Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LK9nD_qgvv35ort_x73cLn2poq0.roa
File: LK9nD_qgvv35ort_x73cLn2poq0.roa (raw, json)
Hash identifier: OJQBmupkUbOE+CIXpEZ7pN7JQtRyTaSm7SUmE8h2lSw=
Subject key identifier: 2C:AF:67:0F:FA:A0:BE:FD:F9:A2:BB:7F:C7:BD:DC:2E:7D:A9:A2:AD
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018995D3B65BA6E0EEC727A276D638457834
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LK9nD_qgvv35ort_x73cLn2poq0.roa
Signing time: Thu 27 Jul 2023 05:30:27 +0000
ROA not before: Thu 27 Jul 2023 05:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 05:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:95:d3:b6:5b:a6:e0:ee:c7:27:a2:76:d6:38:45:78:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 27 05:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2caf670ffaa0befdf9a2bb7fc7bddc2e7da9a2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:34:69:1f:f0:66:49:72:f8:4f:34:ce:e8:
ea:18:ce:36:4c:c2:6a:28:fc:2a:40:ad:e3:73:aa:
54:53:9d:27:b5:63:71:d6:47:44:e2:da:33:01:91:
15:8f:3c:90:2e:7b:df:d7:de:9e:9b:b7:dd:4e:71:
a9:fd:a5:68:34:52:96:3b:e2:89:13:86:d2:d0:6c:
f5:2b:4d:1a:6a:ec:ae:6a:96:d5:a4:26:2a:96:c3:
2c:da:a0:d0:89:1d:23:e4:a0:3a:73:d5:20:82:8d:
a2:09:69:ee:0e:54:0e:89:0a:9b:08:d6:64:cb:42:
fd:7b:71:fd:ad:be:bb:fa:5e:1d:8d:7a:0f:3b:f5:
30:fa:97:a8:94:20:18:91:06:3a:84:ec:05:03:14:
8f:d5:79:59:be:3e:6f:c7:66:54:40:ae:51:c0:1f:
0b:7b:9a:83:fc:96:5a:e5:66:84:a3:ea:7e:d9:d9:
b5:17:b9:61:b0:6f:91:c2:c5:e8:f6:c7:3a:8f:0c:
97:90:e2:9e:3b:07:f8:2e:61:28:3a:81:2c:fb:58:
a3:0a:2e:d1:3e:aa:86:1c:bb:fb:b9:9b:38:55:c3:
16:89:95:9e:94:7c:11:c0:2b:79:e0:d3:14:3c:d0:
00:d3:88:e5:11:ff:ad:16:3d:54:44:90:3f:a3:3c:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AF:67:0F:FA:A0:BE:FD:F9:A2:BB:7F:C7:BD:DC:2E:7D:A9:A2:AD
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LK9nD_qgvv35ort_x73cLn2poq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/23
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.39.0/24
84.32.45.0-84.32.46.255
84.32.50.0/23
84.32.58.0/24
84.32.61.0/24
84.32.79.0/24
84.32.83.0/24
84.32.89.0/24
84.32.94.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.210.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.247.255
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0-88.216.36.255
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.60.0-88.216.65.255
88.216.92.0/23
88.216.101.0/24
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.222.0/24
88.216.228.0/22
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
36:d5:72:c6:97:ce:82:12:eb:44:de:c7:53:d4:01:b0:09:d3:
89:48:a6:74:cf:0d:c5:11:f2:05:e2:67:af:22:2b:75:ce:fd:
8b:0f:bd:bb:64:a4:6c:ec:0d:2a:de:de:9a:94:57:38:06:32:
95:4f:cc:1e:37:8c:e5:72:0d:c3:fe:7e:c1:2d:40:f2:bf:64:
1a:b8:49:2f:18:64:b7:33:7b:da:3d:43:6b:24:94:d3:8f:57:
0b:06:bc:a1:63:13:69:22:02:aa:60:22:3c:4f:33:8b:ef:a3:
4f:b2:3c:1e:1d:05:f6:23:52:b4:38:0f:1d:6a:28:fc:a6:d3:
b4:a6:f3:c0:58:5f:f5:0e:a2:cd:e0:7f:94:75:07:2d:44:c8:
f4:61:23:d8:c1:f5:3d:6d:54:0f:f9:37:f3:47:0d:f2:29:0a:
f1:c1:d6:26:d9:0c:bc:d5:e2:10:bc:94:2e:cc:e8:17:11:c3:
50:3c:42:48:1f:91:07:60:dc:7f:74:8b:be:67:b9:6a:93:dd:
a7:1a:a3:82:c0:5c:c3:12:eb:bf:0a:87:f5:79:40:a2:0c:6b:
7a:ff:21:be:39:18:1f:28:3f:ed:fb:9a:7a:00:f8:3b:79:89:
23:86:7e:8a:25:83:db:05:d4:34:ad:9e:95:90:36:32:66:98:
29:d5:58:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:32 2024 by rpki-client on console-fra.rpki-client.org