Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/A5qmmjDTQ7feR3bI8eygaOjul-Y.roa
File: A5qmmjDTQ7feR3bI8eygaOjul-Y.roa (raw, json)
Hash identifier: Hxx8q4jeoPzWSLghYSZ2uhE8GzayDCLwLTICXGpYWBw=
Subject key identifier: 03:9A:A6:9A:30:D3:43:B7:DE:47:76:C8:F1:EC:A0:68:E8:EE:97:E6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018A61615A20375727E429D502B984AF7D11
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/A5qmmjDTQ7feR3bI8eygaOjul-Y.roa
Signing time: Mon 04 Sep 2023 18:08:04 +0000
ROA not before: Mon 04 Sep 2023 18:08:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.66.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:61:61:5a:20:37:57:27:e4:29:d5:02:b9:84:af:7d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 4 18:08:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=039aa69a30d343b7de4776c8f1eca068e8ee97e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5c:b5:8b:b8:1c:4c:c7:00:20:71:d4:1e:77:
86:45:f7:64:46:24:c9:62:10:8e:95:bf:b4:20:d6:
f4:aa:bb:d6:4b:d3:e1:ba:a5:b4:52:55:91:e1:22:
cf:4e:5f:11:b2:be:42:0a:80:fa:0b:55:33:67:20:
5e:d6:23:49:57:32:97:3e:f2:35:15:37:85:b5:64:
6a:42:23:05:f8:8b:bc:9d:c4:e9:c2:53:e5:3f:f6:
32:fd:88:63:20:8b:8c:36:1b:7a:e3:3e:b4:53:55:
29:0a:54:f0:55:c2:02:d6:38:c8:59:7d:51:b9:b3:
26:e0:b6:7b:19:89:0b:36:0c:ae:c7:e7:6d:4a:88:
65:5c:a5:cc:c0:0b:f0:44:32:78:79:c6:9e:12:7a:
6f:24:44:ff:cc:54:69:18:ba:40:89:7e:f8:60:88:
7b:02:6f:dd:dc:dd:cf:48:b1:5a:5c:80:39:3e:8f:
63:94:1a:cf:34:5f:85:1f:26:8a:8f:eb:ac:ae:3f:
2d:68:45:a2:0b:de:1d:a7:55:f0:28:9d:03:92:85:
a9:9c:b1:fe:a4:ea:b5:60:ed:3c:75:5d:53:20:c0:
47:57:c3:99:ee:e4:3f:c8:01:0a:99:28:fb:96:8d:
a1:0b:20:fc:5d:4a:cf:f5:25:f2:65:80:95:a9:6b:
8d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9A:A6:9A:30:D3:43:B7:DE:47:76:C8:F1:EC:A0:68:E8:EE:97:E6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/A5qmmjDTQ7feR3bI8eygaOjul-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.9.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.43.0/24
84.32.46.0/23
84.32.49.0-84.32.51.255
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0-84.32.68.255
84.32.76.0/23
84.32.83.0/24
84.32.88.0-84.32.90.255
84.32.92.0-84.32.94.255
84.32.105.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0-84.32.176.255
84.32.178.0/23
84.32.210.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.232.0/24
84.32.234.0/23
84.32.239.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.35.0-88.216.36.255
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.60.0-88.216.66.255
88.216.92.0/23
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.222.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:da:6c:6d:31:e3:be:31:c3:11:17:40:5e:6b:81:c5:d1:91:
83:ca:f5:9c:b6:fb:28:2a:c4:ff:d9:85:f0:0b:a6:8e:cd:98:
91:47:13:93:f5:b4:49:35:78:1d:99:6b:16:c6:8f:4f:7d:90:
65:30:91:0d:83:80:c9:09:0a:00:fc:6a:a5:27:0e:8d:0b:43:
52:63:b6:13:60:5f:16:b5:cd:47:f0:a7:72:6e:97:62:30:67:
05:26:f9:25:28:21:a0:30:c3:6e:92:72:bc:27:d2:3c:3b:6c:
69:3a:91:82:6c:35:69:3b:b1:36:3a:5a:96:5b:c3:15:e3:06:
8d:72:27:6f:33:94:34:84:4b:ed:10:31:bd:81:a2:45:ff:66:
8c:31:56:22:65:6c:aa:2e:3b:9f:2d:98:68:98:fb:27:c4:bb:
68:f8:4e:df:e9:21:e9:12:6b:00:e5:c0:ea:39:cc:ab:d2:6a:
3f:aa:b1:26:b6:68:e0:84:c1:32:63:29:41:95:29:3d:aa:ee:
6c:b8:5a:f5:33:06:41:39:56:43:df:27:9c:d9:48:12:b1:dd:
32:81:77:96:f2:36:df:08:96:8e:d4:5a:cd:0e:ee:1c:ac:8d:
b2:ce:d5:f9:34:ad:a5:f7:35:c4:d0:fc:be:62:ce:f9:f5:99:
d3:ce:77:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 13:41:50 2023 by rpki-client on console-ams.rpki-client.org