Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/V2y0erkZ_4JrzcDzJ7QsHs3IBYI.roa
File: V2y0erkZ_4JrzcDzJ7QsHs3IBYI.roa (raw, json)
Hash identifier: PKzxLgY/g6myKuH1sDh877oUd+tbpREAykEQAR5BBF4=
Subject key identifier: 57:6C:B4:7A:B9:19:FF:82:6B:CD:C0:F3:27:B4:2C:1E:CD:C8:05:82
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189AAD3FBFB5984697EFFC578482CCD4965
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/V2y0erkZ_4JrzcDzJ7QsHs3IBYI.roa
Signing time: Mon 31 Jul 2023 07:22:46 +0000
ROA not before: Mon 31 Jul 2023 07:22:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Jul 2023 07:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:d3:fb:fb:59:84:69:7e:ff:c5:78:48:2c:cd:49:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 31 07:22:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=576cb47ab919ff826bcdc0f327b42c1ecdc80582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d2:85:e6:76:f0:51:cf:53:90:b6:fa:c2:da:
8e:db:10:62:ee:15:06:c6:e5:8e:33:fc:0e:16:aa:
19:08:13:d4:23:72:77:65:58:a1:31:21:96:15:40:
f0:cb:46:dd:14:12:9e:12:73:c2:bb:32:5d:57:3b:
d9:24:a2:7c:1f:ec:07:6b:07:de:75:36:a0:6d:1e:
28:8d:34:6c:a1:00:d2:81:4e:97:6a:70:c9:d7:89:
c8:82:ac:03:19:7c:be:6c:df:db:9f:b8:b5:30:fa:
01:b5:54:64:18:7e:f4:3c:a3:c7:21:49:22:40:89:
77:98:86:71:b9:d2:35:a0:8f:26:36:8e:62:58:d8:
24:ab:22:f3:75:c2:ad:ad:5a:88:b8:fa:26:ba:bd:
5d:3c:75:f1:47:d6:c3:2c:69:ac:3e:34:de:e1:d0:
69:29:f4:5b:17:ca:3c:90:94:ed:4b:9d:eb:0e:42:
d7:f3:49:8f:4c:df:10:0d:2c:4b:47:35:e0:4f:75:
37:ac:93:69:62:28:45:a5:eb:05:26:00:bc:b9:92:
6b:87:d8:e7:dc:10:4c:59:86:07:1d:a1:a1:b5:e2:
50:7e:61:6b:53:2b:7f:6d:cf:cb:cd:5d:82:03:59:
b5:25:d4:39:aa:03:fc:c3:38:43:29:16:70:bf:36:
ab:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6C:B4:7A:B9:19:FF:82:6B:CD:C0:F3:27:B4:2C:1E:CD:C8:05:82
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/V2y0erkZ_4JrzcDzJ7QsHs3IBYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/23
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.39.0/24
84.32.45.0-84.32.46.255
84.32.50.0/23
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.79.0/24
84.32.83.0/24
84.32.89.0/24
84.32.94.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.210.0/24
84.32.212.0/22
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.247.255
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0-88.216.36.255
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.60.0-88.216.65.255
88.216.92.0/23
88.216.101.0/24
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.222.0/24
88.216.228.0/22
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
1b:01:1e:88:49:e3:dc:24:14:cf:30:93:fb:16:f8:91:2c:79:
29:fc:4f:77:bd:f8:b5:a1:6f:de:b4:59:21:0f:e9:43:70:aa:
4b:dd:1f:d9:ef:9b:de:a4:f1:a6:43:40:34:41:32:82:97:43:
68:ff:cc:36:6f:e8:e6:cc:d5:a2:86:08:59:ee:43:a8:ac:62:
c3:e0:c5:49:d2:77:52:cd:76:5a:73:d9:ea:e7:b0:6f:2d:69:
2e:79:75:7b:7f:13:a4:d1:01:d3:2c:b7:61:6a:48:a1:22:98:
11:98:5a:aa:4f:79:72:92:e1:b1:c6:eb:fb:0e:cc:f1:20:f8:
b7:ee:c1:8a:3e:34:34:63:2f:ed:ff:3b:8d:59:e8:4c:97:78:
da:0a:3b:6a:25:0a:36:82:b5:72:98:16:83:9d:ef:21:36:af:
93:d3:7b:a3:1b:7c:5e:2f:c0:7c:b1:43:ac:6b:a8:a0:a4:50:
49:1f:d0:0a:ad:c2:b7:2e:a3:ee:2f:ed:e3:e7:a0:31:c3:30:
48:d0:ad:d5:ab:e5:ba:ec:f1:d5:28:f6:c1:55:e5:2d:40:34:
02:b4:c7:31:68:7b:12:f5:fb:e2:87:8f:9d:8e:9e:e7:b6:3a:
97:e7:23:6e:80:b7:d2:fe:bc:f7:61:a4:5f:d3:3d:12:8b:ae:
68:e7:38:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org