Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/FtylsYmuDivlV5tH94crONwsxY4.roa
File: FtylsYmuDivlV5tH94crONwsxY4.roa (raw, json)
Hash identifier: FZhA8sHOqQyB2elS6WHHy5/9Xlv8N/3olfaaBk1vYrc=
Subject key identifier: 16:DC:A5:B1:89:AE:0E:2B:E5:57:9B:47:F7:87:2B:38:DC:2C:C5:8E
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 0185703998B44CA0E5EB7E51E6BD15F13097
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/FtylsYmuDivlV5tH94crONwsxY4.roa
Signing time: Mon 02 Jan 2023 02:05:00 +0000
ROA not before: Mon 02 Jan 2023 02:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47394
IP address blocks: 46.255.144.0/24 maxlen: 24
46.255.144.0/22 maxlen: 22
46.255.144.0/21 maxlen: 21
46.255.145.0/24 maxlen: 24
95.107.150.0/24 maxlen: 24
95.107.146.0/23 maxlen: 23
95.107.157.0/24 maxlen: 24
95.107.159.0/24 maxlen: 24
95.107.156.0/24 maxlen: 24
95.107.162.0/24 maxlen: 24
95.107.164.0/24 maxlen: 24
95.107.165.0/24 maxlen: 24
95.107.166.0/24 maxlen: 24
95.107.160.0/22 maxlen: 22
95.107.160.0/21 maxlen: 21
95.107.160.0/24 maxlen: 24
95.107.162.0/23 maxlen: 23
95.107.164.0/22 maxlen: 22
95.107.172.0/23 maxlen: 23
95.107.168.0/22 maxlen: 22
95.107.167.0/24 maxlen: 24
95.107.168.0/23 maxlen: 23
95.107.170.0/23 maxlen: 23
95.107.176.0/21 maxlen: 21
95.107.174.0/24 maxlen: 24
95.107.177.0/24 maxlen: 24
95.107.184.0/22 maxlen: 22
95.107.182.0/24 maxlen: 24
95.107.184.0/21 maxlen: 21
95.107.192.0/24 maxlen: 24
95.107.188.0/22 maxlen: 22
95.107.188.0/24 maxlen: 24
95.107.192.0/22 maxlen: 22
95.107.196.0/22 maxlen: 22
95.107.195.0/24 maxlen: 24
95.107.196.0/23 maxlen: 23
95.107.196.0/24 maxlen: 24
95.107.198.0/23 maxlen: 23
95.107.193.0/24 maxlen: 24
95.107.194.0/24 maxlen: 24
95.107.194.0/23 maxlen: 23
46.255.148.0/24 maxlen: 24
46.255.149.0/24 maxlen: 24
46.255.150.0/24 maxlen: 24
46.255.151.0/24 maxlen: 24
46.255.146.0/24 maxlen: 24
46.255.147.0/24 maxlen: 24
46.255.148.0/22 maxlen: 22
95.107.128.0/21 maxlen: 21
95.107.129.0/24 maxlen: 24
95.107.132.0/24 maxlen: 24
95.107.136.0/24 maxlen: 24
95.107.135.0/24 maxlen: 24
95.107.136.0/21 maxlen: 21
95.107.144.0/23 maxlen: 23
95.107.141.0/24 maxlen: 24
185.118.150.0/23 maxlen: 23
185.118.148.0/22 maxlen: 22
185.118.148.0/23 maxlen: 23
141.8.200.0/21 maxlen: 21
185.122.228.0/24 maxlen: 24
185.122.228.0/23 maxlen: 23
185.122.228.0/22 maxlen: 22
95.107.254.0/23 maxlen: 23
95.107.200.0/24 maxlen: 24
95.107.201.0/24 maxlen: 24
95.107.200.0/21 maxlen: 21
95.107.204.0/22 maxlen: 22
95.107.202.0/23 maxlen: 23
95.107.212.0/23 maxlen: 23
95.107.212.0/24 maxlen: 24
95.107.209.0/24 maxlen: 24
95.107.212.0/22 maxlen: 22
95.107.208.0/23 maxlen: 23
95.107.208.0/21 maxlen: 21
95.107.208.0/22 maxlen: 22
95.107.208.0/20 maxlen: 20
95.107.216.0/21 maxlen: 21
95.107.216.0/22 maxlen: 22
95.107.216.0/23 maxlen: 23
95.107.218.0/23 maxlen: 23
95.107.224.0/20 maxlen: 20
95.107.224.0/22 maxlen: 22
95.107.220.0/23 maxlen: 23
95.107.222.0/23 maxlen: 23
95.107.220.0/22 maxlen: 22
95.107.228.0/24 maxlen: 24
95.107.228.0/22 maxlen: 22
95.107.232.0/22 maxlen: 22
95.107.240.0/23 maxlen: 23
95.107.238.0/23 maxlen: 23
95.107.240.0/22 maxlen: 22
95.107.234.0/23 maxlen: 23
95.107.236.0/22 maxlen: 22
95.107.240.0/20 maxlen: 20
95.107.244.0/22 maxlen: 22
95.107.252.0/22 maxlen: 22
95.107.248.0/24 maxlen: 24
95.107.248.0/23 maxlen: 23
95.107.248.0/22 maxlen: 22
2a03:8480::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:98:b4:4c:a0:e5:eb:7e:51:e6:bd:15:f1:30:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Jan 2 02:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16dca5b189ae0e2be5579b47f7872b38dc2cc58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:67:71:67:df:6e:2b:a8:38:c9:d6:91:77:
c5:63:08:71:fe:7b:a0:87:f9:79:60:8b:49:79:92:
e2:98:ec:9b:c7:dc:43:c3:e1:68:a1:c0:29:9c:87:
5e:9d:1d:3a:a5:e1:24:fe:1f:14:32:c5:ec:ea:17:
98:f5:f7:58:ad:41:f7:87:1d:8e:f1:65:c6:ee:40:
71:69:0f:ef:20:17:99:3a:11:90:0d:43:53:af:52:
65:70:c0:e6:59:a0:59:63:ef:1d:c1:0e:54:f2:78:
7c:8b:dd:fc:50:30:78:bc:a4:80:04:78:a2:75:89:
92:0c:4a:24:f5:e6:cc:ee:e3:58:c8:cc:6e:32:1b:
80:6a:07:4d:01:df:ab:b6:8c:6b:79:df:fb:7e:5b:
00:78:ae:05:61:f2:39:b5:67:7f:04:f6:49:59:d3:
9e:81:68:a5:8e:ab:f8:03:a6:13:95:4f:ce:83:9d:
58:af:9e:0d:c8:8e:77:aa:83:04:01:67:98:62:89:
41:12:6e:11:5c:01:a1:ce:9e:ca:c1:05:b9:c4:0b:
35:b9:b4:73:1c:a2:ac:3b:41:9a:03:a8:c7:e4:3d:
1a:2b:ef:80:2d:29:8e:81:b1:c2:bc:49:ad:12:09:
4c:fe:51:db:22:a4:45:82:9e:a2:bf:43:6c:e3:12:
3e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DC:A5:B1:89:AE:0E:2B:E5:57:9B:47:F7:87:2B:38:DC:2C:C5:8E
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/FtylsYmuDivlV5tH94crONwsxY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.144.0/21
95.107.128.0-95.107.147.255
95.107.150.0/24
95.107.156.0/23
95.107.159.0-95.107.174.255
95.107.176.0-95.107.255.255
141.8.200.0/21
185.118.148.0/22
185.122.228.0/22
IPv6:
2a03:8480::/32
Signature Algorithm: sha256WithRSAEncryption
ab:47:46:3d:e8:5d:4e:7b:20:06:70:4b:ce:7d:f2:a5:f1:1a:
80:b9:87:b6:f5:52:4b:34:22:0b:15:7b:4b:e4:15:4a:95:98:
21:14:ef:a6:b7:18:69:87:d5:bf:f6:a9:86:cc:33:5c:a3:3f:
3d:ef:4c:22:e7:78:a6:fa:e8:31:c5:5e:f6:72:54:b8:ea:a1:
40:b0:4e:55:f6:47:ae:3f:52:59:58:0c:14:d4:c2:18:d5:67:
4b:7e:59:87:73:db:29:81:44:0b:4b:bf:19:b2:12:fa:b7:f6:
c1:60:12:80:d9:9e:06:9a:89:91:d8:59:b8:b3:4f:5a:72:d7:
40:27:c7:39:7d:c1:ed:48:d9:6d:3c:7e:4f:36:54:79:0b:b0:
c3:b1:c7:ed:56:d6:1d:b2:71:99:ad:c3:d9:b3:62:31:6a:df:
86:41:53:32:b9:6b:f5:b5:27:82:e3:91:e3:b7:bb:a9:1f:bf:
d1:36:a9:56:02:6a:db:ad:e5:55:44:a7:2b:7f:02:5e:8d:b3:
e8:4d:9a:76:30:c8:1e:98:3a:92:ac:93:1e:89:68:cf:6c:90:
36:0d:89:3a:2a:07:6b:16:31:56:9e:70:76:d8:18:a2:66:c4:
0f:5e:53:7c:83:c4:c0:af:a1:00:1d:c3:c6:77:74:af:49:f4:
d2:5e:85:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:21 2023 by rpki-client on console-ams.rpki-client.org