Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/84yXgHAdFx31KMFJGz3oDmmMesE.roa
File: 84yXgHAdFx31KMFJGz3oDmmMesE.roa (raw, json)
Hash identifier: jRsYQq9y0MhWYFMogEHWtE3pZEJkVTWoqimJzbu27vQ=
Subject key identifier: F3:8C:97:80:70:1D:17:1D:F5:28:C1:49:1B:3D:E8:0E:69:8C:7A:C1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018736662C84E18A58D787801289E88AF3A9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/84yXgHAdFx31KMFJGz3oDmmMesE.roa
Signing time: Fri 31 Mar 2023 06:41:18 +0000
ROA not before: Fri 31 Mar 2023 06:41:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.57.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.106.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
88.216.186.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:66:2c:84:e1:8a:58:d7:87:80:12:89:e8:8a:f3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 31 06:41:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f38c9780701d171df528c1491b3de80e698c7ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:eb:d1:89:39:2a:8f:af:df:32:d7:71:70:a5:
c4:72:de:79:0d:17:a4:81:56:17:a9:64:fd:64:e8:
d3:7b:e5:cf:e1:93:ac:c8:c2:7b:a5:2c:c1:53:83:
42:ac:93:ff:49:73:e0:d1:87:b4:ab:9a:3e:8e:e6:
bb:cb:76:9e:29:54:ff:59:fd:62:df:8c:3d:9d:95:
f8:a2:fb:48:45:32:1f:0b:4a:0c:19:88:59:60:02:
05:1b:ff:fa:e1:25:67:ed:66:69:ca:1c:95:38:6f:
a3:3d:7d:f4:b3:9a:a3:8d:14:24:02:4f:98:60:19:
07:05:f7:a0:68:0b:a1:d7:be:78:0c:fd:32:a9:b1:
62:31:23:a1:30:e9:8e:98:0b:ea:7b:2a:b8:6d:bf:
d4:29:99:99:a1:bc:8c:45:12:20:bf:18:e8:b5:0a:
b2:be:bb:a7:bd:71:d3:64:e7:16:34:5d:df:55:66:
fc:f4:fe:e1:e1:2d:d0:0c:2e:a9:d5:59:06:79:21:
60:ba:fc:95:f6:c0:d8:99:dc:10:0e:32:95:c1:79:
88:2c:06:20:4a:cb:bb:b9:a0:7e:eb:68:82:74:80:
fd:e2:ea:28:bc:32:94:17:15:b9:90:9b:36:41:91:
d4:54:e9:3d:b9:b7:e0:f6:91:c4:94:92:5b:a1:98:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8C:97:80:70:1D:17:1D:F5:28:C1:49:1B:3D:E8:0E:69:8C:7A:C1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/84yXgHAdFx31KMFJGz3oDmmMesE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.57.0/24
84.32.60.0/24
84.32.71.0/24
84.32.77.0/24
84.32.79.0/24
84.32.88.0/24
84.32.106.0/24
84.32.108.0/23
84.32.148.0/22
84.32.174.0/23
84.32.177.0/24
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.218.0/24
84.32.221.0/24
84.32.224.0/24
84.32.232.0/24
84.32.239.0-84.32.240.255
84.32.242.0-84.32.245.255
84.32.250.0/24
84.32.252.0/23
88.216.1.0/24
88.216.3.0/24
88.216.17.0/24
88.216.21.0/24
88.216.32.0/24
88.216.36.0/24
88.216.92.0/23
88.216.111.0/24
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.186.0/24
88.216.189.0/24
88.216.215.0/24
88.216.228.0-88.216.235.255
Signature Algorithm: sha256WithRSAEncryption
97:43:5e:5d:0b:2c:5e:68:19:d9:a9:ee:c6:8e:19:9f:41:b5:
27:f1:f3:95:93:97:2a:c2:2c:d4:85:44:d3:9c:3f:7b:97:86:
64:3b:92:30:ec:f6:35:da:29:c7:ca:63:2a:78:70:8f:77:e2:
17:15:2e:28:7f:5d:e4:c5:92:a5:ae:8d:75:8b:38:03:18:b0:
ef:64:c0:11:d1:6e:58:e9:09:19:46:13:a6:27:4f:ce:1b:15:
a0:d9:f8:9c:ef:2c:5a:ab:1b:22:8b:75:6a:1d:04:37:dc:ca:
ae:a7:9d:80:2a:6a:6a:5a:66:a6:0f:cf:33:0d:b3:23:08:06:
81:f5:84:9b:b5:3d:98:5a:a6:08:c5:82:9e:0a:b9:72:e5:37:
19:87:32:f4:6b:4e:a4:6d:5e:a6:76:03:ad:61:f9:b7:69:e3:
31:f9:4b:5d:67:51:14:65:ae:9d:71:ac:e7:14:79:5f:b0:9d:
33:f6:94:4b:b5:9e:fd:de:81:47:6a:c0:ed:0a:29:98:35:6f:
98:df:bc:85:b6:52:6c:d5:85:a1:cb:86:a9:49:04:59:d8:5b:
6d:83:f7:ab:fa:82:9f:4e:78:1e:b8:c4:b3:7c:d8:24:ab:49:
37:bf:5a:77:11:23:49:e9:c6:99:8b:ac:18:d5:81:10:fc:46:
09:67:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:45 2023 by rpki-client on console-fra.rpki-client.org