen: 16
79.131.32.0/19 maxlen: 19
62.103.0.0/24 maxlen: 24
62.103.0.0/16 maxlen: 16
79.130.0.0/19 maxlen: 19
79.130.0.0/16 maxlen: 16
31.217.160.0/19 maxlen: 19
85.75.224.0/20 maxlen: 20
94.69.64.0/19 maxlen: 19
79.130.64.0/19 maxlen: 19
87.203.64.0/18 maxlen: 18
85.75.80.0/21 maxlen: 21
85.75.0.0/18 maxlen: 18
85.75.0.0/16 maxlen: 16
87.203.0.0/16 maxlen: 16
79.129.0.0/16 maxlen: 16
195.170.2.0/24 maxlen: 24
195.170.0.0/24 maxlen: 24
195.170.0.0/19 maxlen: 19
94.69.0.0/16 maxlen: 16
85.75.112.0/21 maxlen: 21
87.202.96.0/19 maxlen: 19
87.202.128.0/18 maxlen: 18
80.107.204.0/24 maxlen: 24
79.128.0.0/16 maxlen: 16
79.128.0.0/14 maxlen: 14
94.67.128.0/17 maxlen: 17
217.195.128.0/21 maxlen: 21
217.195.128.0/20 maxlen: 20
217.195.128.0/22 maxlen: 22
85.74.192.0/19 maxlen: 19
94.68.0.0/16 maxlen: 16
79.128.177.0/24 maxlen: 24
79.128.176.0/24 maxlen: 24
79.128.179.0/24 maxlen: 24
79.128.178.0/24 maxlen: 24
79.128.186.0/24 maxlen: 24
79.128.185.0/24 maxlen: 24
79.128.184.0/24 maxlen: 24
79.128.183.0/24 maxlen: 24
79.128.182.0/24 maxlen: 24
79.128.181.0/24 maxlen: 24
79.128.180.0/24 maxlen: 24
79.128.191.0/24 maxlen: 24
79.128.190.0/24 maxlen: 24
79.128.188.0/24 maxlen: 24
79.128.187.0/24 maxlen: 24
79.128.192.0/24 maxlen: 24
79.128.198.0/24 maxlen: 24
79.128.197.0/24 maxlen: 24
79.128.196.0/24 maxlen: 24
79.128.195.0/24 maxlen: 24
79.128.194.0/24 maxlen: 24
79.128.193.0/24 maxlen: 24
79.128.199.0/24 maxlen: 24
79.128.203.0/24 maxlen: 24
79.128.202.0/24 maxlen: 24
79.128.201.0/24 maxlen: 24
79.128.200.0/24 maxlen: 24
85.74.160.0/20 maxlen: 20
2a02:587:6400::/38 maxlen: 38
2a02:587:4800::/38 maxlen: 38
2a02:587:1800::/38 maxlen: 38
2a02:587:5400::/38 maxlen: 38
2a02:587:8400::/40 maxlen: 40
2a02:587:5c00::/38 maxlen: 38
2a02:587:6000::/38 maxlen: 38
2a02:587:4c00::/38 maxlen: 38
2a02:587:5800::/38 maxlen: 38
2a02:587:3000::/36 maxlen: 36
2a02:587:8000::/34 maxlen: 34
2a02:587::/35 maxlen: 35
2a02:587:2000::/36 maxlen: 36
2a02:587:c000::/34 maxlen: 34
2a02:587:4000::/34 maxlen: 34
2a02:587:50f7::/48 maxlen: 48
2a02:587:50fa::/48 maxlen: 48
2a02:586:2000::/36 maxlen: 36
2a02:586:3000::/36 maxlen: 36
2a02:586::/35 maxlen: 35
2a02:586:c000::/34 maxlen: 34
2a02:586:8000::/34 maxlen: 34
2a02:586:4000::/34 maxlen: 34
2a02:587:501e::/48 maxlen: 48
2a02:582:1800::/38 maxlen: 38
2a02:582:7000::/38 maxlen: 38
2a02:582:4800::/38 maxlen: 38
2a02:582:5800::/38 maxlen: 38
2a02:587:50da::/48 maxlen: 48
2a02:587:501d::/48 maxlen: 48
2a02:580::/29 maxlen: 29
2a02:587:501a::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:4e:b7:cb:19:bf:2f:fa:01:0d:d0:8a:ce:99:0b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Dec 21 12:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be2a17b4a0a60a1c1b1bb6d103ca4ad52f802f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:31:67:ce:ad:a6:aa:0d:cd:c8:be:0b:60:
96:24:bf:2f:30:7e:d5:a6:f8:be:35:f7:4a:21:8e:
db:fb:a2:70:f0:7d:59:a3:20:a1:2a:d0:5b:2f:92:
e7:e7:71:bc:e7:25:d8:cf:02:56:34:12:c0:db:20:
30:7c:12:f5:fb:98:20:18:5e:5e:5b:7f:a4:2a:37:
17:08:44:ec:55:22:8e:49:02:d1:18:b1:ee:c9:e3:
a7:ed:66:f8:bc:04:84:48:cc:4e:56:82:df:4d:36:
72:5f:40:6b:1e:17:b3:cc:2b:c8:ab:ec:fd:72:d9:
a5:60:7d:70:30:fa:6a:f0:fa:bf:a2:87:91:af:c4:
73:28:5e:20:79:a7:3a:4f:04:43:7f:4e:20:67:53:
3a:27:da:4f:2e:95:65:23:3a:94:bb:3e:14:0b:a5:
f2:83:e3:36:49:3c:d1:91:52:e5:e3:78:34:53:25:
6d:8e:ee:f7:71:c4:74:68:86:e5:65:c3:c8:50:44:
74:d6:5b:11:5c:c0:af:88:74:4a:e4:16:52:59:f3:
41:5d:ac:7c:2e:41:96:d8:35:a0:db:10:f7:2e:5e:
07:d3:e5:9d:b0:38:ee:2a:6a:cd:f8:cf:23:12:1b:
e0:de:75:b3:7f:7a:60:fa:2e:77:68:0d:91:27:49:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2A:17:B4:A0:A6:0A:1C:1B:1B:B6:D1:03:CA:4A:D5:2F:80:2F:49
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/vioXtKCmChwbG7bRA8pK1S-AL0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.84.0.0/14
31.217.160.0/19
45.139.212.0/22
62.103.0.0/16
79.128.0.0/14
80.106.0.0/15
83.235.0.0/16
85.72.0.0/14
87.202.0.0/15
94.64.0.0/13
178.146.0.0/15
185.44.144.0/22
195.167.0.0/17
195.170.0.0/19
212.205.0.0/16
217.195.128.0/20
IPv6:
2a02:580::/29
Signature Algorithm: sha256WithRSAEncryption
91:64:28:e5:9c:80:f6:2b:38:92:43:eb:7c:b1:9e:68:ac:0e:
9e:eb:a3:ce:8f:2b:28:59:01:47:42:b7:bf:d1:4e:74:c0:98:
c1:77:ae:f5:42:aa:ce:4a:75:64:b5:cd:04:ab:ce:e0:14:8d:
5d:34:1b:46:76:71:53:95:7c:5d:a6:2a:5b:f7:84:d7:fd:99:
20:5e:7e:74:7f:40:d9:1e:06:f1:ba:9b:0f:3c:ec:33:00:55:
2d:ce:64:14:f2:ef:60:d2:bd:d3:f4:0d:e2:58:8e:26:e1:44:
31:95:ed:c8:1f:fa:10:bd:81:70:f2:d5:94:65:0e:12:c6:ae:
86:23:19:53:ae:06:e7:80:70:fb:9b:6d:78:2f:02:56:cd:d9:
0f:ca:b2:3c:00:dd:0b:71:19:85:ff:ff:f1:21:1d:95:59:5b:
24:f9:f1:50:0b:89:1d:21:94:cb:88:21:2b:a7:52:14:85:25:
cb:8c:13:32:01:fb:5c:4c:b9:ea:d2:c4:de:8c:42:f0:04:b8:
50:b2:11:70:db:b3:f2:3a:47:df:ab:08:13:d7:7d:b4:c6:b6:
b4:fc:2f:1d:8f:0d:6c:04:ea:24:09:cf:47:20:7e:99:0c:7b:
91:c5:83:a1:ec:bc:89:c3:44:d6:78:9a:42:3a:36:45:0e:24:
77:93:01:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:11:02 2024 by rpki-client on console.sobornost.net