Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5Zv-tRbOytzFe4BM0J7AraGjd6Q.roa
File: 5Zv-tRbOytzFe4BM0J7AraGjd6Q.roa (raw, json)
Hash identifier: B5BCx6yzoF7/OugvP4mtYw7CiHByOZVJ3A6jeB2ltIc=
Subject key identifier: E5:9B:FE:B5:16:CE:CA:DC:C5:7B:80:4C:D0:9E:C0:AD:A1:A3:77:A4
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01891BD99355C045FAA772C58EC64B61660C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5Zv-tRbOytzFe4BM0J7AraGjd6Q.roa
Signing time: Mon 03 Jul 2023 13:03:11 +0000
ROA not before: Mon 03 Jul 2023 13:03:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.21.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jul 2023 06:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1b:d9:93:55:c0:45:fa:a7:72:c5:8e:c6:4b:61:66:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 3 13:03:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e59bfeb516cecadcc57b804cd09ec0ada1a377a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:05:69:9d:00:83:b4:6d:94:8a:d4:38:ff:
7d:b1:44:8f:ba:d8:c9:bf:ec:66:a2:f8:68:f0:02:
d3:f8:7c:41:2f:61:4a:17:8f:9b:06:ef:a3:e5:97:
31:58:bb:69:87:0a:2f:79:e3:a1:4d:79:8d:d9:73:
33:34:e5:97:f5:95:ad:ae:85:c5:8a:9c:49:ca:23:
da:4f:6c:f9:f2:a6:5c:25:67:5e:c0:92:a1:da:53:
82:ba:b9:ad:61:e5:a0:2d:9f:26:23:fa:2e:8b:1c:
56:63:f4:a8:bd:fe:4b:65:11:f2:c6:52:df:b9:3a:
fd:e2:da:ae:20:e2:83:81:e8:93:14:b7:a3:36:e7:
58:4e:20:96:83:f9:a7:67:0b:4f:6b:a6:c2:8b:b0:
83:74:64:5c:a5:ce:7a:e9:70:7e:19:cb:3b:71:48:
ae:b1:5b:de:42:55:29:35:d0:98:5d:68:f9:b9:e5:
56:a6:7d:4f:6c:48:46:4f:79:f3:12:6f:c0:f6:a4:
0e:44:8d:48:51:1e:fe:5c:c9:07:74:02:05:be:20:
99:76:3d:98:9f:b8:fe:0c:a4:77:dc:9c:cd:75:ff:
50:50:fa:71:45:38:1a:1d:99:ce:10:be:c2:a8:78:
8d:a2:24:54:1a:c0:cc:96:73:21:44:52:37:4f:60:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9B:FE:B5:16:CE:CA:DC:C5:7B:80:4C:D0:9E:C0:AD:A1:A3:77:A4
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5Zv-tRbOytzFe4BM0J7AraGjd6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.14.0/24
84.32.20.0-84.32.27.255
84.32.31.0/24
84.32.46.0/24
84.32.50.0/23
84.32.58.0/24
84.32.79.0/24
84.32.83.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.158.0/23
84.32.178.0/23
84.32.213.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.240.255
84.32.242.0-84.32.247.255
84.32.250.0-84.32.253.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0/24
88.216.40.0/24
88.216.44.0/23
88.216.58.0/24
88.216.61.0-88.216.65.255
88.216.93.0/24
88.216.100.0/23
88.216.104.0/23
88.216.107.0/24
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0/23
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.222.0/24
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
75:b6:18:45:70:d1:5b:46:ee:91:e9:0e:27:01:8e:91:37:19:
e9:c7:cd:97:ba:20:c2:63:60:03:9f:97:b1:8e:cc:ba:ee:0d:
d4:b5:67:e4:c6:e5:ed:ae:e6:55:c0:ec:4a:6b:d2:df:86:93:
cf:32:3c:91:d6:1d:d0:b5:0f:0b:3e:a9:05:57:f8:cb:5c:72:
f0:10:e9:28:4b:95:cc:8c:d0:3c:ae:66:35:8a:ac:ac:ce:c4:
86:17:9f:f1:32:00:a1:89:dc:09:f2:65:17:30:fb:2e:66:e7:
8e:79:98:13:d7:fc:f5:da:4e:80:de:0c:0b:aa:0e:c8:df:cc:
6c:97:42:f3:77:75:62:53:be:06:cc:b9:88:81:da:55:66:42:
c1:af:44:dc:6c:d1:03:1c:d2:d0:59:91:02:bb:1e:70:63:73:
c2:5d:4a:19:93:73:7d:3b:65:e0:0b:6c:c1:d0:c9:c9:0d:75:
b0:24:fc:ce:bb:a1:36:b4:4f:a3:27:e3:47:79:13:45:3e:4a:
de:d9:58:2c:cd:1c:fe:32:7c:77:12:f2:1e:e4:c2:43:a3:89:
c2:2c:9d:34:d0:86:fb:c9:29:11:ed:58:5f:1d:62:f8:61:cf:
70:e3:82:d1:0e:54:0c:b0:f9:49:09:08:54:b6:93:25:9d:e8:
03:a5:1d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org