Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/HYWZuhHSyWgIlgzTQ4cC9sf47Zs.roa
File: HYWZuhHSyWgIlgzTQ4cC9sf47Zs.roa (raw, json)
Hash identifier: BT96xOG9+EA5Orq1RlwnoUDi/E+e4tsvB1Lk+ZeDJDY=
Subject key identifier: 1D:85:99:BA:11:D2:C9:68:08:96:0C:D3:43:87:02:F6:C7:F8:ED:9B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01896E5BF58E2EA83BB406B2EBEF2BD2B173
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/HYWZuhHSyWgIlgzTQ4cC9sf47Zs.roa
Signing time: Wed 19 Jul 2023 13:34:27 +0000
ROA not before: Wed 19 Jul 2023 13:34:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.21.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jul 2023 05:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:5b:f5:8e:2e:a8:3b:b4:06:b2:eb:ef:2b:d2:b1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 19 13:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d8599ba11d2c96808960cd3438702f6c7f8ed9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:fa:e7:87:64:87:a3:65:97:ae:ce:46:37:
c2:7a:45:6e:f0:10:f2:b7:c8:3e:1c:e9:35:6b:42:
1a:4b:6d:7d:d5:33:cf:f0:6c:04:82:f2:af:e5:cf:
ce:4f:18:5c:44:99:0e:d5:6d:c9:5b:5e:d0:0b:f2:
31:e3:51:90:47:52:84:3f:2b:24:62:f0:b1:7f:e9:
bd:d8:78:3d:2f:3d:76:69:83:95:95:ce:d7:30:9d:
5f:d2:00:a2:79:ea:40:ae:97:5c:67:98:df:dd:be:
8f:d5:3b:7a:7d:9c:fa:7d:f5:7d:94:89:bc:d8:fe:
4e:b3:ad:46:53:99:c1:52:67:8a:1b:b5:d4:b6:03:
c0:6b:05:55:a2:96:52:38:02:38:0b:7e:4c:75:f7:
61:c1:76:84:92:c4:e7:a3:75:31:12:5a:e8:19:fe:
00:e7:5f:9c:fa:a4:32:92:85:75:77:16:9c:b7:54:
f2:50:6d:4a:53:4e:41:31:32:1e:39:d4:d5:89:aa:
ff:44:56:2f:1f:7b:1d:b9:84:d7:3b:79:42:b9:01:
f8:e9:7a:41:90:15:cc:32:70:c8:0d:de:37:28:41:
06:37:aa:cb:18:0d:3b:f7:9c:61:74:ff:ff:c0:96:
3e:d9:94:18:80:16:79:bb:02:f7:d9:12:4a:51:d8:
d9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:85:99:BA:11:D2:C9:68:08:96:0C:D3:43:87:02:F6:C7:F8:ED:9B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/HYWZuhHSyWgIlgzTQ4cC9sf47Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/23
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.45.0-84.32.46.255
84.32.50.0/23
84.32.58.0/24
84.32.61.0/24
84.32.79.0/24
84.32.83.0/24
84.32.89.0/24
84.32.94.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.158.0/23
84.32.174.0/23
84.32.178.0/23
84.32.210.0/23
84.32.213.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.247.255
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0-88.216.36.255
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.61.0-88.216.65.255
88.216.92.0/23
88.216.101.0/24
88.216.104.0/23
88.216.107.0/24
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.222.0/24
88.216.228.0/22
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
8a:be:76:f3:c6:2a:df:c3:9c:9a:9a:88:86:5a:d5:a4:9c:9d:
83:90:74:42:72:9e:ad:d0:02:00:7a:55:e8:f6:61:3b:5d:12:
65:40:4b:30:3a:2d:e5:c3:12:49:63:26:d0:ef:5b:2d:98:2c:
fa:5b:e2:b6:5a:ca:72:bc:41:06:63:b6:b7:40:88:ca:96:5c:
92:2b:d8:f7:22:d5:d7:d0:33:3f:fd:33:80:68:f0:9f:cd:f7:
d5:e3:75:fa:0c:cb:61:03:66:85:6c:25:50:d0:e5:3f:10:dd:
f2:44:2c:35:3b:1d:31:b0:3d:04:47:9d:e8:8a:14:46:b5:7c:
3a:5e:b8:a7:cd:1f:b4:5b:b7:0e:b5:e8:e3:4b:57:96:0e:86:
2f:a3:52:6e:32:8e:55:2c:f9:4c:8b:db:e3:da:29:ac:e3:5b:
1b:d1:37:f6:2f:d7:02:b7:92:6d:90:2c:13:6a:a7:f6:d9:eb:
77:4d:36:22:b9:ba:e7:27:30:61:63:3f:e2:d8:31:96:de:2d:
d5:16:75:08:2f:e6:49:06:a0:82:88:90:3c:91:f7:5d:a6:97:
bf:8d:27:b4:20:e5:1d:a2:33:f6:4a:77:31:2c:31:fe:d0:d0:
83:64:38:a7:94:79:66:d5:d2:44:e9:dd:32:e6:53:72:fc:55:
4f:27:14:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org