Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QTQ7NlXNAQ5gOgQ--hdMPNTDXdI.roa
File: QTQ7NlXNAQ5gOgQ--hdMPNTDXdI.roa (raw, json)
Hash identifier: byuENZj8VfRqpHZLU2rTdpXsGZM1AzOIylYiFe1clao=
Subject key identifier: 41:34:3B:36:55:CD:01:0E:60:3A:04:3E:FA:17:4C:3C:D4:C3:5D:D2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018AEEB6EC16246FC242590EE90F4EE06439
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QTQ7NlXNAQ5gOgQ--hdMPNTDXdI.roa
Signing time: Mon 02 Oct 2023 04:47:59 +0000
ROA not before: Mon 02 Oct 2023 04:47:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.233.0/24 maxlen: 24
84.32.236.0/23 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ee:b6:ec:16:24:6f:c2:42:59:0e:e9:0f:4e:e0:64:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 2 04:47:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41343b3655cd010e603a043efa174c3cd4c35dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:a3:a5:76:02:fb:ca:ce:de:02:42:27:43:
51:64:9e:11:5c:be:67:9d:f7:06:36:86:44:3e:4f:
53:7d:fb:08:60:ae:68:ea:3f:2d:bd:2d:cc:96:5b:
b2:00:ee:1e:cd:2c:71:45:85:14:61:d9:21:74:51:
e9:5f:db:f2:b4:22:77:69:41:27:b2:16:10:9a:b2:
f1:c1:2e:6d:ef:f2:33:74:34:75:76:2e:f6:3f:c9:
16:8b:fd:2a:ee:03:a5:00:1a:c2:53:f9:eb:90:97:
40:be:c1:ee:43:39:c6:ad:37:ce:7d:f5:21:ff:2b:
90:f0:2c:17:9c:86:7f:b5:fc:6e:bc:7f:0a:2f:69:
28:99:29:92:38:95:22:72:8b:32:3f:4b:7b:d2:c2:
00:ef:5c:7a:2c:50:3d:7e:70:aa:1e:aa:24:d4:7f:
61:9f:f8:fe:11:01:e1:d5:b0:11:72:80:cd:e4:2f:
a7:60:98:0d:ce:2d:bd:1b:b9:6a:00:79:2b:2b:ca:
6f:e0:99:a9:ce:82:e2:8e:9f:4d:57:99:a0:15:79:
3c:2d:93:de:db:3e:62:4e:7f:a8:04:3d:a4:aa:40:
66:8d:f7:a3:e8:5a:04:55:ae:99:a2:e7:ab:bd:38:
3b:ea:36:14:17:90:cc:7a:fb:b8:7a:1b:b7:51:93:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:34:3B:36:55:CD:01:0E:60:3A:04:3E:FA:17:4C:3C:D4:C3:5D:D2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QTQ7NlXNAQ5gOgQ--hdMPNTDXdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.8.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.42.0/23
84.32.46.0-84.32.51.255
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0-84.32.66.255
84.32.68.0/24
84.32.76.0/23
84.32.83.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0/22
84.32.105.0/24
84.32.107.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0-84.32.176.255
84.32.178.0/23
84.32.211.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.35.0-88.216.36.255
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.47.0/24
88.216.58.0/24
88.216.60.0-88.216.65.255
88.216.92.0/23
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:ba:f0:e4:46:97:d0:85:58:5e:86:ef:27:fd:b4:c2:b9:a5:
a4:53:31:9a:e2:38:6a:82:31:17:d8:45:77:e7:71:a5:c5:4b:
86:68:5f:88:33:0d:15:25:13:65:ab:64:5e:fe:80:7a:7d:c0:
11:f4:13:a8:de:5c:05:21:ac:7a:8e:19:dc:aa:ca:b4:1f:5e:
44:1f:cd:a4:51:7d:51:69:af:12:2c:01:53:11:a7:8e:61:48:
c1:c3:3c:c3:64:6b:97:b4:ab:b1:e2:2b:50:9f:c6:9a:e5:a0:
d2:e0:57:82:a8:dc:83:0e:4e:d8:f3:66:32:44:6a:57:e2:55:
7e:d2:6f:2f:ba:74:ce:46:ab:2f:52:bf:36:d3:bc:5f:1f:ca:
6f:c4:33:de:18:50:a2:99:75:0e:df:2c:7e:43:85:45:f9:a5:
79:43:85:d2:55:cb:57:14:c3:a1:c3:db:bb:2b:a2:4a:3e:68:
a5:78:b6:cc:98:8f:68:29:5d:37:79:38:b8:2a:f1:a3:28:ae:
ea:fa:57:8b:65:93:65:24:bb:aa:4d:b0:ad:16:46:01:a0:1a:
e9:ef:96:b1:7a:9d:81:e3:91:fd:d5:89:76:02:97:83:1e:0f:
eb:e2:3b:64:58:e2:df:c3:5f:c8:0d:30:c3:f6:99:06:5b:d6:
19:90:0e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 08:00:50 2023 by rpki-client on console-ams.rpki-client.org