Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/FBZRZ_0d8H71j9L0zSMZegPz3tc.roa
File: FBZRZ_0d8H71j9L0zSMZegPz3tc.roa (raw, json)
Hash identifier: nlz7YahOswlXTYUy+ZNAmYThwv+j1+2DwjoiNBvt3TU=
Subject key identifier: 14:16:51:67:FD:1D:F0:7E:F5:8F:D2:F4:CD:23:19:7A:03:F3:DE:D7
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 01867342692CBB126A28884A9D9C0D4BC97B
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/FBZRZ_0d8H71j9L0zSMZegPz3tc.roa
Signing time: Tue 21 Feb 2023 09:16:17 +0000
ROA not before: Tue 21 Feb 2023 09:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12301
IP address blocks: 79.120.168.0/23 maxlen: 24
79.120.176.0/20 maxlen: 24
79.120.192.0/19 maxlen: 24
79.120.198.0/24 maxlen: 24
79.120.200.0/24 maxlen: 24
79.120.128.0/19 maxlen: 24
79.120.224.0/20 maxlen: 24
79.120.240.0/21 maxlen: 24
79.120.250.0/23 maxlen: 24
212.24.160.0/19 maxlen: 19
193.226.196.0/22 maxlen: 24
193.226.194.0/23 maxlen: 24
193.226.200.0/21 maxlen: 24
89.186.98.0/23 maxlen: 24
89.186.100.0/23 maxlen: 24
193.226.208.0/22 maxlen: 24
213.253.192.0/18 maxlen: 24
89.186.104.0/23 maxlen: 24
193.226.216.0/21 maxlen: 24
89.186.116.0/23 maxlen: 24
193.226.224.0/23 maxlen: 24
193.226.228.0/22 maxlen: 24
193.226.236.0/23 maxlen: 24
193.226.234.0/23 maxlen: 24
193.226.242.0/23 maxlen: 24
193.226.252.0/22 maxlen: 24
193.226.250.0/23 maxlen: 24
94.125.248.0/21 maxlen: 24
82.131.160.0/20 maxlen: 24
62.77.192.0/22 maxlen: 24
193.91.64.0/19 maxlen: 24
82.131.176.0/22 maxlen: 24
62.77.200.0/21 maxlen: 24
62.77.208.0/20 maxlen: 24
82.131.180.0/23 maxlen: 24
82.131.192.0/22 maxlen: 24
62.77.224.0/20 maxlen: 24
82.131.199.0/24 maxlen: 24
82.131.208.0/21 maxlen: 24
62.77.244.0/22 maxlen: 24
62.77.242.0/23 maxlen: 24
91.83.148.0/22 maxlen: 24
91.83.146.0/23 maxlen: 24
91.83.152.0/23 maxlen: 24
91.83.156.0/22 maxlen: 24
91.83.160.0/20 maxlen: 24
213.16.64.0/18 maxlen: 24
91.83.176.0/22 maxlen: 24
87.97.64.0/20 maxlen: 24
91.83.92.0/23 maxlen: 24
91.83.96.0/22 maxlen: 24
91.83.100.0/23 maxlen: 24
91.83.104.0/22 maxlen: 24
91.83.108.0/23 maxlen: 24
91.83.122.0/23 maxlen: 24
91.83.124.0/22 maxlen: 24
91.83.128.0/21 maxlen: 24
82.144.160.0/22 maxlen: 24
91.83.254.0/23 maxlen: 24
82.144.168.0/22 maxlen: 24
82.144.178.0/23 maxlen: 24
82.144.180.0/22 maxlen: 24
82.144.184.0/22 maxlen: 24
82.144.190.0/23 maxlen: 24
185.50.28.0/22 maxlen: 24
91.83.208.0/20 maxlen: 24
91.83.224.0/20 maxlen: 24
91.83.220.0/22 maxlen: 22
91.83.240.0/21 maxlen: 24
91.83.248.0/22 maxlen: 24
91.82.192.0/20 maxlen: 24
91.82.208.0/23 maxlen: 24
91.82.216.0/21 maxlen: 24
91.82.224.0/22 maxlen: 24
91.82.236.0/22 maxlen: 24
91.82.152.0/21 maxlen: 24
91.82.148.0/22 maxlen: 24
91.82.174.0/23 maxlen: 24
213.197.64.0/21 maxlen: 24
91.82.184.0/22 maxlen: 24
91.83.40.0/21 maxlen: 24
91.83.48.0/22 maxlen: 24
91.83.56.0/21 maxlen: 24
91.83.64.0/20 maxlen: 24
194.143.224.0/19 maxlen: 24
91.83.80.0/21 maxlen: 24
91.83.88.0/22 maxlen: 24
91.82.244.0/22 maxlen: 24
195.184.0.0/19 maxlen: 24
91.82.252.0/22 maxlen: 24
91.82.248.0/23 maxlen: 24
91.82.8.0/21 maxlen: 24
91.82.16.0/21 maxlen: 24
212.108.192.0/18 maxlen: 24
91.82.84.0/22 maxlen: 24
91.82.80.0/23 maxlen: 24
91.82.88.0/21 maxlen: 24
91.82.96.0/19 maxlen: 24
194.169.253.0/24 maxlen: 24
91.82.128.0/23 maxlen: 24
213.163.0.0/18 maxlen: 24
91.82.40.0/21 maxlen: 24
91.82.48.0/21 maxlen: 24
91.82.58.0/23 maxlen: 24
91.82.62.0/23 maxlen: 24
91.82.72.0/21 maxlen: 24
81.0.64.0/20 maxlen: 24
81.0.80.0/23 maxlen: 24
81.0.88.0/23 maxlen: 24
81.0.96.0/23 maxlen: 24
81.94.176.0/20 maxlen: 24
81.0.104.0/22 maxlen: 24
81.0.100.0/22 maxlen: 24
82.141.128.0/18 maxlen: 24
193.68.32.0/19 maxlen: 24
81.0.110.0/23 maxlen: 24
81.0.112.0/21 maxlen: 24
81.0.124.0/23 maxlen: 24
81.0.120.0/23 maxlen: 24
2001:1aa0::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:42:69:2c:bb:12:6a:28:88:4a:9d:9c:0d:4b:c9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Feb 21 09:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14165167fd1df07ef58fd2f4cd23197a03f3ded7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:29:a5:94:df:e6:0e:85:22:e0:08:ac:dd:
b9:83:c1:98:f6:06:70:7c:ce:e8:55:81:2e:b3:9e:
bc:0d:10:43:02:8e:c9:04:0a:03:30:b1:94:01:9b:
cc:3c:bb:cd:b2:bd:a5:a6:63:4c:30:bf:db:e0:df:
c3:60:92:25:af:f6:f1:7f:57:c8:ad:84:ba:9d:76:
ee:14:08:99:01:09:56:e8:11:85:54:d1:b1:fc:ad:
90:fe:e9:af:04:15:e9:27:1f:65:f9:05:a2:87:3c:
04:90:0a:7f:e3:f0:a9:a5:3c:21:ae:6a:d8:15:82:
b1:00:78:1b:33:45:bb:36:67:ce:78:92:f1:f0:5b:
e1:8c:13:d0:d7:db:9f:5c:1a:02:1d:3f:b2:1d:3f:
7a:69:b8:92:ed:01:d6:a2:d2:4e:18:ee:3e:b5:7e:
af:a9:5b:1e:3f:8b:2f:bb:69:37:98:59:4c:5d:1f:
19:d9:c6:2c:8f:8c:c7:1f:aa:99:6a:d2:e5:79:d5:
73:8b:56:86:e2:3f:d3:cb:2f:d7:ab:a5:e7:1c:c0:
98:62:b4:72:81:94:df:94:bf:39:d8:35:cc:17:2b:
c6:ae:f1:d1:d5:b3:76:fe:1c:8c:18:c4:f7:57:64:
9c:e8:b5:e1:81:1a:ba:ed:27:f8:6f:93:62:af:b8:
3a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:16:51:67:FD:1D:F0:7E:F5:8F:D2:F4:CD:23:19:7A:03:F3:DE:D7
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/FBZRZ_0d8H71j9L0zSMZegPz3tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.192.0/22
62.77.200.0-62.77.239.255
62.77.242.0-62.77.247.255
79.120.128.0/19
79.120.168.0/23
79.120.176.0-79.120.247.255
79.120.250.0/23
81.0.64.0-81.0.81.255
81.0.88.0/23
81.0.96.0/23
81.0.100.0-81.0.107.255
81.0.110.0-81.0.121.255
81.0.124.0/23
81.94.176.0/20
82.131.160.0-82.131.181.255
82.131.192.0/22
82.131.199.0/24
82.131.208.0/21
82.141.128.0/18
82.144.160.0/22
82.144.168.0/22
82.144.178.0-82.144.187.255
82.144.190.0/23
87.97.64.0/20
89.186.98.0-89.186.101.255
89.186.104.0/23
89.186.116.0/23
91.82.8.0-91.82.23.255
91.82.40.0-91.82.55.255
91.82.58.0/23
91.82.62.0/23
91.82.72.0-91.82.81.255
91.82.84.0-91.82.129.255
91.82.148.0-91.82.159.255
91.82.174.0/23
91.82.184.0/22
91.82.192.0-91.82.209.255
91.82.216.0-91.82.227.255
91.82.236.0/22
91.82.244.0-91.82.249.255
91.82.252.0/22
91.83.40.0-91.83.51.255
91.83.56.0-91.83.93.255
91.83.96.0-91.83.101.255
91.83.104.0-91.83.109.255
91.83.122.0-91.83.135.255
91.83.146.0-91.83.153.255
91.83.156.0-91.83.179.255
91.83.208.0-91.83.251.255
91.83.254.0/23
94.125.248.0/21
185.50.28.0/22
193.68.32.0/19
193.91.64.0/19
193.226.194.0-193.226.211.255
193.226.216.0-193.226.225.255
193.226.228.0/22
193.226.234.0-193.226.237.255
193.226.242.0/23
193.226.250.0-193.226.255.255
194.143.224.0/19
194.169.253.0/24
195.184.0.0/19
212.24.160.0/19
212.108.192.0/18
213.16.64.0/18
213.163.0.0/18
213.197.64.0/21
213.253.192.0/18
IPv6:
2001:1aa0::/29
Signature Algorithm: sha256WithRSAEncryption
5a:75:77:08:c3:e1:01:87:96:6c:44:ee:32:cb:6c:a3:01:62:
45:c5:80:b0:d1:c7:e1:70:df:ad:8f:fd:28:1b:4c:59:2c:4a:
6e:d2:c3:df:f3:c4:5a:99:d3:07:90:f1:d9:45:e1:75:23:0e:
90:a8:4d:35:25:66:d1:67:11:3d:9d:61:f6:06:39:25:8a:97:
d1:b8:a3:3a:bc:82:db:b8:81:8c:53:71:10:09:f0:cd:54:77:
16:54:ec:af:bc:da:64:11:07:51:a0:61:4a:c0:55:aa:24:b2:
e7:eb:71:41:1f:eb:f8:53:55:bf:a9:47:2a:0b:57:8c:8d:c6:
4d:83:1b:e2:a6:4f:c1:17:1b:cc:46:31:7d:d0:92:76:18:15:
ed:54:d5:2d:47:c6:4f:36:cb:97:0c:27:0a:0f:b5:e5:62:8c:
a2:1c:3b:6d:1c:cf:ad:e5:ef:f1:f6:6d:a6:5d:06:9f:42:7a:
31:52:ff:34:0e:1b:55:ad:a7:18:32:ce:67:92:8d:21:c7:9e:
73:b9:99:79:2f:99:df:e1:c4:80:fb:66:d1:e1:ee:96:24:cf:
e1:75:b7:41:3f:33:15:e8:27:72:ea:f6:08:3b:ee:36:47:6f:
08:48:a6:41:e7:00:a5:e5:b8:97:ff:19:03:91:1c:01:d5:21:
55:b6:f3:bc
-----BEGIN CERTIFICATE-----
MIIHlTCCBn2gAwIBAgISAYZzQmksuxJqKIhKnZwNS8l7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5
ZDQyODgwHhcNMjMwMjIxMDkxNjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDE2NTE2N2ZkMWRmMDdlZjU4ZmQyZjRjZDIzMTk3YTAzZjNkZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR0ppZTf5g6FIuAIrN25g8GY9gZw
fM7oVYEus568DRBDAo7JBAoDMLGUAZvMPLvNsr2lpmNMML/b4N/DYJIlr/bxf1fI
rYS6nXbuFAiZAQlW6BGFVNGx/K2Q/umvBBXpJx9l+QWihzwEkAp/4/CppTwhrmrY
FYKxAHgbM0W7NmfOeJLx8FvhjBPQ19ufXBoCHT+yHT96abiS7QHWotJOGO4+tX6v
qVseP4svu2k3mFlMXR8Z2cYsj4zHH6qZatLledVzi1aG4j/Tyy/Xq6XnHMCYYrRy
gZTflL852DXMFyvGrvHR1bN2/hyMGMT3V2Sc6LXhgRq67Sf4b5Nir7g64QIDAQAB
o4IEoTCCBJ0wHQYDVR0OBBYEFBQWUWf9HfB+9Y/S9M0jGXoD897XMB8GA1UdIwQY
MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It
ZWNjNDliZGMyYWQ4LzEvRkJaUlpfMGQ4SDcxajlMMHpTTVplZ1B6M3RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4
LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICtQYIKwYBBQUHAQcBAf8EggKkMIICoDCCAo0EAgABMIIC
hQMEAj5NwDAMAwQDPk3IAwQEPk3gMAwDBAE+TfIDBAM+TfADBAVPeIADBAFPeKgw
DAMEBE94sAMEA0948AMEAU94+jAMAwQGUQBAAwQBUQBQAwQBUQBYAwQBUQBgMAwD
BAJRAGQDBAJRAGgwDAMEAVEAbgMEAVEAeAMEAVEAfAMEBFFesDAMAwQFUoOgAwQB
UoO0AwQCUoPAAwQAUoPHAwQDUoPQAwQGUo2AAwQCUpCgAwQCUpCoMAwDBAFSkLID
BAJSkLgDBAFSkL4DBARXYUAwDAMEAVm6YgMEAVm6ZAMEAVm6aAMEAVm6dDAMAwQD
W1IIAwQDW1IQMAwDBANbUigDBANbUjADBAFbUjoDBAFbUj4wDAMEA1tSSAMEAVtS
UDAMAwQCW1JUAwQBW1KAMAwDBAJbUpQDBAVbUoADBAFbUq4DBAJbUrgwDAMEBltS
wAMEAVtS0DAMAwQDW1LYAwQCW1LgAwQCW1LsMAwDBAJbUvQDBAFbUvgDBAJbUvww
DAMEA1tTKAMEAltTMDAMAwQDW1M4AwQBW1NcMAwDBAVbU2ADBAFbU2QwDAMEA1tT
aAMEAVtTbDAMAwQBW1N6AwQDW1OAMAwDBAFbU5IDBAFbU5gwDAMEAltTnAMEAltT
sDAMAwQEW1PQAwQCW1P4AwQBW1P+AwQDXn34AwQCuTIcAwQFwUQgAwQFwVtAMAwD
BAHB4sIDBALB4tAwDAMEA8Hi2AMEAcHi4AMEAsHi5DAMAwQBweLqAwQBweLsAwQB
weLyMAsDBAHB4voDAwDB4gMEBcKP4AMEAMKp/QMEBcO4AAMEBdQYoAMEBtRswAME
BtUQQAMEBtWjAAMEA9XFQAMEBtX9wDANBAIAAjAHAwUDIAEaoDANBgkqhkiG9w0B
AQsFAAOCAQEAWnV3CMPhAYeWbETuMstsowFiRcWAsNHH4XDfrY/9KBtMWSxKbtLD
3/PEWpnTB5Dx2UXhdSMOkKhNNSVm0WcRPZ1h9gY5JYqX0bijOryC27iBjFNxEAnw
zVR3FlTsr7zaZBEHUaBhSsBVqiSy5+txQR/r+FNVv6lHKgtXjI3GTYMb4qZPwRcb
zEYxfdCSdhgV7VTVLUfGTzbLlwwnCg+15WKMohw7bRzPreXv8fZtpl0Gn0J6MVL/
NA4bVa2nGDLOZ5KNIceec7mZeS+Z3+HEgPtm0eHuliTP4XW3QT8zFegncur2CDvu
NkdvCEimQecApeW4l/8ZA5EcAdUhVbbzvA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:32 2023 by rpki-client on console-fra.rpki-client.org