Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TE3xXIqxMh-aTo5WvnXwV13XMjM.roa
File: TE3xXIqxMh-aTo5WvnXwV13XMjM.roa (raw, json)
Hash identifier: QQpYxuF9SuU1kMy+JfI9wg3zQMZobekHQ6910H/B4zk=
Subject key identifier: 4C:4D:F1:5C:8A:B1:32:1F:9A:4E:8E:56:BE:75:F0:57:5D:D7:32:33
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018AF6CB7669B49D6B4CF18A3025C949572A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TE3xXIqxMh-aTo5WvnXwV13XMjM.roa
Signing time: Tue 03 Oct 2023 18:27:23 +0000
ROA not before: Tue 03 Oct 2023 18:27:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.233.0/24 maxlen: 24
84.32.236.0/23 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 08:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:cb:76:69:b4:9d:6b:4c:f1:8a:30:25:c9:49:57:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 3 18:27:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c4df15c8ab1321f9a4e8e56be75f0575dd73233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:27:90:7c:fb:04:9c:d3:c6:79:07:f6:73:
cb:31:30:b8:c7:65:48:a4:64:ae:55:59:30:c3:49:
d6:da:af:df:49:dd:07:2e:a3:8e:e3:dc:b0:98:47:
22:ea:fb:02:fc:5c:33:da:02:86:98:0b:d9:6d:a0:
81:6e:b3:be:ec:08:bc:10:15:61:5f:09:61:f4:ea:
30:0d:63:ed:7c:f0:57:25:c1:c3:1a:5b:4b:07:37:
7c:10:1c:85:cb:c2:42:ba:a8:0c:35:ef:4c:85:cc:
de:57:fd:0c:2f:91:e3:4d:e0:69:64:71:69:09:e6:
89:20:96:bb:bc:c9:71:ff:4e:5b:3c:b4:e1:a2:bd:
62:11:48:71:c8:79:b1:04:77:ff:8e:c6:af:de:c0:
b8:f2:0a:5c:fc:c7:43:b1:92:54:70:01:f9:0c:1c:
cd:fc:f8:0a:70:8c:a3:0b:47:dd:d9:82:aa:0b:1a:
03:80:92:7b:7b:f4:71:c9:00:ef:fa:36:bd:26:0a:
65:62:8b:9b:92:35:de:f4:b3:99:b6:f2:c8:57:c7:
be:c1:dd:1e:85:a2:ed:98:07:9c:31:c7:9e:cf:58:
0b:d0:32:a7:10:5a:b7:26:3e:c6:71:78:29:24:60:
f5:8e:8b:79:3e:bd:19:46:bf:7b:f2:f4:74:30:0b:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4D:F1:5C:8A:B1:32:1F:9A:4E:8E:56:BE:75:F0:57:5D:D7:32:33
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TE3xXIqxMh-aTo5WvnXwV13XMjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.8.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.42.0/23
84.32.46.0/23
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0-84.32.66.255
84.32.68.0/24
84.32.76.0/23
84.32.83.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0/22
84.32.105.0/24
84.32.107.0/24
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0-84.32.176.255
84.32.178.0/23
84.32.211.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.35.0-88.216.36.255
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.47.0/24
88.216.58.0/24
88.216.64.0/23
88.216.92.0/23
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
48:ab:41:86:ae:e7:8c:fd:5c:8b:7d:66:9f:12:0a:7e:22:c9:
ef:02:4a:91:2e:e5:11:5c:9b:ee:29:c2:e3:a0:0a:30:9b:dd:
d0:13:b6:cc:e3:05:7a:87:2d:a8:05:ea:c1:9c:a1:4b:ee:94:
4f:a7:91:ce:72:a0:f6:bb:34:07:ef:03:7e:ae:90:da:59:90:
59:e1:e6:15:41:d2:3a:16:a0:40:e4:aa:91:67:2d:d2:c1:12:
ff:48:1c:2a:66:35:5d:49:a6:eb:0d:ff:20:2e:1e:f1:ef:47:
97:30:7b:c7:49:14:4a:59:0c:ef:8a:dd:29:28:0e:c7:f8:c6:
67:42:74:e8:80:e9:39:45:79:4b:03:e4:5d:b2:35:7f:58:fb:
64:f7:77:5b:40:a3:fc:1f:12:37:ce:a8:fd:85:2e:89:c2:95:
99:80:43:89:23:ee:91:63:a8:80:d8:18:62:96:6e:27:61:65:
df:ed:a2:e0:42:d2:9e:97:c0:70:9c:31:4c:bd:76:26:97:0a:
90:62:95:2e:88:8b:4e:05:8a:96:4d:55:7e:9f:27:5b:2d:09:
8e:84:11:92:c2:d1:b7:6d:fd:73:2c:0f:17:7f:4e:0c:d7:4f:
65:d5:95:d2:39:7e:d6:2c:02:7b:e8:ab:ae:11:cc:ab:de:87:
2f:12:ad:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org