Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IVVi42lcfEsVvz5COpZo87q51AU.roa
File: IVVi42lcfEsVvz5COpZo87q51AU.roa (raw, json)
Hash identifier: xWSj9fuEXGhSO5+b+zQzHd/J34Wae/1gu7xJ3FcJeJU=
Subject key identifier: 21:55:62:E3:69:5C:7C:4B:15:BF:3E:42:3A:96:68:F3:BA:B9:D4:05
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189DF1981E092AB9553ABE1AE8BA91E7E93
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IVVi42lcfEsVvz5COpZo87q51AU.roa
Signing time: Thu 10 Aug 2023 10:58:58 +0000
ROA not before: Thu 10 Aug 2023 10:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.66.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 10:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:19:81:e0:92:ab:95:53:ab:e1:ae:8b:a9:1e:7e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 10 10:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=215562e3695c7c4b15bf3e423a9668f3bab9d405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:cc:95:45:e6:d0:ee:b0:9f:b0:f4:a8:37:
0b:f5:cc:d1:cf:57:f0:76:c1:df:e5:3d:06:4d:ea:
36:8d:c9:c7:15:03:52:64:e4:d1:32:52:52:77:24:
f0:a5:74:81:9e:2f:09:cc:01:02:79:07:b1:cf:90:
e1:d5:2f:e4:ec:07:b8:cd:e3:75:07:1b:6a:35:98:
19:1e:93:32:43:35:5a:d2:89:97:e1:a7:74:b8:b4:
43:40:9e:56:bf:53:d3:86:3d:9e:6d:c5:18:42:9d:
c9:54:1c:bc:1c:53:e1:4e:fa:fd:d5:a8:34:5d:23:
48:1f:99:ef:d6:fe:95:a2:51:32:8d:c0:be:6c:24:
d9:6f:b3:0f:be:1c:5e:78:31:bb:93:0d:16:ab:b2:
f6:45:a3:c1:70:1c:cd:52:c4:1d:b6:20:b1:ab:99:
b5:34:bd:f3:9d:17:d1:b4:03:c9:44:ba:78:e0:1d:
3a:90:d0:2c:cb:2f:47:e9:3d:38:c1:c3:ed:7d:30:
77:39:75:f6:ae:c4:e7:68:40:ef:06:8c:b8:55:9d:
a5:ab:a5:57:2c:4d:83:46:72:e5:41:94:f7:94:8c:
15:46:e2:9e:5b:4d:37:16:31:b9:b1:70:f0:2d:e3:
ae:ec:92:d9:ef:01:37:ab:8e:33:17:a8:e3:e8:d9:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:55:62:E3:69:5C:7C:4B:15:BF:3E:42:3A:96:68:F3:BA:B9:D4:05
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IVVi42lcfEsVvz5COpZo87q51AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/23
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.39.0/24
84.32.43.0/24
84.32.45.0/24
84.32.49.0-84.32.51.255
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0/23
84.32.67.0-84.32.68.255
84.32.76.0/24
84.32.83.0/24
84.32.89.0/24
84.32.92.0-84.32.94.255
84.32.105.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.210.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0-88.216.36.255
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.60.0-88.216.66.255
88.216.92.0/23
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/22
88.216.197.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.222.0/24
88.216.228.0/22
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
5e:df:11:55:2b:6f:61:8b:be:04:f2:a4:b6:57:f9:34:f7:65:
d4:18:5b:64:e9:7b:c7:7a:e2:df:85:3d:32:50:aa:3b:5e:7d:
36:6a:2b:08:c1:7a:60:26:d3:12:fd:17:f3:ca:fc:79:06:86:
ae:3e:a6:e8:23:b9:ac:b0:f8:0c:45:29:89:7a:52:ed:d1:f8:
59:aa:c0:78:04:f3:c6:41:58:7a:68:10:6e:0f:ff:1c:a7:78:
69:25:0b:d7:a3:84:2c:fe:4a:1a:6a:31:f5:53:fa:5a:78:72:
d9:70:74:b7:22:e6:ea:40:0e:5a:68:3c:e4:01:8c:eb:5a:d1:
51:fd:14:e6:00:df:d5:ae:16:12:6c:6c:d6:71:db:57:f9:07:
78:65:56:bd:74:a8:89:62:2e:69:32:d0:00:56:10:ad:13:11:
76:e4:2e:5a:76:bc:ed:c6:f5:84:a1:86:c2:74:8e:33:88:c4:
73:70:2a:d7:31:59:f1:7c:4a:fe:e8:40:0f:87:16:d9:34:75:
10:7e:36:51:65:8f:b6:a8:f3:a9:5b:48:70:88:70:36:16:bc:
20:e5:7f:53:e2:6c:b3:b7:57:50:ef:19:05:dc:78:6d:28:ab:
99:08:6a:bc:4b:dd:04:e4:57:86:54:73:d4:e8:c6:9d:57:27:
49:49:56:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org