Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-pOrsgkMX_4rVEPpv_IGpNg0Ur8.roa
File: 1-pOrsgkMX_4rVEPpv_IGpNg0Ur8.roa (raw, json)
Hash identifier: TXrlSdjyDtLqhzXTuPJj//p2Dx36NqZ18dn1FLQpTmk=
Subject key identifier: FA:93:AB:B2:09:0C:5F:FE:2B:54:43:E9:BF:F2:06:A4:D8:34:52:BF
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01889A45499B91BB7487AD290A6971BC15C2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-pOrsgkMX_4rVEPpv_IGpNg0Ur8.roa
Signing time: Thu 08 Jun 2023 09:10:12 +0000
ROA not before: Thu 08 Jun 2023 09:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.56.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.91.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:45:49:9b:91:bb:74:87:ad:29:0a:69:71:bc:15:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 8 09:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa93abb2090c5ffe2b5443e9bff206a4d83452bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2e:0f:a7:12:95:3f:ad:75:e6:ea:fd:ea:93:
3a:4f:40:55:f0:45:7c:dd:9e:d6:22:2f:e1:7c:eb:
a4:02:04:ef:01:ae:d9:be:e3:2e:7b:5c:9a:bc:fb:
9a:2d:95:a2:dd:05:65:41:9e:73:e3:85:2f:ca:9d:
a7:21:1b:d8:f8:22:f2:ba:b5:17:93:07:1b:3f:28:
2b:4b:27:22:fd:15:1c:9c:6a:70:b1:35:5d:32:df:
9a:a2:dc:27:e5:d8:a7:4a:88:e8:48:d7:f6:71:39:
de:b0:2d:07:a3:f7:10:07:92:88:0d:f4:e4:dc:18:
d5:64:b2:fd:0e:d0:b9:c7:6f:34:29:f2:c2:99:e6:
15:c4:c9:5e:cf:f5:ba:f9:a1:d4:39:2f:b9:b3:84:
ea:3a:b6:a5:55:d9:6e:29:a4:66:9d:d6:ca:e7:6e:
17:19:68:09:aa:f6:0e:ae:76:cc:60:d8:f5:ee:7c:
e7:63:56:a1:a0:d3:eb:f8:78:fb:72:02:38:b4:d1:
b4:bb:aa:23:ac:b8:5f:dd:82:bb:5b:41:09:52:91:
cf:9e:9c:df:ce:f3:5b:65:71:ba:cd:65:4a:61:a5:
96:d2:8d:57:0c:95:a3:d8:b3:7e:c2:b7:72:af:cc:
3b:51:80:6f:1e:b2:0f:44:7d:3d:11:16:16:89:78:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:93:AB:B2:09:0C:5F:FE:2B:54:43:E9:BF:F2:06:A4:D8:34:52:BF
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-pOrsgkMX_4rVEPpv_IGpNg0Ur8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.30.0/23
84.32.46.0/24
84.32.56.0/24
84.32.60.0/24
84.32.62.0/24
84.32.65.0/24
84.32.67.0-84.32.68.255
84.32.79.0/24
84.32.89.0/24
84.32.91.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.158.0/23
84.32.177.0-84.32.179.255
84.32.212.0/24
84.32.214.0/23
84.32.221.0/24
84.32.224.0/24
84.32.231.0-84.32.232.255
84.32.235.0/24
84.32.239.0-84.32.240.255
84.32.243.0/24
84.32.250.0-84.32.253.255
88.216.0.0/24
88.216.3.0/24
88.216.16.0/24
88.216.32.0/24
88.216.35.0/24
88.216.38.0/23
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.100.0/23
88.216.111.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
19:51:77:ab:e7:d4:f0:73:d8:d1:b0:f8:cb:db:c6:c2:75:3d:
37:a5:95:10:3a:b5:ee:19:c4:9c:36:90:33:83:1a:f2:e9:f3:
84:3f:6a:5e:ea:b5:31:dd:d9:2b:c5:30:52:74:1a:f4:bf:d9:
f7:8f:e7:42:71:fa:42:50:c6:23:df:b3:b9:66:ac:b7:25:f6:
11:f0:02:2d:f2:fe:60:c0:81:0e:c9:b9:f3:ba:d0:9b:98:45:
0e:0d:a1:17:e3:56:c1:e2:8a:e1:ef:f5:12:4e:d6:78:e6:46:
4c:12:0e:ec:3a:91:42:3c:ab:b8:e7:fa:c9:97:47:5d:f9:fb:
64:4b:86:76:d8:65:01:e0:ac:6b:ce:b0:ed:b8:31:14:ae:c6:
92:6e:48:f7:dd:3e:1d:ca:fb:69:3a:c2:f0:2e:73:4e:eb:4f:
96:f4:bf:f4:3c:17:45:e0:6f:f6:fe:6c:b1:0a:19:40:b9:38:
7a:bb:4a:65:47:7f:6b:00:78:6a:18:b4:59:69:e7:da:2b:f4:
f7:05:11:e0:87:3c:ae:48:86:fe:ca:ad:8c:31:e8:01:f0:e0:
b5:56:2f:da:e1:5f:33:b9:b9:e4:46:2a:6b:45:8e:18:10:53:
83:28:88:be:e3:17:33:49:b5:12:dc:8d:0d:ed:2e:36:ad:49:
45:3e:69:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:44 2023 by rpki-client on console-fra.rpki-client.org