Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LknDTjuQGASjafuJpYCCYDrlnQI.roa
File: LknDTjuQGASjafuJpYCCYDrlnQI.roa (raw, json)
Hash identifier: B6XlsPA11eP/eZCipOQnIfdS2m2hcrmY+3fci1n4Hv4=
Subject key identifier: 2E:49:C3:4E:3B:90:18:04:A3:69:FB:89:A5:80:82:60:3A:E5:9D:02
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01888A67174E5EE5CC154A5BCAF7F2867014
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LknDTjuQGASjafuJpYCCYDrlnQI.roa
Signing time: Mon 05 Jun 2023 07:13:11 +0000
ROA not before: Mon 05 Jun 2023 07:13:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.56.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:67:17:4e:5e:e5:cc:15:4a:5b:ca:f7:f2:86:70:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 5 07:13:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e49c34e3b901804a369fb89a58082603ae59d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:4f:13:38:de:62:24:5d:20:4f:f1:77:c8:
ce:76:a4:64:c3:7a:16:4d:39:84:03:de:eb:ca:9b:
58:cf:a5:6a:e8:50:07:94:88:a1:1e:73:f3:f2:45:
99:22:01:ef:fd:95:10:f0:22:f6:88:29:b6:0d:6c:
c9:a6:7e:87:fb:64:8d:1f:7c:c4:d0:1f:b8:99:cf:
05:06:5b:b5:d6:ff:3a:6f:54:84:25:a8:c5:57:98:
84:3f:ae:c5:99:f3:2e:39:bc:a3:3d:3a:1d:fc:60:
73:91:98:1f:03:5d:35:44:49:7e:e0:df:e7:c5:e3:
08:8c:be:80:cd:12:d0:f4:7d:ef:51:ad:d5:21:21:
54:0a:bd:8f:35:4c:29:54:16:9f:33:4b:2b:fe:d8:
b5:20:c0:c9:0e:70:b0:4d:7c:96:e4:ae:7d:7d:3c:
52:e3:75:34:66:23:cd:46:f0:1d:46:ba:47:6d:bc:
e6:88:d8:64:6c:2e:a4:7d:f7:0a:f6:99:2d:96:78:
04:44:92:be:a0:25:c3:e7:93:dc:9b:d3:f2:b0:16:
5c:59:83:d2:98:bd:4c:32:8c:91:ca:18:24:03:9b:
95:94:d3:86:78:25:42:f7:f7:1b:16:4d:88:4e:58:
8d:b1:10:d9:6d:0c:a0:e4:d1:b1:39:da:9a:ba:cc:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:49:C3:4E:3B:90:18:04:A3:69:FB:89:A5:80:82:60:3A:E5:9D:02
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LknDTjuQGASjafuJpYCCYDrlnQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.30.0/24
84.32.46.0/24
84.32.56.0/24
84.32.60.0/24
84.32.62.0/24
84.32.65.0/24
84.32.67.0-84.32.68.255
84.32.79.0/24
84.32.89.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.158.0/23
84.32.177.0/24
84.32.212.0/24
84.32.214.0/23
84.32.221.0/24
84.32.224.0/24
84.32.231.0-84.32.232.255
84.32.235.0/24
84.32.239.0-84.32.240.255
84.32.243.0/24
84.32.250.0-84.32.253.255
88.216.0.0/24
88.216.3.0/24
88.216.16.0/24
88.216.32.0/24
88.216.35.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.100.0/24
88.216.111.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.232.0/21
Signature Algorithm: sha256WithRSAEncryption
80:56:1a:b5:4b:0d:49:e6:dc:a6:62:99:1a:06:3d:a1:a4:bd:
90:80:92:8e:1c:d9:c8:9a:e6:91:68:95:1d:fe:9d:ae:ff:6d:
35:23:e3:cd:69:54:2c:80:8e:39:71:53:de:93:00:61:3b:f8:
2c:80:35:5c:e0:ef:e9:90:4c:3c:90:68:2d:a3:dc:8b:94:c6:
51:ed:04:a7:be:7a:e9:28:34:4d:5a:06:14:ef:03:d2:5d:46:
07:13:fe:28:07:ac:19:5f:ff:86:2e:aa:f3:f1:3c:87:bf:58:
0c:4b:a6:72:52:da:9e:89:ac:18:aa:99:e1:d5:30:09:45:1b:
b8:fb:48:7f:92:b9:29:95:38:5c:fa:1e:12:af:cd:63:41:5b:
6f:59:23:3d:00:a1:f3:ac:25:09:95:83:42:41:de:b3:c2:2d:
34:1b:9e:41:5a:47:b3:29:98:29:31:bb:62:75:de:f3:b5:7e:
26:af:b7:03:86:53:59:0f:7b:b4:8d:72:79:22:8e:a1:35:76:
f8:b9:9a:48:28:d0:20:e2:ba:a1:57:d1:7e:fb:09:a1:81:d4:
ba:71:83:bd:3f:28:81:27:d1:61:e7:34:f7:fe:5c:87:b1:5d:
42:ea:7d:96:a8:70:f1:e2:2a:82:ea:b9:11:b1:3f:41:ad:2f:
66:b1:77:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:46 2023 by rpki-client on console-fra.rpki-client.org