Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/f3KZY0-PLRhzbVB-9FtXZo3cDn4.roa
File: f3KZY0-PLRhzbVB-9FtXZo3cDn4.roa (raw, json)
Hash identifier: JVQy3Gytg7ltScXb1GVu3dgNveqaPpcPPBuDnWR4HII=
Subject key identifier: 7F:72:99:63:4F:8F:2D:18:73:6D:50:7E:F4:5B:57:66:8D:DC:0E:7E
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 01865015363607623B471963D9139078678A
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/f3KZY0-PLRhzbVB-9FtXZo3cDn4.roa
Signing time: Tue 14 Feb 2023 13:20:12 +0000
ROA not before: Tue 14 Feb 2023 13:20:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200567
IP address blocks: 46.16.216.0/22 maxlen: 22
46.16.216.0/23 maxlen: 23
46.16.218.0/23 maxlen: 23
46.16.222.0/23 maxlen: 23
46.16.220.0/23 maxlen: 23
46.16.220.0/22 maxlen: 22
185.39.176.0/23 maxlen: 24
185.39.178.0/23 maxlen: 23
185.70.144.0/23 maxlen: 23
185.70.146.0/23 maxlen: 23
45.146.132.0/22 maxlen: 23
185.109.32.0/23 maxlen: 23
185.109.34.0/23 maxlen: 23
2a05:2a80:1::/48 maxlen: 48
2a05:2a80::/29 maxlen: 29
2a0f:1000::/29 maxlen: 48
2a05:2a80::/32 maxlen: 32
2a06:4e40::/29 maxlen: 29
2a02:4500::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:15:36:36:07:62:3b:47:19:63:d9:13:90:78:67:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Feb 14 13:20:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f7299634f8f2d18736d507ef45b57668ddc0e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ce:d5:34:e1:dd:ce:b3:04:41:b1:00:e8:6c:
5f:13:af:f5:e0:43:d6:8a:e8:cd:c4:24:20:aa:cc:
6f:c3:8b:57:ba:df:94:a3:20:c0:38:85:05:38:fb:
2b:15:54:ec:81:c6:48:14:54:9d:b4:45:81:bc:61:
92:4f:e4:44:4c:09:35:6d:9c:08:28:7f:f8:ab:97:
d5:2c:91:db:07:8b:3d:57:0a:8e:c0:38:72:d6:a4:
f2:06:e1:d2:85:94:20:4c:2c:f0:b7:a7:1c:a9:6a:
36:a9:a0:69:2a:22:66:3a:ce:89:01:3a:31:26:7d:
83:76:02:f9:7f:dc:ab:4b:b6:1f:61:0b:37:61:d6:
fc:e1:af:a1:3c:93:d6:2e:93:12:ff:18:d6:4e:f1:
4b:cd:f5:18:0d:79:2d:76:12:78:60:65:a5:e9:2c:
14:9c:a3:74:98:4a:2b:57:35:54:35:09:4d:4a:4c:
68:ce:5e:05:97:32:86:0e:c7:b6:7a:f0:6f:49:4e:
fb:72:53:7c:63:8d:6a:51:26:4f:f1:9a:73:9c:6a:
60:3c:b8:86:db:83:a4:8f:d2:47:a0:cc:43:80:47:
ae:71:8e:05:47:18:9d:b5:60:8d:a4:20:1f:45:35:
6e:58:69:93:fd:30:27:72:61:c7:23:cc:ad:9a:42:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:72:99:63:4F:8F:2D:18:73:6D:50:7E:F4:5B:57:66:8D:DC:0E:7E
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/f3KZY0-PLRhzbVB-9FtXZo3cDn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.132.0/22
46.16.216.0/21
185.39.176.0/22
185.70.144.0/22
185.109.32.0/22
IPv6:
2a02:4500::/32
2a05:2a80::/29
2a06:4e40::/29
2a0f:1000::/29
Signature Algorithm: sha256WithRSAEncryption
46:e4:7c:84:df:9b:95:35:b1:a2:3c:4a:c9:b4:51:fa:9d:b1:
ae:ad:50:bc:44:87:1f:85:d1:86:bd:f5:aa:ac:8e:e8:69:4a:
c2:e3:8a:bc:a8:66:d0:53:75:3f:2f:c2:bf:98:0f:ef:25:18:
7b:17:d0:39:02:f0:03:1b:05:69:98:94:63:c5:0c:00:22:44:
0a:5b:4d:6f:e8:9b:67:c7:61:39:35:da:13:48:e9:43:70:6f:
b8:4b:ca:cb:67:e2:01:67:b1:ff:d1:b6:c9:f9:75:e9:e2:3d:
4d:d8:6f:a1:8a:31:42:60:dc:cf:e4:17:fe:06:8b:3e:eb:10:
f8:d5:c6:0c:82:6e:0b:63:fb:e6:12:7e:a2:28:a9:a5:2d:6b:
23:68:2e:4c:96:e4:41:87:4e:be:40:a2:3b:ac:d1:4f:cd:c5:
52:8b:7d:4d:5f:30:e2:02:96:ef:e7:a1:a2:59:1f:71:86:35:
0f:37:b5:78:23:da:cc:83:91:10:dd:5c:57:15:6b:23:4e:11:
d6:9d:5c:9f:2e:8e:e9:e4:e6:f8:cc:71:cf:71:ea:60:2d:a2:
14:c8:0f:9b:bf:55:3f:a6:ec:15:f1:a0:ec:31:23:8d:f9:65:
b2:c3:15:69:2f:8b:fd:d0:e9:72:19:ec:ea:c8:85:7a:1c:f2:
cd:a1:62:82
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYZQFTY2B2I7Rxlj2ROQeGeKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2JjN2YyZWFmMGNhZmE2OWJlZTVmYWJlNjcxMjJiNDM2
M2ZlNzIwHhcNMjMwMjE0MTMyMDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjcyOTk2MzRmOGYyZDE4NzM2ZDUwN2VmNDViNTc2NjhkZGMwZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs7VNOHdzrMEQbEA6GxfE6/14EPW
iujNxCQgqsxvw4tXut+UoyDAOIUFOPsrFVTsgcZIFFSdtEWBvGGST+RETAk1bZwI
KH/4q5fVLJHbB4s9VwqOwDhy1qTyBuHShZQgTCzwt6ccqWo2qaBpKiJmOs6JATox
Jn2DdgL5f9yrS7YfYQs3Ydb84a+hPJPWLpMS/xjWTvFLzfUYDXktdhJ4YGWl6SwU
nKN0mEorVzVUNQlNSkxozl4FlzKGDse2evBvSU77clN8Y41qUSZP8ZpznGpgPLiG
24Okj9JHoMxDgEeucY4FRxidtWCNpCAfRTVuWGmT/TAncmHHI8ytmkKmbQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFH9ymWNPjy0Yc21QfvRbV2aN3A5+MB8GA1UdIwQY
MBaAFPV7x/Lq8Mr6ab7l+r5nEitDY/5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVh2SDh1cnd5dnBwdnVYNnZtY1NLME5qX25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NDQxYjQtZjk4MS00YzI2LTliOTkt
MTAxMDQ3M2Y0ZmU4LzEvZjNLWlkwLVBMUmh6YlZCLTlGdFhabzNjRG40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80NDQxYjQtZjk4MS00YzI2LTliOTktMTAxMDQ3M2Y0ZmU4
LzEvOVh2SDh1cnd5dnBwdnVYNnZtY1NLME5qX25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAkBAIAATAeAwQCLZKEAwQD
LhDYAwQCuSewAwQCuUaQAwQCuW0gMCIEAgACMBwDBQAqAkUAAwUDKgUqgAMFAyoG
TkADBQMqDxAAMA0GCSqGSIb3DQEBCwUAA4IBAQBG5HyE35uVNbGiPErJtFH6nbGu
rVC8RIcfhdGGvfWqrI7oaUrC44q8qGbQU3U/L8K/mA/vJRh7F9A5AvADGwVpmJRj
xQwAIkQKW01v6Jtnx2E5NdoTSOlDcG+4S8rLZ+IBZ7H/0bbJ+XXp4j1N2G+hijFC
YNzP5Bf+Bos+6xD41cYMgm4LY/vmEn6iKKmlLWsjaC5MluRBh06+QKI7rNFPzcVS
i31NXzDiApbv56GiWR9xhjUPN7V4I9rMg5EQ3VxXFWsjThHWnVyfLo7p5Ob4zHHP
cepgLaIUyA+bv1U/puwV8aDsMSON+WWywxVpL4v90OlyGezqyIV6HPLNoWKC
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:45 2024 by rpki-client on console-fra.rpki-client.org