Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/C1KnyhiVuptNA3M8vAmnzSRtblA.roa
File: C1KnyhiVuptNA3M8vAmnzSRtblA.roa (raw, json)
Hash identifier: tPPxxLPS9/zisSU7lSzgO9lnrLa/2Z4mm8Z5KOxzPRc=
Subject key identifier: 0B:52:A7:CA:18:95:BA:9B:4D:03:73:3C:BC:09:A7:CD:24:6D:6E:50
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01892F0F10E93A62242269EE7B7D485BF899
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/C1KnyhiVuptNA3M8vAmnzSRtblA.roa
Signing time: Fri 07 Jul 2023 06:34:23 +0000
ROA not before: Fri 07 Jul 2023 06:34:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.21.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:0f:10:e9:3a:62:24:22:69:ee:7b:7d:48:5b:f8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 7 06:34:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b52a7ca1895ba9b4d03733cbc09a7cd246d6e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:ea:40:67:f9:1c:e3:ee:da:71:ac:5e:da:
90:d6:be:7a:2a:8d:d6:8c:61:06:3b:f5:e3:a8:93:
38:ef:0b:0b:89:3c:ef:b6:b5:0e:0e:c4:39:f2:46:
1a:6f:7f:85:1f:7b:d9:b6:9f:dd:fe:eb:e4:eb:be:
f3:af:af:3e:f2:62:6d:47:43:5f:8e:f7:a5:3c:07:
51:56:53:c5:a5:75:7a:82:47:0e:f7:2c:e1:14:62:
79:32:25:46:ca:e5:a8:cb:d3:ff:43:c0:ef:6d:b9:
30:f6:d0:b2:51:76:8c:94:7e:88:2f:e6:f6:ff:31:
b4:11:c7:34:4f:c6:49:af:49:7d:de:74:91:0e:85:
da:74:c2:ea:f1:99:da:47:91:a4:09:92:37:a1:10:
7d:5c:65:31:6a:16:38:d5:80:dd:fe:8c:a8:be:38:
85:8d:83:ba:95:e2:f2:0d:f3:a5:9f:d1:1b:bb:87:
cd:7f:5e:46:36:8d:fa:ce:1a:aa:19:e5:9e:0d:df:
29:d7:23:51:fd:b6:84:21:54:39:c4:98:1f:be:9f:
e9:76:0e:74:03:37:a1:db:90:ca:47:e2:32:79:41:
00:31:4e:0a:d1:04:65:c6:40:78:ef:78:a9:cb:2c:
75:4c:b0:34:df:c3:1f:b8:78:78:1b:f4:8b:ed:17:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:52:A7:CA:18:95:BA:9B:4D:03:73:3C:BC:09:A7:CD:24:6D:6E:50
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/C1KnyhiVuptNA3M8vAmnzSRtblA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.14.0/24
84.32.20.0-84.32.27.255
84.32.29.0/24
84.32.31.0/24
84.32.45.0-84.32.46.255
84.32.50.0/23
84.32.58.0/24
84.32.61.0/24
84.32.79.0/24
84.32.83.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.158.0/23
84.32.174.0/23
84.32.178.0/23
84.32.213.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.247.255
84.32.250.0-84.32.253.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0/24
88.216.40.0/24
88.216.44.0/23
88.216.58.0/24
88.216.61.0-88.216.65.255
88.216.93.0/24
88.216.100.0/23
88.216.104.0/23
88.216.107.0/24
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0/23
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.222.0/24
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
82:0a:fb:95:43:e2:f5:e2:80:71:f3:e9:ce:9c:b1:07:50:45:
b5:2e:5d:b1:62:40:e7:5a:72:d1:30:10:ae:16:f8:8f:17:06:
25:ad:61:59:27:f0:5d:10:a8:fd:38:0d:4e:9b:55:0d:f7:c8:
37:0d:0b:27:24:b2:ea:f3:af:3e:7f:11:b9:10:ed:5e:20:47:
8f:71:79:f4:a7:8c:f3:10:dd:4c:60:44:d1:c7:c7:25:38:32:
20:fb:d4:95:c5:dd:20:39:ee:09:ca:21:e1:d8:af:0a:99:26:
ca:88:f4:13:aa:47:24:2d:b7:6d:99:4d:f3:d2:93:47:9c:21:
85:0f:29:ff:8a:9a:d1:c1:ba:4c:69:7d:ac:cb:e5:10:ef:ed:
b4:bc:c2:6b:53:5a:aa:ae:c1:e6:23:75:d6:83:bd:9a:1d:63:
b4:03:96:9b:cf:3c:11:04:e3:03:3d:39:2f:44:e4:95:0b:41:
1f:82:fa:7f:ce:1d:87:42:83:0d:4e:ea:63:2c:6e:57:10:a4:
ff:7a:00:b7:bb:26:c8:4a:7f:2b:a4:2c:15:68:37:52:f0:44:
c7:2d:c4:73:56:21:49:25:74:02:28:0b:fb:65:b3:5c:b9:b3:
24:18:18:e2:e8:59:b6:e9:69:66:15:96:e8:06:0c:fd:c1:81:
22:f4:08:6e
-----BEGIN CERTIFICATE-----
MIIGhTCCBW2gAwIBAgISAYkvDxDpOmIkImnue31IW/iZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNzA3MDYzNDIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjUyYTdjYTE4OTViYTliNGQwMzczM2NiYzA5YTdjZDI0NmQ2ZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0LqQGf5HOPu2nGsXtqQ1r56Ko3W
jGEGO/XjqJM47wsLiTzvtrUODsQ58kYab3+FH3vZtp/d/uvk677zr68+8mJtR0Nf
jvelPAdRVlPFpXV6gkcO9yzhFGJ5MiVGyuWoy9P/Q8Dvbbkw9tCyUXaMlH6IL+b2
/zG0Ecc0T8ZJr0l93nSRDoXadMLq8ZnaR5GkCZI3oRB9XGUxahY41YDd/oyovjiF
jYO6leLyDfOln9Ebu4fNf15GNo36zhqqGeWeDd8p1yNR/baEIVQ5xJgfvp/pdg50
Azeh25DKR+IyeUEAMU4K0QRlxkB473ipyyx1TLA038MfuHh4G/SL7Rcd4QIDAQAB
o4IDkTCCA40wHQYDVR0OBBYEFAtSp8oYlbqbTQNzPLwJp80kbW5QMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvQzFLbnloaVZ1cHROQTNNOHZBbW56U1J0YmxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBpQYIKwYBBQUHAQcBAf8EggGUMIIBkDCCAYwEAgABMIIB
hAMEAFQgCAMEAFQgDjAMAwQCVCAUAwQCVCAYAwQAVCAdAwQAVCAfMAwDBABUIC0D
BABUIC4DBAFUIDIDBABUIDoDBABUID0DBABUIE8DBABUIFMwDAMEAlQgbAMEAFQg
bgMEAlQglAMEAFQgmQMEAVQgngMEAVQgrgMEAVQgsjAMAwQAVCDVAwQDVCDQAwQA
VCDbAwQAVCDdMAwDBAVUIOADBABUIOIwDAMEAFQg5wMEAFQg6AMEAVQg6jAMAwQA
VCDvAwQDVCDwMAwDBAFUIPoDBAFUIPwDBAJY2AADBABY2BADBAFY2BYDBABY2CAD
BABY2CMDBABY2CgDBAFY2CwDBABY2DowDAMEAFjYPQMEAVjYQAMEAFjYXQMEAVjY
ZAMEAVjYaAMEAFjYazAMAwQAWNhtAwQEWNhgAwQAWNiAAwQBWNiCAwQBWNiGAwQA
WNi0AwQAWNi3AwQBWNi8AwQAWNjFAwQCWNjUAwQAWNjcAwQAWNjeMAwDBAJY2OwD
BANY2PAwDQYJKoZIhvcNAQELBQADggEBAIIK+5VD4vXigHHz6c6csQdQRbUuXbFi
QOdactEwEK4W+I8XBiWtYVkn8F0QqP04DU6bVQ33yDcNCycksurzrz5/EbkQ7V4g
R49xefSnjPMQ3UxgRNHHxyU4MiD71JXF3SA57gnKIeHYrwqZJsqI9BOqRyQtt22Z
TfPSk0ecIYUPKf+KmtHBukxpfazL5RDv7bS8wmtTWqquweYjddaDvZodY7QDlpvP
PBEE4wM9OS9E5JULQR+C+n/OHYdCgw1O6mMsblcQpP96ALe7JshKfyukLBVoN1Lw
RMctxHNWIUkldAIoC/tls1y5syQYGOLoWbbpaWYVlugGDP3BgSL0CG4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:45 2023 by rpki-client on console-fra.rpki-client.org