Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/08xg1mlyKI-tNJbRLadK3RaTOCs.roa
File: 08xg1mlyKI-tNJbRLadK3RaTOCs.roa (raw, json)
Hash identifier: ABXIX8ivFfw+2XieiNbIbmtAgt9o8ncCNUZdKKHbZE8=
Subject key identifier: D3:CC:60:D6:69:72:28:8F:AD:34:96:D1:2D:A7:4A:DD:16:93:38:2B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188758CA8A3776AE007DD978EBB8798FCEF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/08xg1mlyKI-tNJbRLadK3RaTOCs.roa
Signing time: Thu 01 Jun 2023 06:02:12 +0000
ROA not before: Thu 01 Jun 2023 06:02:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.19.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 08:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:8c:a8:a3:77:6a:e0:07:dd:97:8e:bb:87:98:fc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 1 06:02:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3cc60d66972288fad3496d12da74add1693382b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3e:ce:6b:fa:d4:7f:db:37:54:af:97:85:1d:
2c:b4:8e:63:8a:51:67:ce:28:5b:31:86:5c:b3:2a:
f5:7c:e4:2e:59:06:21:af:38:24:73:bb:34:39:75:
8d:82:28:9e:fa:ce:78:1f:ba:4e:6f:d7:9f:ef:2e:
65:48:07:f0:25:d3:16:c0:88:50:92:5e:b3:7b:3a:
7f:6d:f4:7e:a8:bf:50:4f:68:66:66:69:49:bf:39:
31:41:d4:ea:82:88:78:3b:56:38:f0:67:38:89:29:
9f:4d:8a:68:a3:5f:14:28:7c:cb:e8:ef:72:8d:ab:
58:4b:f4:f3:3b:02:8c:4e:fa:4b:9c:8f:5f:b8:6c:
f8:ec:38:73:d8:66:c2:ae:2f:e7:98:36:0b:ed:46:
40:68:bb:51:d6:51:34:3a:db:50:c7:ce:d7:41:e7:
b9:17:31:19:9a:7a:c0:b9:6e:2f:42:7f:f2:eb:37:
10:3a:94:b8:0c:a3:82:8f:11:25:7c:ed:75:0c:a2:
41:50:e0:0b:24:c2:c7:7e:a5:d6:16:53:93:e7:6b:
09:25:bc:0e:96:81:5d:88:f8:6a:15:9d:24:c4:c5:
2a:93:4c:02:e0:44:4c:80:2a:0c:3e:c5:ec:7d:79:
f0:80:fe:cf:0d:bf:93:7d:e4:f1:09:70:d3:7a:ff:
0f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:60:D6:69:72:28:8F:AD:34:96:D1:2D:A7:4A:DD:16:93:38:2B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/08xg1mlyKI-tNJbRLadK3RaTOCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.30.0/24
84.32.46.0/24
84.32.60.0/24
84.32.67.0-84.32.68.255
84.32.77.0/24
84.32.79.0/24
84.32.89.0/24
84.32.110.0/24
84.32.148.0/22
84.32.158.0/23
84.32.177.0/24
84.32.212.0/24
84.32.214.0/23
84.32.218.0/24
84.32.221.0/24
84.32.224.0/23
84.32.231.0-84.32.232.255
84.32.235.0/24
84.32.239.0-84.32.240.255
84.32.243.0/24
84.32.250.0-84.32.253.255
88.216.0.0/24
88.216.3.0/24
88.216.16.0/24
88.216.19.0/24
88.216.32.0/24
88.216.35.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.100.0/24
88.216.111.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.208.0/24
88.216.212.0/22
88.216.220.0/24
88.216.232.0/21
Signature Algorithm: sha256WithRSAEncryption
07:fc:ed:33:aa:29:a6:b2:22:a0:e6:82:60:a6:6f:54:ee:dd:
a9:84:6c:f4:7e:e5:6c:3a:72:a5:cc:e5:80:86:9d:e2:43:c0:
69:26:33:a1:a2:16:cb:2a:fe:74:17:f6:cc:06:f9:ef:6b:70:
c5:87:a2:2a:55:5a:14:ca:37:57:d1:d7:8f:2b:60:8d:0c:46:
08:3c:55:9f:06:85:70:17:d8:17:e8:42:aa:d6:14:14:a2:bf:
90:14:b1:e1:1d:6c:3a:37:95:36:ad:d7:42:9d:39:3d:b3:f6:
04:8e:0e:b0:6e:b8:17:65:11:eb:87:c4:1f:6e:ee:38:dd:e4:
74:52:65:ea:2c:d6:b6:75:6c:4f:09:42:c6:8f:ce:33:12:fc:
1b:d8:cc:d1:e9:91:e9:35:dd:65:b3:51:87:41:a7:e0:97:3b:
95:2b:bd:ee:bc:66:d1:62:aa:4b:15:0c:d0:cc:ef:c4:09:18:
02:85:f7:f7:12:cb:26:43:62:ff:34:63:69:3c:f7:89:56:85:
c8:01:3a:95:14:ef:45:16:f7:e6:30:8c:5b:78:c5:fa:a3:17:
70:fe:b3:78:a9:3f:a5:e5:6d:4d:92:62:6d:15:18:ab:ec:bb:
01:07:21:41:25:1d:d9:15:a5:60:e4:32:ce:a4:22:5d:20:67:
5f:41:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org