Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3_z3x8_ZYGT8WubhdpQhyTndnI4.roa
File: 3_z3x8_ZYGT8WubhdpQhyTndnI4.roa (raw, json)
Hash identifier: Qu0C+RS+Mwp9GMqML4KZtYdw2w4+CBqwysJJ/n0hY4g=
Subject key identifier: DF:FC:F7:C7:CF:D9:60:64:FC:5A:E6:E1:76:94:21:C9:39:DD:9C:8E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188FCACB47C6CB62B33E58BE8A33E9D1893
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3_z3x8_ZYGT8WubhdpQhyTndnI4.roa
Signing time: Tue 27 Jun 2023 11:45:56 +0000
ROA not before: Tue 27 Jun 2023 11:45:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.184.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:ac:b4:7c:6c:b6:2b:33:e5:8b:e8:a3:3e:9d:18:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 27 11:45:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dffcf7c7cfd96064fc5ae6e1769421c939dd9c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:a9:69:44:97:8f:d2:b1:1d:5a:50:dc:05:
01:f1:ff:dc:1d:c9:4d:96:a6:87:88:2b:49:ca:8c:
32:1a:6f:1c:68:1b:e7:27:ea:3a:78:f0:89:95:fe:
f7:24:1d:af:c8:0c:af:cb:a1:e2:51:0a:f0:a6:d6:
79:ad:5d:25:f0:78:83:ec:6c:6f:f6:13:9f:8d:97:
78:27:c2:a9:04:b3:b2:31:e6:16:55:94:25:34:fe:
77:d3:77:25:12:3a:ff:86:73:72:21:63:b5:e9:e7:
2e:e1:1d:01:9d:58:a8:af:56:97:85:7d:c5:0b:8a:
bc:62:c4:61:1f:37:55:6c:41:72:e5:59:b5:06:2f:
28:15:b4:16:8a:22:50:41:40:79:69:f9:cf:b1:ac:
8d:6f:b7:22:f3:68:97:9f:69:98:48:ad:c2:ab:8d:
ef:78:fd:8f:ad:9f:73:55:19:d8:12:93:2b:55:9c:
e4:1c:99:5f:d4:10:1c:de:66:0b:01:44:62:bf:f4:
77:83:ff:74:4a:c4:5e:13:c1:49:3d:89:57:1d:af:
1b:7b:a2:9c:0c:b9:29:ce:46:fc:c4:6a:4a:bf:23:
d4:2f:a2:b4:52:07:56:9b:48:c5:e9:d6:90:1e:9b:
9e:33:6a:6f:26:9d:0b:a6:03:4f:7a:dd:1c:78:92:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FC:F7:C7:CF:D9:60:64:FC:5A:E6:E1:76:94:21:C9:39:DD:9C:8E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3_z3x8_ZYGT8WubhdpQhyTndnI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.31.0/24
84.32.46.0/24
84.32.60.0/24
84.32.62.0/24
84.32.65.0/24
84.32.67.0-84.32.68.255
84.32.79.0/24
84.32.92.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.156.0/24
84.32.158.0/23
84.32.178.0/23
84.32.213.0-84.32.215.255
84.32.221.0/24
84.32.224.0/24
84.32.231.0-84.32.232.255
84.32.235.0/24
84.32.239.0-84.32.240.255
84.32.243.0-84.32.247.255
84.32.250.0-84.32.253.255
88.216.0.0/24
88.216.3.0/24
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0/24
88.216.40.0/24
88.216.44.0/23
88.216.58.0/24
88.216.61.0-88.216.65.255
88.216.100.0/23
88.216.105.0/24
88.216.107.0/24
88.216.109.0/24
88.216.111.0/24
88.216.130.0/23
88.216.134.0/23
88.216.180.0/24
88.216.183.0-88.216.184.255
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
25:07:df:0b:f1:51:9f:56:00:3f:3a:61:4c:f9:4b:ee:64:30:
92:f2:de:be:a1:0a:71:ee:1b:b3:a9:b9:13:fe:18:2d:6d:42:
40:e3:f5:1c:de:0c:bb:af:87:2e:7b:36:5d:9a:40:c8:48:f3:
c6:4d:fc:97:67:36:df:dd:44:4e:0a:5f:4d:f6:f2:52:72:a1:
62:b7:6b:4f:67:ba:33:7c:86:4a:32:9a:e9:ee:26:72:cf:c7:
40:42:9f:a0:19:f0:cf:f1:91:2d:7e:94:8b:18:60:64:e8:cc:
7e:20:d3:b8:a2:84:66:f5:6e:c7:ab:32:ab:a5:d2:d8:3c:4d:
f8:5e:11:29:2c:50:db:27:ca:ec:c3:3f:a4:db:61:e6:8c:ef:
5c:19:a8:ef:74:be:4a:83:37:ab:13:66:3f:96:52:2c:73:6e:
a3:13:3a:a8:3d:5d:0d:cc:28:9a:a0:23:82:6a:c3:e4:ec:7e:
9a:07:7e:f5:de:9d:77:85:7c:7a:03:ca:55:96:76:b2:3c:b8:
f2:9c:cb:38:41:0b:a6:38:2c:58:24:1e:27:ef:47:5a:e9:9f:
68:ae:ed:64:7f:f2:4d:0c:74:f6:2f:9a:28:16:91:a1:13:6b:
8b:f3:06:3d:30:6d:5f:68:ac:75:f4:de:db:f2:71:a9:73:f6:
ff:24:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:26 2023 by rpki-client on console-ams.rpki-client.org