Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4jm-xqSgrvCyy_5KMGeZ-EpvHGI.roa
File: 4jm-xqSgrvCyy_5KMGeZ-EpvHGI.roa (raw, json)
Hash identifier: qFXKukYv60DmIaRQrH7SXYfbXfprwl2ipew3gLeOtIk=
Subject key identifier: E2:39:BE:C6:A4:A0:AE:F0:B2:CB:FE:4A:30:67:99:F8:4A:6F:1C:62
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189AB62844990C14EE01E43478A944378D0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4jm-xqSgrvCyy_5KMGeZ-EpvHGI.roa
Signing time: Mon 31 Jul 2023 09:58:27 +0000
ROA not before: Mon 31 Jul 2023 09:58:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:62:84:49:90:c1:4e:e0:1e:43:47:8a:94:43:78:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 31 09:58:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e239bec6a4a0aef0b2cbfe4a306799f84a6f1c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:c8:74:3a:e6:9d:20:30:3a:e8:ff:c2:e9:
c2:7b:34:a5:92:36:71:1e:e9:c0:88:cf:2a:9d:b4:
54:0d:e6:74:9a:11:2a:0f:7d:9f:55:6f:e7:96:14:
a6:86:43:ab:81:75:75:f1:ea:ea:c3:8f:eb:f9:b7:
31:65:ce:03:e2:d6:36:fe:06:91:7b:b9:89:0c:f7:
db:12:87:72:d3:9f:18:a7:ee:13:99:0f:21:55:ae:
8b:aa:f3:78:57:2f:0f:61:9f:de:7c:08:40:b4:ec:
01:99:76:89:2a:a2:5d:29:7b:e9:b3:d3:57:ee:39:
3f:f0:74:1f:d5:db:54:12:c9:44:73:1e:d7:76:d8:
20:c4:35:04:38:aa:c7:3e:01:53:f3:3f:2a:88:ae:
c0:a5:14:6a:5f:8d:9d:8d:78:0e:ed:5d:5c:e6:1f:
b4:fa:be:a9:77:4a:56:08:a6:99:51:37:26:a6:06:
78:cc:6f:b3:a5:9c:47:d6:42:24:90:88:1f:5f:87:
dc:96:5a:86:1e:0f:49:df:ba:83:64:dc:c2:95:48:
b4:dd:3b:87:e5:e9:51:ac:e0:c6:9d:a1:a1:19:a6:
1c:35:55:ec:f3:12:0f:2d:33:f5:5b:7e:ec:2d:d5:
be:81:e8:ed:b1:85:83:fe:17:6d:f0:6e:ec:75:93:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:39:BE:C6:A4:A0:AE:F0:B2:CB:FE:4A:30:67:99:F8:4A:6F:1C:62
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4jm-xqSgrvCyy_5KMGeZ-EpvHGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/23
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.39.0/24
84.32.43.0/24
84.32.45.0-84.32.46.255
84.32.50.0/23
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0/23
84.32.79.0/24
84.32.83.0/24
84.32.89.0/24
84.32.93.0-84.32.94.255
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.210.0/24
84.32.212.0/22
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.247.255
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0-88.216.36.255
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.60.0-88.216.65.255
88.216.92.0/23
88.216.101.0/24
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.222.0/24
88.216.228.0/22
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
89:f2:02:31:d4:9b:0a:c5:b4:25:6a:84:73:40:2b:f1:cb:f4:
8b:b7:78:f6:e7:db:3f:f0:48:bd:fe:a4:36:7a:76:79:35:4f:
24:76:39:e5:ce:50:fc:85:b2:13:cf:d7:97:9e:d2:e8:e2:83:
e1:51:bc:86:31:d6:29:8c:65:89:ed:f6:98:54:3b:3d:df:e5:
7b:e8:56:86:57:33:a5:3c:b0:9b:77:58:c4:8a:b2:b1:45:35:
10:bc:c8:0e:a0:1d:00:a0:f8:fd:77:cf:27:58:dc:cd:1d:eb:
bf:12:cc:8f:d3:4f:b6:8a:ed:b7:e8:57:51:1d:9d:dd:f9:fb:
65:bd:e3:bb:75:46:c4:94:be:f3:55:4b:ba:fa:38:44:84:b2:
0e:46:ea:06:2b:9c:55:41:cf:64:2e:3c:e0:60:f1:9f:a6:6d:
c1:4f:23:a9:92:aa:f6:49:16:1a:7c:e4:e4:3c:bf:53:8b:f1:
e0:0c:c3:b1:1e:90:21:d2:28:85:26:96:d3:02:a3:be:e6:5c:
2e:31:eb:50:bf:44:b0:c3:ad:27:17:99:89:ec:e7:be:65:6a:
fc:52:b0:ac:62:2d:20:78:dc:81:31:00:8c:75:ef:3c:ed:de:
41:01:63:40:67:9c:d0:75:e6:19:85:75:32:7d:7c:68:89:1a:
8f:c9:bd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 06:13:14 2023 by rpki-client on console-fra.rpki-client.org