Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VQkNGCAg7BE5zEgUhlzvCzt8lCY.roa
File: VQkNGCAg7BE5zEgUhlzvCzt8lCY.roa (raw, json)
Hash identifier: PIO4gT+FQolT2JXndWL2tNQRjptS0mmHRX2iuCIHENI=
Subject key identifier: 55:09:0D:18:20:20:EC:11:39:CC:48:14:86:5C:EF:0B:3B:7C:94:26
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186D9CA85AE0E91D067AEC1592DF054DD97
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VQkNGCAg7BE5zEgUhlzvCzt8lCY.roa
Signing time: Mon 13 Mar 2023 07:06:13 +0000
ROA not before: Mon 13 Mar 2023 07:06:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.244.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.173.0/24 maxlen: 24
84.32.174.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d9:ca:85:ae:0e:91:d0:67:ae:c1:59:2d:f0:54:dd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 13 07:06:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55090d182020ec1139cc4814865cef0b3b7c9426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a5:7b:49:ff:5d:12:d4:21:6f:49:45:fd:f8:
eb:bd:95:a1:18:b7:9c:8c:44:36:97:a1:11:33:42:
2a:5d:b0:e2:4c:cd:94:4b:ba:1b:9c:92:87:e4:f0:
fb:a0:74:44:3b:30:ac:f6:88:42:40:99:c9:81:e2:
ed:2f:62:f2:a1:8c:c9:9d:5c:d6:1e:47:27:8a:f7:
2c:d5:1f:d8:60:92:fe:03:14:72:df:e7:1d:83:71:
91:e2:f0:40:b4:49:eb:eb:20:b9:c7:19:bb:25:92:
31:ce:9d:45:35:88:3a:61:ba:9b:b2:ed:34:94:2f:
8c:d9:6a:38:a8:93:8c:cd:19:17:94:b6:fd:c1:c7:
9c:81:bf:5f:3d:09:e0:ed:ec:e7:64:81:54:11:a7:
e7:10:4c:64:85:b2:63:21:3d:64:f7:8c:23:70:d9:
6f:17:30:af:60:9a:19:0a:1c:51:72:f2:1d:ff:ef:
2c:dd:ba:22:84:13:98:da:3f:f1:13:33:43:37:da:
0f:40:87:f9:3b:90:f2:8a:d3:10:91:6b:e9:54:63:
d3:3f:8c:e8:70:0e:61:9e:bb:85:ab:b3:ad:97:0c:
49:51:27:2c:3d:28:35:a0:c5:90:bb:35:cb:ae:64:
8a:d3:75:c4:c1:44:b5:7a:c2:a6:9a:b5:8c:7b:5a:
f4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:09:0D:18:20:20:EC:11:39:CC:48:14:86:5C:EF:0B:3B:7C:94:26
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VQkNGCAg7BE5zEgUhlzvCzt8lCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.71.0/24
84.32.77.0/24
84.32.79.0/24
84.32.88.0/24
84.32.148.0/22
84.32.173.0-84.32.174.255
84.32.177.0/24
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.221.0-84.32.222.255
84.32.227.0/24
84.32.229.0/24
84.32.232.0/24
84.32.239.0-84.32.240.255
84.32.242.0-84.32.245.255
84.32.252.0/23
88.216.3.0/24
88.216.17.0/24
88.216.21.0/24
88.216.32.0/24
88.216.36.0/24
88.216.92.0/23
88.216.111.0/24
88.216.128.0/24
88.216.131.0-88.216.133.255
88.216.186.0/24
88.216.189.0/24
88.216.199.0/24
88.216.215.0/24
88.216.228.0-88.216.235.255
Signature Algorithm: sha256WithRSAEncryption
73:6c:0c:59:d5:23:24:fd:e1:f8:19:ad:51:20:1c:dc:e7:a6:
fb:08:ce:32:e3:72:ec:f1:4d:f9:bb:18:ed:5e:36:9b:dc:fc:
26:64:62:09:53:ec:83:46:9a:48:c5:47:cf:6d:b6:7b:1d:fd:
a7:37:c6:53:fe:9e:f4:d1:c4:6a:8f:14:4d:44:77:e0:ab:2d:
59:e3:0c:79:03:26:c4:e2:5a:88:c4:49:1d:d4:80:19:58:d6:
48:2d:72:f4:b1:68:84:ef:1e:89:df:f3:dd:8e:dc:89:8d:c7:
2f:04:c5:9e:dc:86:d8:2d:0d:15:6a:3d:4e:83:93:40:37:89:
a4:42:91:21:fb:93:13:33:7a:41:d1:51:b9:9b:35:b0:a5:d6:
dc:b9:db:24:7f:5e:e7:b3:a2:b1:d6:ef:bf:1a:98:07:0d:9b:
fc:75:63:5a:fb:f3:12:50:4c:40:3e:db:fd:79:f4:1d:ba:21:
a4:08:5f:d8:e7:82:b4:de:7b:c7:f7:1b:59:ae:f4:d9:91:8d:
ad:6e:db:ad:a8:45:aa:8d:6f:d2:be:ce:e1:4a:eb:09:ed:98:
19:4c:7c:61:9d:9c:f5:78:82:a6:70:04:28:cd:4b:e3:13:32:
44:57:f3:44:fd:37:23:e2:5a:28:2f:b7:13:c7:49:c5:4a:04:
56:19:95:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-fra.rpki-client.org