Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/K9J1O_QTgAtxhxmFzceVTpXrugM.roa
File: K9J1O_QTgAtxhxmFzceVTpXrugM.roa (raw, json)
Hash identifier: 8SOUMCn40GAK0tvTrHmHcIUvHFUXHVzybSSJaIqB9DA=
Subject key identifier: 2B:D2:75:3B:F4:13:80:0B:71:87:19:85:CD:C7:95:4E:95:EB:BA:03
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189AFA22A484F5B5F886ACDCD21ABD8CF31
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/K9J1O_QTgAtxhxmFzceVTpXrugM.roa
Signing time: Tue 01 Aug 2023 05:46:27 +0000
ROA not before: Tue 01 Aug 2023 05:46:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:af:a2:2a:48:4f:5b:5f:88:6a:cd:cd:21:ab:d8:cf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 1 05:46:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bd2753bf413800b71871985cdc7954e95ebba03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:74:db:fa:c7:c9:a6:d4:11:61:3a:f2:b5:
20:2f:89:1c:ee:0b:95:18:c5:57:4b:08:62:58:8d:
e2:3d:00:f5:84:8f:07:4d:b4:95:90:80:9e:56:f3:
d4:87:47:33:6a:ce:d1:ad:12:64:22:bc:17:74:c0:
2c:ee:39:fb:7e:52:5a:12:e4:ae:93:75:16:97:5b:
cb:d4:b1:92:b4:7f:70:f1:95:4d:c7:57:a9:89:fa:
cc:86:2e:45:a5:44:e1:d6:05:c2:cd:56:8c:0b:55:
04:2f:8d:4c:18:d0:d4:81:cd:58:5f:90:b0:c4:07:
a3:5d:67:66:e4:6b:6e:18:02:e0:a5:62:a5:00:b6:
d4:07:10:08:1b:69:56:ea:21:03:13:21:d5:9c:ba:
b6:cc:03:7f:01:79:4a:62:e6:d7:82:1c:77:b2:ea:
5d:f1:b3:ac:74:96:5c:10:b4:76:bc:d2:f9:4d:46:
fe:73:4c:f2:b6:7d:f6:6a:dc:ce:9b:0b:ca:d2:f2:
6e:ea:4d:fe:7c:84:60:0c:c7:bf:d5:23:68:c8:f7:
6c:ad:a1:ef:30:f4:a7:84:17:de:09:b9:0c:81:e4:
51:90:cb:17:4d:fb:c0:de:e4:14:0b:32:66:5f:66:
c3:36:e2:f0:cd:66:38:7f:45:f5:05:f1:c4:23:d1:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D2:75:3B:F4:13:80:0B:71:87:19:85:CD:C7:95:4E:95:EB:BA:03
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/K9J1O_QTgAtxhxmFzceVTpXrugM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/23
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.39.0/24
84.32.43.0/24
84.32.45.0-84.32.46.255
84.32.50.0/23
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0/23
84.32.67.0/24
84.32.76.0/24
84.32.83.0/24
84.32.89.0/24
84.32.93.0-84.32.94.255
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.210.0/24
84.32.212.0/22
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0-88.216.36.255
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.60.0-88.216.65.255
88.216.92.0/23
88.216.101.0/24
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/22
88.216.197.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.222.0/24
88.216.228.0/22
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
83:4f:1b:13:9a:4f:24:76:a3:34:fd:bb:42:a5:4f:33:56:b1:
00:e1:90:ec:7c:5a:38:0f:87:ec:80:6c:85:47:c4:46:0a:40:
cc:98:8f:f9:fd:fd:34:40:ba:77:26:d0:d1:b4:bb:4e:28:1b:
33:3f:9f:3a:31:8e:18:03:e6:7a:3e:c1:85:4c:c8:e3:42:df:
cf:23:b7:60:19:50:7c:4a:d0:d0:4d:76:77:69:e4:f1:94:9b:
c7:75:2d:0f:ec:37:97:21:e3:08:1f:4f:6f:79:8e:ac:96:e0:
c9:16:1b:67:c8:dd:90:4c:8b:db:ac:9b:01:88:77:4d:f3:25:
a6:e1:46:c4:0f:78:93:1e:c8:93:e7:5e:32:d6:d9:b4:84:f5:
6a:0e:19:ae:19:52:29:27:4e:ca:57:74:b7:fe:5d:d8:32:a4:
a9:4a:d8:9a:3f:c9:6a:f8:dc:0a:74:6e:f9:da:be:00:cc:98:
7c:94:7d:81:f3:6d:70:43:26:a8:c0:98:0d:56:54:3a:6a:56:
79:41:20:85:cc:30:3f:86:52:eb:b2:14:23:48:2e:4c:88:f2:
fc:7f:5a:e9:ab:11:36:a2:09:0b:08:4c:f9:50:80:a1:e9:02:
7a:6a:7c:b2:dc:f0:4c:85:ed:4c:00:dd:1e:b6:7a:2e:91:05:
10:dc:af:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 05:43:25 2023 by rpki-client on console-fra.rpki-client.org