Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/A27hvxFu5NjICZairNfAzBU7_j0.roa
File: A27hvxFu5NjICZairNfAzBU7_j0.roa (raw, json)
Hash identifier: m0A+TQub4PXTtH5iGT9zt6pzFdAJd1wv1lN6OCiIlSQ=
Subject key identifier: 03:6E:E1:BF:11:6E:E4:D8:C8:09:96:A2:AC:D7:C0:CC:15:3B:FE:3D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018737DFEC3D32881CCFADCB930F9641676A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/A27hvxFu5NjICZairNfAzBU7_j0.roa
Signing time: Fri 31 Mar 2023 13:33:54 +0000
ROA not before: Fri 31 Mar 2023 13:33:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.186.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
84.32.57.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
84.32.106.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Apr 2023 16:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:df:ec:3d:32:88:1c:cf:ad:cb:93:0f:96:41:67:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 31 13:33:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=036ee1bf116ee4d8c80996a2acd7c0cc153bfe3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:42:42:ec:45:f9:b9:a3:f0:b1:97:a3:55:97:
23:7b:02:08:9b:20:6c:ad:42:2e:69:c9:8c:5b:96:
e0:9a:dc:f2:a9:93:fc:e4:bd:22:6f:e6:04:b7:a3:
0c:a7:e0:f3:29:bc:c6:4d:35:41:91:a1:cc:ca:8a:
f2:95:f3:7d:62:5f:37:eb:5e:c3:c9:e2:8a:79:49:
3c:bd:f1:f4:04:b3:3f:24:ec:6c:ef:e7:af:b9:eb:
18:17:d1:27:c5:44:67:99:14:4a:c5:10:20:25:74:
16:5f:55:df:45:b9:1f:4c:ec:58:45:81:31:fb:8d:
d9:c5:be:a5:e2:d6:5b:0d:b2:88:ad:30:89:9e:72:
fa:5f:83:17:d8:ca:38:20:2c:26:32:3b:2c:45:12:
83:6b:a2:50:62:cc:1d:18:00:5f:d4:f8:c0:13:23:
db:86:86:d3:ca:a3:80:34:c2:b7:6b:c1:ac:b0:67:
ee:c9:d7:29:60:e9:0d:b7:c2:80:53:a6:f6:19:ee:
4c:08:a7:d5:4a:7b:04:fd:84:eb:7b:41:fa:c3:1d:
92:4c:06:11:75:aa:3d:1c:60:db:8e:6d:25:5e:fa:
cb:1c:c0:dc:cc:0c:37:6d:51:36:f5:e2:63:eb:ad:
f5:7f:97:62:76:e4:da:51:88:5a:67:d9:3e:ef:b8:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6E:E1:BF:11:6E:E4:D8:C8:09:96:A2:AC:D7:C0:CC:15:3B:FE:3D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/A27hvxFu5NjICZairNfAzBU7_j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.57.0/24
84.32.60.0/24
84.32.71.0/24
84.32.77.0/24
84.32.79.0/24
84.32.88.0/24
84.32.106.0/24
84.32.108.0/23
84.32.148.0/22
84.32.174.0/23
84.32.177.0/24
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.218.0/24
84.32.221.0/24
84.32.224.0/24
84.32.232.0/24
84.32.239.0-84.32.240.255
84.32.242.0-84.32.245.255
84.32.250.0/24
84.32.252.0/23
88.216.1.0/24
88.216.3.0/24
88.216.17.0/24
88.216.21.0/24
88.216.32.0/24
88.216.36.0/24
88.216.92.0/23
88.216.111.0/24
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.186.0/24
88.216.189.0/24
88.216.215.0/24
88.216.232.0/22
Signature Algorithm: sha256WithRSAEncryption
47:0a:2a:9f:54:f2:c7:9b:6b:2d:78:f0:c4:8d:65:df:99:eb:
05:ee:92:43:a9:9b:36:8f:cf:fc:03:f3:f0:64:9d:bb:e5:ce:
24:01:94:91:30:07:17:5f:5f:06:ab:3b:83:60:03:82:b0:fb:
8a:a0:60:3f:8c:8d:8e:47:22:07:01:08:cd:de:00:5b:17:f6:
d4:cf:68:d3:01:09:29:e4:2f:d2:39:9b:ca:42:88:9d:55:d9:
51:f3:ae:4a:b7:06:30:ed:e0:a1:88:a9:cd:31:4b:3c:d0:76:
79:43:46:12:06:49:06:a0:13:d2:b5:51:60:9d:18:38:3c:0d:
fd:e2:1f:36:4b:0c:63:3f:cf:c3:f3:e6:a3:24:2e:75:c0:7b:
ae:5e:37:03:f2:2c:b1:ae:b4:b9:36:ae:cf:f1:71:fb:eb:9b:
33:3a:06:8b:23:60:22:8c:db:44:08:ef:de:83:c0:5e:d7:28:
ab:7d:ea:c8:54:87:2d:32:35:77:0a:e1:f6:d4:56:37:89:14:
96:e3:2a:4b:6b:f4:06:0f:27:48:1d:d2:11:fd:9e:c8:d2:ac:
0f:ad:68:ff:e4:d6:4a:36:90:65:f5:65:bc:eb:bb:b2:4f:f7:
ce:b9:80:74:53:14:cb:3b:6c:71:a1:35:49:fd:9e:81:b0:00:
c4:30:cd:1f
-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgISAYc33+w9Mogcz63Lkw+WQWdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMzMxMTMzMzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzZlZTFiZjExNmVlNGQ4YzgwOTk2YTJhY2Q3YzBjYzE1M2JmZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUJC7EX5uaPwsZejVZcjewIImyBs
rUIuacmMW5bgmtzyqZP85L0ib+YEt6MMp+DzKbzGTTVBkaHMyorylfN9Yl83617D
yeKKeUk8vfH0BLM/JOxs7+evuesYF9EnxURnmRRKxRAgJXQWX1XfRbkfTOxYRYEx
+43Zxb6l4tZbDbKIrTCJnnL6X4MX2Mo4ICwmMjssRRKDa6JQYswdGABf1PjAEyPb
hobTyqOANMK3a8GssGfuydcpYOkNt8KAU6b2Ge5MCKfVSnsE/YTre0H6wx2STAYR
dao9HGDbjm0lXvrLHMDczAw3bVE29eJj6631f5diduTaUYhaZ9k+77i/NQIDAQAB
o4IDFTCCAxEwHQYDVR0OBBYEFANu4b8RbuTYyAmWoqzXwMwVO/49MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvQTI3aHZ4RnU1TmpJQ1phaXJOZkF6QlU3X2owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBKQYIKwYBBQUHAQcBAf8EggEYMIIBFDCCARAEAgABMIIB
CAMEAFQgCAMEAlQgGAMEAFQgHgMEAFQgLgMEAFQgOQMEAFQgPAMEAFQgRwMEAFQg
TQMEAFQgTwMEAFQgWAMEAFQgagMEAVQgbAMEAlQglAMEAVQgrgMEAFQgsQMEAFQg
swMEAFQg1AMEAVQg1gMEAFQg2gMEAFQg3QMEAFQg4AMEAFQg6DAMAwQAVCDvAwQA
VCDwMAwDBAFUIPIDBAFUIPQDBABUIPoDBAFUIPwDBABY2AEDBABY2AMDBABY2BED
BABY2BUDBABY2CADBABY2CQDBAFY2FwDBABY2G8DBABY2IAwDAMEAVjYggMEAFjY
hAMEAFjYugMEAFjYvQMEAFjY1wMEAljY6DANBgkqhkiG9w0BAQsFAAOCAQEARwoq
n1Tyx5trLXjwxI1l35nrBe6SQ6mbNo/P/APz8GSdu+XOJAGUkTAHF19fBqs7g2AD
grD7iqBgP4yNjkciBwEIzd4AWxf21M9o0wEJKeQv0jmbykKInVXZUfOuSrcGMO3g
oYipzTFLPNB2eUNGEgZJBqAT0rVRYJ0YODwN/eIfNksMYz/Pw/PmoyQudcB7rl43
A/Issa60uTauz/Fx++ubMzoGiyNgIozbRAjv3oPAXtcoq33qyFSHLTI1dwrh9tRW
N4kUluMqS2v0Bg8nSB3SEf2eyNKsD61o/+TWSjaQZfVlvOu7sk/3zrmAdFMUyzts
caE1Sf2egbAAxDDNHw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org