Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SiU54NFkkytVOe4Jb-00kS7xQXI.roa
File: SiU54NFkkytVOe4Jb-00kS7xQXI.roa (raw, json)
Hash identifier: Olejg6ByFIeGUsldqdxYW03TlAqSwGAuGjYpdzdNvX4=
Subject key identifier: 4A:25:39:E0:D1:64:93:2B:55:39:EE:09:6F:ED:34:91:2E:F1:41:72
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B19F6A8B40A2A67DBDE8A8003AF04C0EF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SiU54NFkkytVOe4Jb-00kS7xQXI.roa
Signing time: Tue 10 Oct 2023 14:21:17 +0000
ROA not before: Tue 10 Oct 2023 14:21:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.253.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.104.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.33.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 05:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:f6:a8:b4:0a:2a:67:db:de:8a:80:03:af:04:c0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 10 14:21:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a2539e0d164932b5539ee096fed34912ef14172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:39:c8:70:3c:a1:a9:59:d7:1e:82:d0:63:
de:4a:09:28:fe:16:2a:be:0d:aa:71:8f:55:9a:06:
e8:2d:de:a9:f1:e2:b8:c3:47:90:a1:b6:ee:a5:af:
67:73:4a:bb:c9:0a:8f:7f:1b:e0:f8:5d:a1:1f:93:
a1:ad:16:7e:19:a9:de:37:b6:77:d0:fa:23:e2:15:
f6:83:17:96:c7:4b:80:e5:16:87:83:ef:45:f0:40:
e6:ba:27:42:d3:37:ff:ff:43:5a:88:be:f5:18:9d:
88:5f:15:ce:ab:d1:c2:5d:4f:4c:7b:20:69:1f:1c:
1a:b0:37:cc:76:90:d6:58:97:5c:bf:37:e0:81:cf:
68:0f:12:17:f2:eb:87:8f:e7:d0:e5:5b:67:73:97:
ee:e4:19:a0:2a:39:a0:f1:87:64:fd:07:62:cb:db:
5b:75:07:b7:38:d6:5f:46:68:84:62:cf:2b:f4:ea:
43:d1:6f:5e:61:16:cf:72:3c:d7:63:8c:44:ce:8b:
9a:d8:f7:34:39:3d:1d:a7:a4:04:57:bd:78:6a:00:
78:ac:54:4b:48:62:39:b8:37:1e:c5:ae:88:b3:54:
97:48:bf:66:00:ed:97:7d:47:3b:01:a0:83:b4:cd:
50:2d:d0:cb:32:42:b5:9d:0b:57:27:eb:66:b4:99:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:25:39:E0:D1:64:93:2B:55:39:EE:09:6F:ED:34:91:2E:F1:41:72
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SiU54NFkkytVOe4Jb-00kS7xQXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.8.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.42.0/23
84.32.46.0/23
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0-84.32.66.255
84.32.68.0/24
84.32.77.0/24
84.32.83.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0/23
84.32.95.0/24
84.32.104.0/23
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0-84.32.176.255
84.32.178.0/23
84.32.211.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0/24
84.32.234.0/23
84.32.238.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.251.255
84.32.253.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.33.0/24
88.216.35.0-88.216.36.255
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.47.0/24
88.216.58.0/24
88.216.64.0/23
88.216.92.0/23
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:c8:fa:6f:db:37:f1:04:38:b7:32:62:f7:35:c6:7c:1f:a5:
fe:7d:04:25:b1:ae:0e:ab:62:6f:7d:27:bd:ac:3c:d6:3e:d6:
59:b2:8f:d2:00:32:ff:2a:be:aa:c9:9f:52:61:45:41:f5:56:
e2:21:bd:d6:d9:29:27:f7:e0:ea:22:51:1f:47:b5:87:1b:89:
20:a6:3f:44:81:2d:90:60:3c:4a:36:93:d4:25:06:14:51:ae:
00:f3:98:f3:9c:a5:de:f7:9c:b8:9a:5b:f6:3b:2a:a5:97:72:
46:db:8a:23:78:d6:d0:ed:ca:a4:ed:68:d0:4a:18:84:7c:67:
e4:ab:9e:39:b6:aa:8b:49:cc:46:89:0a:d1:d8:ed:eb:f4:5a:
0b:90:bb:ad:4c:67:77:f4:4b:3a:8c:30:46:0c:7f:b2:37:ef:
81:ce:a1:b5:08:11:c5:b5:6d:57:43:0b:4b:37:36:c6:aa:7e:
15:46:93:cd:58:2a:2c:f3:60:b1:a3:5a:89:7c:13:a7:3a:a5:
61:c9:82:1b:6f:ea:5b:b7:41:c1:51:bd:3c:ea:3b:bc:a8:8c:
1a:89:f5:bf:c4:13:bc:74:b6:99:1d:cf:33:44:c1:0c:70:10:
38:8b:1a:ea:18:8f:90:76:8f:b7:ee:2a:81:19:ba:95:67:34:
8f:19:64:11
-----BEGIN CERTIFICATE-----
MIIHFjCCBf6gAwIBAgISAYsZ9qi0Cipn296KgAOvBMDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMxMDEwMTQyMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTI1MzllMGQxNjQ5MzJiNTUzOWVlMDk2ZmVkMzQ5MTJlZjE0MTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovE5yHA8oalZ1x6C0GPeSgko/hYq
vg2qcY9VmgboLd6p8eK4w0eQobbupa9nc0q7yQqPfxvg+F2hH5OhrRZ+GaneN7Z3
0Poj4hX2gxeWx0uA5RaHg+9F8EDmuidC0zf//0NaiL71GJ2IXxXOq9HCXU9MeyBp
HxwasDfMdpDWWJdcvzfggc9oDxIX8uuHj+fQ5Vtnc5fu5BmgKjmg8Ydk/Qdiy9tb
dQe3ONZfRmiEYs8r9OpD0W9eYRbPcjzXY4xEzoua2Pc0OT0dp6QEV714agB4rFRL
SGI5uDcexa6Is1SXSL9mAO2XfUc7AaCDtM1QLdDLMkK1nQtXJ+tmtJlhoQIDAQAB
o4IEIjCCBB4wHQYDVR0OBBYEFEolOeDRZJMrVTnuCW/tNJEu8UFyMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvU2lVNTRORmtreXRWT2U0SmItMDBrUzd4UVhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICNgYIKwYBBQUHAQcBAf8EggIlMIICITCCAh0EAgABMIIC
FQMEAFQgBDAMAwQAVCAHAwQAVCAIAwQAVCAOMAwDBAJUIBQDBAFUIBwDBABUIB8D
BAFUICoDBAFUIC4DBABUIDowDAMEAlQgPAMEAFQgPjAMAwQGVCBAAwQAVCBCAwQA
VCBEAwQAVCBNAwQAVCBTAwQAVCBVMAwDBANUIFgDBABUIFoDBAFUIFwDBABUIF8D
BAFUIGgDBAJUIJQDBABUIJkDBABUIJswDAMEAFQgnQMEBVQggDAMAwQBVCCuAwQA
VCCwAwQBVCCyMAwDBABUINMDBANUINADBABUINsDBABUIN0DBABUIOADBABUIOID
BABUIOQDBABUIOgDBAFUIOowDAMEAVQg7gMEAFQg8gMEAlQg9DAMAwQAVCD5AwQC
VCD4MAsDBABUIP0DAwBUIAMEAljYAAMEAFjYEAMEAVjYFgMEAFjYITAMAwQAWNgj
AwQAWNgkAwQAWNgmAwQAWNgoAwQAWNgqAwQBWNgsAwQAWNgvAwQAWNg6AwQBWNhA
AwQBWNhcAwQAWNhfMAwDBABY2GUDBABY2GYDBAJY2GgwDAMEAFjYbQMEBFjYYDAM
AwQHWNiAAwQAWNiEAwQBWNiGAwQAWNi0AwQAWNi3MAwDBABY2LsDBAZY2IAwDAME
AFjYxQMEAFjYxgMEAFjY0DAMAwQAWNjTAwQDWNjQAwQAWNjcAwQAWNjfAwQCWNjk
AwQCWNjsMA0GCSqGSIb3DQEBCwUAA4IBAQAMyPpv2zfxBDi3MmL3NcZ8H6X+fQQl
sa4Oq2JvfSe9rDzWPtZZso/SADL/Kr6qyZ9SYUVB9VbiIb3W2Skn9+DqIlEfR7WH
G4kgpj9EgS2QYDxKNpPUJQYUUa4A85jznKXe95y4mlv2Oyqll3JG24ojeNbQ7cqk
7WjQShiEfGfkq545tqqLScxGiQrR2O3r9FoLkLutTGd39Es6jDBGDH+yN++BzqG1
CBHFtW1XQwtLNzbGqn4VRpPNWCos82Cxo1qJfBOnOqVhyYIbb+pbt0HBUb086ju8
qIwaifW/xBO8dLaZHc8zRMEMcBA4ixrqGI+Qdo+37iqBGbqVZzSPGWQR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org