Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UdUhchNeJT8SLwehSkAjdtIivbo.roa
File: UdUhchNeJT8SLwehSkAjdtIivbo.roa (raw, json)
Hash identifier: FrBrZAzmR4Cl8pzazXnGbJQHT+8CZQlww3rj/rD1Ws4=
Subject key identifier: 51:D5:21:72:13:5E:25:3F:12:2F:07:A1:4A:40:23:76:D2:22:BD:BA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B64315420BA3F018286EF5D46C26A86BF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UdUhchNeJT8SLwehSkAjdtIivbo.roa
Signing time: Wed 25 Oct 2023 00:17:16 +0000
ROA not before: Wed 25 Oct 2023 00:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.233.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.237.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.253.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
88.216.182.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.33.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Oct 2023 15:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:64:31:54:20:ba:3f:01:82:86:ef:5d:46:c2:6a:86:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 25 00:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51d52172135e253f122f07a14a402376d222bdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bd:05:a4:1c:f4:73:b0:06:60:8b:b9:0b:f2:
23:1f:8e:38:b0:59:7b:b4:b4:a2:68:71:db:a9:45:
ba:4d:b3:54:1b:31:ff:cd:3c:78:15:d3:53:b3:91:
4b:cb:89:8d:29:42:ea:1c:0e:a7:23:f7:8d:aa:9b:
b2:b6:58:8b:d0:bc:26:14:8a:6e:32:17:78:f6:ac:
02:47:4f:ff:86:11:a8:7c:96:64:a9:e7:a9:61:7e:
51:05:ad:cd:c6:d8:65:e5:ba:8b:fc:7f:d1:b0:f7:
08:85:9f:64:85:7b:54:65:17:ae:19:ca:4a:1c:fc:
16:6d:27:f2:24:57:95:26:22:d4:ac:8d:bf:a0:fa:
23:19:cc:43:3c:b2:3d:10:cb:f5:ee:0d:2f:56:2f:
41:b2:26:cc:30:dc:20:27:69:4b:78:81:fc:22:c7:
24:0e:cc:08:af:81:0a:77:d7:f9:39:f5:9b:05:8a:
1f:30:bf:a6:5f:97:b9:f8:44:14:ea:55:53:5b:b0:
1f:77:9b:79:69:61:77:2f:5e:3b:50:20:24:51:ba:
b1:5e:c5:2c:a7:78:6f:05:df:77:8e:a6:62:bd:a4:
f6:f8:1e:e1:aa:54:51:f7:6d:90:f9:b6:72:11:b8:
42:da:df:c5:d5:47:cb:de:da:c2:ec:2f:3f:f3:57:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D5:21:72:13:5E:25:3F:12:2F:07:A1:4A:40:23:76:D2:22:BD:BA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UdUhchNeJT8SLwehSkAjdtIivbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.8.0/24
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.42.0/23
84.32.46.0/23
84.32.62.0/24
84.32.64.0-84.32.66.255
84.32.68.0/24
84.32.76.0/23
84.32.79.0/24
84.32.83.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0/22
84.32.105.0/24
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.211.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0/22
84.32.237.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/23
88.216.3.0/24
88.216.16.0/24
88.216.22.0/23
88.216.33.0/24
88.216.35.0/24
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.47.0/24
88.216.58.0/24
88.216.64.0/23
88.216.93.0/24
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.180.0/22
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
78:c7:27:4a:87:90:2d:16:c4:71:18:8a:50:30:a8:34:34:e6:
14:99:c8:4c:25:43:bd:df:1d:14:23:cd:0c:f3:6c:49:f1:4c:
ef:89:e3:0b:fe:e9:f6:fd:6e:5f:ab:94:52:a9:be:52:b7:0c:
36:a6:53:82:14:2f:ef:c7:ea:00:bd:f6:55:37:a5:14:ca:23:
a8:96:84:fa:aa:a0:4f:11:74:72:db:d3:89:05:a5:f2:3e:52:
37:67:24:96:ca:c4:f4:27:94:67:00:a9:fc:06:24:06:e7:0c:
53:e1:be:2c:ff:bd:3a:4f:29:ce:68:36:6b:52:ec:b7:34:6c:
8b:22:4d:4e:80:ee:e7:e9:d4:54:4e:6f:29:e4:b0:87:bd:74:
f6:52:bb:4f:a7:1e:27:c8:df:0d:74:27:73:7a:24:71:a3:89:
68:dc:da:21:c3:84:de:59:a0:85:af:7d:a2:44:f5:81:59:3b:
9b:64:b2:7e:17:48:50:b7:f6:6a:c7:24:59:d7:57:d4:d0:5b:
ea:f1:69:d4:ea:96:7e:13:6e:5f:29:d8:13:60:95:e1:fa:c4:
35:bd:62:5c:06:5e:13:cb:99:b6:fd:de:ea:97:83:8d:db:1a:
40:fc:6e:8c:77:af:5d:cb:14:1e:59:8f:1c:f5:af:e2:95:93:
47:67:df:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org