Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/P7G8W17oHUP9yCBoBXMID6WEsaU.roa
File: P7G8W17oHUP9yCBoBXMID6WEsaU.roa (raw, json)
Hash identifier: BwAfUgHpMIjmWbt9TbJ/5gF08wunhvinznj8QvPH9yE=
Subject key identifier: 3F:B1:BC:5B:5E:E8:1D:43:FD:C8:20:68:05:73:08:0F:A5:84:B1:A5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188263B40665273FD63BD478EC8E854C0F0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/P7G8W17oHUP9yCBoBXMID6WEsaU.roa
Signing time: Tue 16 May 2023 20:23:17 +0000
ROA not before: Tue 16 May 2023 20:23:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.223.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.108.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 May 2023 05:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:26:3b:40:66:52:73:fd:63:bd:47:8e:c8:e8:54:c0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 16 20:23:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fb1bc5b5ee81d43fdc820680573080fa584b1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:18:ab:c3:c6:4d:71:5a:75:81:f2:a2:15:
10:ea:bf:e5:87:95:9b:ba:3d:19:97:3d:4c:53:f3:
2a:f2:b6:d4:fe:25:93:3d:19:22:79:c7:33:0a:93:
5d:3c:22:41:3b:ba:5c:9c:68:6b:8b:e3:9e:14:c7:
23:40:38:2a:48:7c:19:f9:07:1c:ad:4f:99:83:e2:
e2:ab:f3:41:53:e4:3d:91:4b:5d:8f:07:56:11:f3:
09:5a:48:dd:36:5d:b8:55:fd:03:2a:2a:0e:a0:42:
ca:db:ff:73:d1:da:f1:ce:1e:bb:cf:d7:6d:2b:42:
b6:4a:9e:0e:cb:c5:ab:c4:44:79:d9:0a:48:80:84:
a9:c0:44:af:b6:e7:da:cc:20:42:e6:13:e2:94:43:
04:13:7f:0d:c5:3a:b3:3c:c5:74:07:2b:70:09:dc:
ce:f0:c5:fc:51:c2:50:8f:a9:2d:18:42:e6:4d:27:
e7:b2:ca:30:92:e5:0f:bf:79:fc:2c:f4:bb:5b:b3:
b6:3d:5c:99:10:8a:97:da:3c:8b:b6:4f:86:79:db:
45:b2:63:91:19:a1:c5:23:07:8f:35:19:93:f8:5d:
21:e7:87:30:07:b1:88:67:5b:41:41:d0:30:c8:4f:
35:62:fa:a7:e5:e6:be:7c:46:6c:cc:b4:7a:d7:7a:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B1:BC:5B:5E:E8:1D:43:FD:C8:20:68:05:73:08:0F:A5:84:B1:A5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/P7G8W17oHUP9yCBoBXMID6WEsaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.60.0/24
84.32.67.0-84.32.68.255
84.32.70.0/24
84.32.77.0/24
84.32.79.0/24
84.32.89.0/24
84.32.110.0/24
84.32.148.0/22
84.32.154.0/24
84.32.158.0/23
84.32.177.0/24
84.32.212.0/22
84.32.218.0/24
84.32.221.0/24
84.32.223.0-84.32.225.255
84.32.231.0-84.32.232.255
84.32.235.0/24
84.32.239.0-84.32.240.255
84.32.242.0/23
84.32.251.0-84.32.253.255
88.216.0.0/23
88.216.3.0/24
88.216.16.0/24
88.216.32.0/24
88.216.35.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.100.0/24
88.216.105.0/24
88.216.107.0-88.216.108.255
88.216.111.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/23
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.208.0/24
88.216.212.0/22
88.216.220.0/24
88.216.232.0/21
Signature Algorithm: sha256WithRSAEncryption
07:28:c1:ed:a5:aa:4c:ad:97:d9:78:78:ee:4d:be:3f:a7:95:
ee:24:d7:0d:fe:f8:73:63:2b:d3:29:6a:75:7f:fe:b0:d4:73:
b3:13:0e:28:e7:0e:2b:79:88:fc:92:06:6f:1f:f3:8a:b4:51:
ea:f9:39:b3:3c:1b:26:93:c5:50:25:4f:d6:42:62:35:5f:ae:
48:18:3d:f0:7e:39:e2:fa:4b:d8:56:5e:2d:0a:5f:38:eb:74:
d9:9d:d4:39:82:a8:24:f2:25:82:cd:a9:89:94:25:87:39:67:
85:17:c0:69:2a:f0:e9:5d:28:4d:8d:09:f9:39:d0:d1:68:cc:
fd:15:7f:c2:28:c4:7f:7f:7d:f3:43:04:be:86:3e:ad:56:17:
01:1b:49:30:80:9f:76:a7:c2:20:88:29:78:ab:d5:fb:6d:aa:
0a:aa:3a:e1:20:4c:55:32:13:4c:80:f8:57:74:2f:02:70:41:
4e:88:08:8c:f3:71:9f:17:5a:aa:90:9d:6b:02:ed:be:32:ce:
5e:02:c8:f3:e2:00:0b:c8:b3:0e:f7:54:19:68:f7:f9:35:c1:
e7:f9:fb:cc:8c:6e:25:4e:70:02:6f:80:de:bc:6a:0d:1e:d8:
1f:6e:68:7d:9e:9e:fb:45:18:bb:56:37:72:f9:ae:c8:b5:dc:
55:6a:df:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org