Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JtA8i59L8RHHUE-bNg4mxtGTulQ.roa
File: JtA8i59L8RHHUE-bNg4mxtGTulQ.roa (raw, json)
Hash identifier: rk5ZLa3KGx9R5sKGTEmW0sGynffiPbKsJhDNYJtecS4=
Subject key identifier: 26:D0:3C:8B:9F:4B:F1:11:C7:50:4F:9B:36:0E:26:C6:D1:93:BA:54
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B62AC3C46AB2075E4989189ECE85CFEEF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JtA8i59L8RHHUE-bNg4mxtGTulQ.roa
Signing time: Tue 24 Oct 2023 17:12:16 +0000
ROA not before: Tue 24 Oct 2023 17:12:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.233.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.237.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.253.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.182.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.33.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:ac:3c:46:ab:20:75:e4:98:91:89:ec:e8:5c:fe:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 24 17:12:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26d03c8b9f4bf111c7504f9b360e26c6d193ba54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:10:57:7a:67:27:79:75:ff:83:71:30:9d:d8:
c9:dd:19:4e:00:ea:ae:c8:83:d0:66:22:db:0f:79:
d6:79:b4:f4:d3:3d:0c:05:6c:72:72:30:07:fb:dc:
34:28:79:2c:c7:4a:c9:b3:91:83:cd:84:ba:f9:fa:
df:42:22:a1:03:74:b9:d2:22:38:54:ed:0b:08:6d:
5b:a7:fe:a7:b6:34:ff:a9:56:b8:c5:61:b0:c3:75:
7b:3a:62:68:cb:8b:4e:9d:37:28:e2:c8:96:94:06:
19:da:00:8f:c8:a7:20:b1:90:38:ae:56:d3:3f:bd:
50:ab:da:66:1b:ea:08:78:bc:8f:a9:92:74:78:b1:
bb:aa:40:e0:69:61:a9:62:2e:10:95:3e:20:d5:99:
47:13:d6:70:37:3f:8e:c3:65:80:f9:13:9c:9b:8d:
84:30:ab:f8:34:f1:e7:fb:e8:1c:de:c8:ad:74:32:
1c:86:05:09:c7:89:32:a0:f7:4e:95:c1:c9:7d:62:
52:af:92:6e:00:3d:d7:e4:be:c3:01:29:c1:47:d7:
b7:8a:72:cd:91:ee:51:c3:97:4c:58:6b:41:1f:9a:
4e:90:60:30:67:b7:88:38:05:8e:da:02:b2:d4:3c:
fe:b2:7d:ae:a3:dc:db:6a:bc:34:e4:d6:8a:dd:55:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D0:3C:8B:9F:4B:F1:11:C7:50:4F:9B:36:0E:26:C6:D1:93:BA:54
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JtA8i59L8RHHUE-bNg4mxtGTulQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.8.0/24
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.42.0/23
84.32.46.0/23
84.32.62.0/24
84.32.64.0-84.32.66.255
84.32.68.0/24
84.32.76.0/23
84.32.79.0/24
84.32.83.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0/22
84.32.105.0/24
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.211.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0/22
84.32.237.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/23
88.216.3.0/24
88.216.16.0/24
88.216.22.0/23
88.216.33.0/24
88.216.35.0/24
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.47.0/24
88.216.58.0/24
88.216.64.0/23
88.216.93.0/24
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.182.0/23
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:b8:8c:88:74:d2:85:0b:78:b0:3e:67:a5:2b:be:dc:a4:20:
cb:08:79:8a:5d:68:87:79:7f:f9:3e:ab:87:70:96:9f:17:fc:
a2:02:c4:50:e5:92:fc:d8:f7:67:39:6a:30:d9:5e:96:0a:1b:
be:97:df:ae:4d:fd:7e:03:db:14:d8:7a:36:a7:ce:82:77:78:
bb:47:d9:2b:20:e0:b3:ac:3e:19:33:e3:17:8d:9a:fd:20:ca:
c4:6b:92:4e:05:85:d6:30:7d:05:c5:df:e5:7c:4b:50:aa:80:
53:49:79:e4:d3:3b:93:c6:ce:f5:40:f0:2b:2b:ad:53:93:eb:
08:02:1c:0f:03:d5:9f:16:e0:e6:7b:45:65:35:9b:e5:a7:6f:
90:b6:d5:2c:f9:3d:73:b7:b8:af:94:28:2e:d8:1e:28:52:5d:
ae:99:c9:ab:23:7a:05:3c:10:0e:4a:0c:1a:65:7f:4a:74:b4:
8c:06:ed:d5:89:cd:c2:9e:76:05:a4:59:f2:d8:c1:ed:69:dd:
6c:24:5d:cc:85:25:91:64:19:8e:c8:c2:ba:62:f2:d5:27:87:
4d:f6:62:1d:3a:33:b0:4c:01:8e:c1:b7:1b:5e:e4:14:b9:43:
91:c9:96:68:7f:9c:3a:ab:8f:d5:67:75:b5:7d:85:39:92:20:
f5:7e:74:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 01:00:12 2023 by rpki-client on console-fra.rpki-client.org