Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3L7AcJxBeT5X7w_Fj2g7DnWtvIA.roa
File: 3L7AcJxBeT5X7w_Fj2g7DnWtvIA.roa (raw, json)
Hash identifier: cEw1For9S671S3wlX9b2WGHe5KB1zIhKLsJllOZXfXk=
Subject key identifier: DC:BE:C0:70:9C:41:79:3E:57:EF:0F:C5:8F:68:3B:0E:75:AD:BC:80
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018AA6AD4EFAB10EF8FACAC324D5382C2E0A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3L7AcJxBeT5X7w_Fj2g7DnWtvIA.roa
Signing time: Mon 18 Sep 2023 05:04:50 +0000
ROA not before: Mon 18 Sep 2023 05:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.233.0/24 maxlen: 24
84.32.236.0/23 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.66.0/24 maxlen: 24
88.216.67.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a6:ad:4e:fa:b1:0e:f8:fa:ca:c3:24:d5:38:2c:2e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 18 05:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcbec0709c41793e57ef0fc58f683b0e75adbc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:6e:87:d9:ec:dc:d9:54:a6:8f:91:c9:50:
8a:f9:03:02:b8:e2:4e:fc:c2:8c:d1:2c:71:92:99:
61:47:a3:7d:e3:c0:8e:25:b9:b2:51:bb:b0:7d:f5:
cf:96:5d:52:a7:75:94:dd:5a:08:4b:61:bc:80:c3:
70:8f:86:36:6f:18:c1:45:db:58:09:9f:3a:62:66:
70:86:a2:26:3a:9e:42:b2:c2:36:c9:d5:4b:39:68:
e0:61:52:fa:48:bb:8c:df:f2:60:0f:08:3d:73:1f:
9f:a8:ac:21:44:a5:f5:78:6a:d3:3b:90:d3:0b:8e:
6e:32:7f:04:df:6e:04:b0:09:a5:35:e4:ba:e7:4f:
c4:0a:03:43:35:fe:4b:c2:24:17:bc:70:b3:fc:77:
43:05:20:bb:ad:0a:98:30:15:68:56:de:08:2f:63:
c9:75:e3:ef:50:ab:27:bb:b7:c4:24:9e:f0:c5:68:
de:8b:96:d9:ed:10:ee:32:3f:08:e6:c8:cd:75:88:
a0:9d:18:8a:8f:18:b4:63:dc:e2:a2:03:43:c3:70:
2d:a0:f7:25:64:e1:46:e4:05:e8:ba:6d:44:09:70:
f9:87:cb:a9:f0:8a:b9:c1:47:94:d1:07:44:e1:dd:
8d:e7:cd:a3:d8:30:07:f4:4c:41:f9:3b:de:05:a8:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BE:C0:70:9C:41:79:3E:57:EF:0F:C5:8F:68:3B:0E:75:AD:BC:80
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3L7AcJxBeT5X7w_Fj2g7DnWtvIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.8.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.43.0/24
84.32.46.0/23
84.32.49.0-84.32.51.255
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0-84.32.66.255
84.32.68.0/24
84.32.76.0/23
84.32.83.0/24
84.32.88.0-84.32.90.255
84.32.92.0-84.32.94.255
84.32.105.0/24
84.32.107.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0-84.32.176.255
84.32.178.0/23
84.32.210.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.35.0-88.216.36.255
88.216.40.0/24
88.216.42.0-88.216.45.255
88.216.58.0/24
88.216.60.0-88.216.67.255
88.216.92.0/23
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
83:ec:17:bb:f7:8d:58:ae:ff:77:b8:f5:01:9c:5e:11:f9:03:
70:81:f5:e5:37:7e:2d:6d:0c:4c:d8:fd:36:d7:c9:69:03:a7:
e6:1a:2f:63:5b:3f:bc:f9:d8:fc:8f:f2:0e:1f:9f:52:19:31:
7d:f9:32:6d:c5:4f:79:a2:7e:67:9b:8b:8c:5b:61:38:8e:ea:
eb:46:d1:e3:03:ac:ef:b5:0f:58:a9:4f:39:fc:95:bc:3b:f2:
01:de:d2:8e:f1:00:6b:7b:3b:0d:6f:f5:c0:b6:8b:d3:5b:e1:
42:3a:b2:74:59:6f:bc:70:63:eb:85:ba:1a:b3:27:8a:23:6d:
23:58:d9:b9:f5:0e:37:e4:3e:6e:ad:6a:32:60:10:d1:d7:db:
5a:a0:d7:0a:bf:07:3d:c6:98:aa:6e:d2:e4:e6:3a:4c:9a:e5:
d7:a7:64:9d:53:5a:71:f6:3e:da:94:0f:d6:5b:7b:01:e7:b9:
a4:41:55:83:1b:e3:01:5c:2b:82:8b:99:1d:0b:d6:51:94:6b:
95:87:a9:3d:5a:28:59:1d:14:b1:c0:50:b1:76:e2:c3:52:3e:
c5:b8:76:ad:16:21:15:b2:85:9d:14:c8:db:9d:3f:fc:6e:1c:
b7:b3:f2:ef:ae:e5:69:7e:b6:cb:7c:7b:03:f0:7e:36:77:c9:
71:5e:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 07:08:49 2023 by rpki-client on console-ams.rpki-client.org