Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9_CzmkneTqA5s9XBlzuXMwrMaiY.roa
File: 9_CzmkneTqA5s9XBlzuXMwrMaiY.roa (raw, json)
Hash identifier: zONQYc+7GJ87kiJGuBrM9M/cd2YLHKVWfTTEQ9ofRkI=
Subject key identifier: F7:F0:B3:9A:49:DE:4E:A0:39:B3:D5:C1:97:3B:97:33:0A:CC:6A:26
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B778795353EF35BE37EA586D2BFDE09DD
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9_CzmkneTqA5s9XBlzuXMwrMaiY.roa
Signing time: Sat 28 Oct 2023 18:24:16 +0000
ROA not before: Sat 28 Oct 2023 18:24:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.233.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.237.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.253.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.11.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.172.0/24 maxlen: 24
84.32.174.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.94.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.97.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.18.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.33.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:77:87:95:35:3e:f3:5b:e3:7e:a5:86:d2:bf:de:09:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 28 18:24:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7f0b39a49de4ea039b3d5c1973b97330acc6a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:de:ba:66:4d:df:9a:73:10:5f:5b:52:7d:78:
b7:bd:6b:5b:27:fe:94:2f:a6:82:81:8f:95:e5:d4:
a1:73:e1:d0:c8:b2:f6:1d:ac:d9:75:39:4e:14:80:
d0:d7:55:2f:f2:d6:de:20:39:1b:4d:58:61:59:b2:
76:e0:56:6d:7b:9e:6c:51:3c:33:ca:d1:b3:f0:bd:
be:80:50:a4:a4:3e:75:7e:cb:f5:76:d3:20:7d:b8:
ff:36:e1:94:1a:f8:14:f2:66:7c:70:90:72:07:76:
d1:cc:44:dc:10:b2:6b:b2:3f:2a:f4:ea:dd:79:f6:
26:5e:d9:01:f7:be:b0:21:f2:5d:fc:ba:5b:d1:ed:
61:cd:29:7f:59:0d:7a:ff:b2:df:f1:05:fc:b7:f4:
3e:11:43:bf:28:4b:a9:79:46:5b:ed:e8:ea:00:da:
54:a2:05:03:a4:4e:9c:26:26:fe:55:3b:29:0e:ac:
24:c3:d3:42:4a:02:c6:6e:e9:b2:c3:46:7a:a2:a6:
82:75:a4:ac:70:0c:ee:f9:d2:09:3d:24:2d:3d:ea:
80:11:26:eb:23:9c:03:d3:6b:f5:c9:a0:63:a3:df:
11:69:28:8b:7c:06:a4:d3:c6:00:00:b7:d5:07:55:
9e:89:56:f8:ab:4e:c7:17:60:43:0e:4a:61:7e:17:
7b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F0:B3:9A:49:DE:4E:A0:39:B3:D5:C1:97:3B:97:33:0A:CC:6A:26
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9_CzmkneTqA5s9XBlzuXMwrMaiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.11.0/24
84.32.14.0/24
84.32.27.0-84.32.31.255
84.32.42.0/23
84.32.62.0/24
84.32.65.0/24
84.32.68.0/24
84.32.76.0/23
84.32.79.0/24
84.32.83.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0-84.32.94.255
84.32.105.0/24
84.32.150.0/24
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.172.0/24
84.32.174.0/23
84.32.211.0-84.32.213.255
84.32.219.0/24
84.32.221.0-84.32.222.255
84.32.224.0/24
84.32.226.0/24
84.32.228.0/23
84.32.232.0/22
84.32.237.0-84.32.243.255
84.32.245.0-84.32.247.255
84.32.250.0-84.32.255.255
88.216.0.0/23
88.216.3.0/24
88.216.16.0/24
88.216.18.0/24
88.216.22.0/23
88.216.32.0/23
88.216.35.0/24
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.47.0/24
88.216.58.0/24
88.216.64.0/23
88.216.94.0/23
88.216.97.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:9c:1d:52:d2:6f:5d:fa:fa:60:a4:cd:da:25:98:c6:da:c1:
26:de:da:cf:8c:f1:ff:42:20:11:f6:c6:cf:0a:0b:0c:6e:86:
a4:92:c3:dc:10:b1:dc:ce:9e:7d:f1:91:1a:b8:bf:d5:12:54:
70:4e:6e:57:63:c8:28:e7:63:79:66:d9:3a:5c:e1:b1:5e:78:
a6:11:5b:a1:cd:73:67:5e:fe:4d:83:32:fd:83:80:7a:09:5f:
79:18:28:a1:bf:f1:23:1d:74:dd:df:6b:1f:fa:db:62:b5:b4:
eb:a6:28:f3:53:ca:e9:c2:8d:cf:70:07:0e:12:b6:f6:06:8e:
26:c4:da:69:2b:d2:58:42:2d:82:98:ee:c9:78:cd:7d:6c:a9:
48:f6:ef:01:2a:23:df:f6:00:24:e2:1d:b5:80:95:33:83:62:
02:fc:fe:4a:6c:dc:1a:a7:49:c0:ce:48:b4:d7:2b:52:50:42:
03:f0:64:08:8c:7a:66:66:19:2e:2c:9e:d3:ea:58:e6:d0:97:
cb:dd:91:6d:b2:d3:3b:23:ac:1d:d1:c4:19:05:05:e3:7a:d4:
27:c3:11:b9:b4:21:1d:0f:bc:ed:81:f7:84:86:d0:61:d4:61:
59:52:b8:bf:7d:b4:09:ed:04:2f:d7:9b:5b:b4:13:08:d3:d6:
d6:66:14:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 07:55:46 2023 by rpki-client on console-ams.rpki-client.org