Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4f9qoKc2hoIfUbfqgftsxOm9tJM.roa
File: 4f9qoKc2hoIfUbfqgftsxOm9tJM.roa (raw, json)
Hash identifier: gIaxqMIk5il2FhcAQlOISo8YQ02qLhcoPaUYfLQZNf0=
Subject key identifier: E1:FF:6A:A0:A7:36:86:82:1F:51:B7:EA:81:FB:6C:C4:E9:BD:B4:93
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189AAD66F1A813E5A4B7D2B2DF6ECF7957F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4f9qoKc2hoIfUbfqgftsxOm9tJM.roa
Signing time: Mon 31 Jul 2023 07:25:27 +0000
ROA not before: Mon 31 Jul 2023 07:25:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Jul 2023 09:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:d6:6f:1a:81:3e:5a:4b:7d:2b:2d:f6:ec:f7:95:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 31 07:25:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1ff6aa0a73686821f51b7ea81fb6cc4e9bdb493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:02:39:d2:9d:cf:d4:a9:f7:63:6c:95:09:
16:52:c4:99:5f:f9:3f:81:15:a7:15:c1:64:6f:71:
f1:f2:e4:12:aa:8c:c8:72:3d:97:af:7d:ac:19:57:
ab:78:9f:db:2b:ed:59:a9:c5:6c:eb:5f:28:08:39:
35:04:71:24:d7:1a:f5:91:7b:1e:a8:e6:db:b0:f9:
22:52:c0:8a:87:78:64:2f:1f:3f:cc:cc:24:45:9c:
c1:2b:d8:53:71:69:96:9e:0f:e4:78:1f:e3:b0:8e:
e1:7b:3b:b1:94:39:1e:a5:1b:b6:4c:b2:c7:0b:9f:
a0:81:da:a4:cb:9c:c9:b2:8f:bd:bd:f2:67:c4:37:
fd:a9:5b:13:79:6a:2b:f4:ce:68:c6:98:03:7e:01:
6c:ca:7e:e6:d7:59:3e:90:09:80:48:64:a9:9f:ee:
f7:b9:ba:5b:27:18:b1:c2:53:4e:34:46:d8:2f:6d:
d4:f5:7e:68:80:15:65:c0:67:57:9a:cf:09:c0:f3:
10:8d:5d:c8:46:73:2a:b5:91:71:03:96:b3:52:0c:
b1:bb:4f:67:31:60:7a:54:d7:8e:25:d0:39:8f:9f:
ac:b5:89:df:9d:8a:1b:1f:62:fb:00:28:ae:98:24:
66:46:b8:3b:34:48:95:0f:b5:7b:37:f1:b8:87:a6:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FF:6A:A0:A7:36:86:82:1F:51:B7:EA:81:FB:6C:C4:E9:BD:B4:93
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4f9qoKc2hoIfUbfqgftsxOm9tJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/23
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.39.0/24
84.32.43.0/24
84.32.45.0-84.32.46.255
84.32.50.0/23
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0/23
84.32.79.0/24
84.32.83.0/24
84.32.89.0/24
84.32.93.0-84.32.94.255
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.210.0/24
84.32.212.0/22
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.247.255
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0-88.216.36.255
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.60.0-88.216.65.255
88.216.92.0/23
88.216.101.0/24
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.222.0/24
88.216.228.0/22
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
1d:8f:be:65:2a:2d:bd:d2:59:4a:d7:86:1b:83:5d:49:b8:89:
da:2f:7d:1c:d4:01:73:15:2f:13:ef:52:a9:26:9b:ea:67:55:
f1:68:05:e1:f5:5e:4f:07:6f:b7:db:48:83:38:ff:ff:2e:9f:
1e:ea:9c:60:18:14:2d:cf:f3:14:7b:60:88:2a:b1:fd:a5:4d:
47:9c:47:49:6d:55:d3:1f:97:1c:3b:49:63:9c:b4:26:ea:c1:
03:31:a1:f3:76:31:d0:1a:28:fc:94:cf:f6:b2:e5:6d:af:34:
8b:28:6d:ef:fa:92:e8:a5:7b:cc:68:61:1a:0c:03:32:54:3d:
f4:ea:81:62:6d:df:71:d4:cb:8b:8d:a2:1c:1b:64:29:59:d9:
bb:e4:50:77:9c:14:81:21:c8:a7:c3:91:2f:9b:a5:99:9f:fa:
ff:bd:c9:00:4a:4c:b4:be:b4:8c:1e:de:93:2d:06:de:c4:45:
0b:28:5c:d0:ca:be:58:57:6a:67:e3:d1:fb:d4:e2:e8:57:c3:
4e:a9:13:75:b5:28:7b:7a:a3:33:81:9a:d6:b5:2a:f3:2f:07:
b6:86:8f:f0:1e:ce:80:80:ee:1f:6b:e6:a4:31:1c:d1:14:2e:
81:4d:83:32:19:8d:96:f9:9d:8a:c3:6f:2f:09:f2:0e:cf:18:
42:22:fa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org