Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XVVlgj8N2XXEBnNZ6UnO1EPJF-I.roa
File: XVVlgj8N2XXEBnNZ6UnO1EPJF-I.roa (raw, json)
Hash identifier: wy7JWnZEuuL5RxA18FKc3itwSePM1kAJ1fjbIFZIaeA=
Subject key identifier: 5D:55:65:82:3F:0D:D9:75:C4:06:73:59:E9:49:CE:D4:43:C9:17:E2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018AFEA5916EB46302441AB6CAC617C1C79E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XVVlgj8N2XXEBnNZ6UnO1EPJF-I.roa
Signing time: Thu 05 Oct 2023 07:02:58 +0000
ROA not before: Thu 05 Oct 2023 07:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.236.0/23 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 05:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:a5:91:6e:b4:63:02:44:1a:b6:ca:c6:17:c1:c7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 5 07:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d5565823f0dd975c4067359e949ced443c917e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:64:f0:42:e5:b7:0e:07:8c:52:dc:08:f5:9d:
ed:80:37:b4:be:5c:3c:94:92:1b:c1:13:e3:7b:34:
54:d8:70:86:1d:57:ad:a6:66:8f:0d:42:5e:5a:25:
07:70:6a:76:fa:0c:4c:5f:17:28:0d:38:b5:a5:73:
f4:52:42:52:28:c5:84:2a:a0:34:38:16:2e:0c:12:
ce:30:7a:0d:a6:65:a2:e2:7a:99:62:c4:5f:d4:7a:
55:1e:8e:62:4d:98:71:b7:ec:02:56:00:20:0c:a7:
9a:76:e8:b8:91:67:b8:66:a5:fa:58:76:51:7a:10:
05:de:c1:aa:4a:5b:d4:1b:ea:63:2b:b0:2f:51:fc:
63:51:88:b7:9c:ac:80:2f:0b:3d:e9:85:e4:dc:0d:
df:80:b7:51:89:8b:1c:88:0d:01:5e:53:4c:a3:b0:
07:ad:3d:26:52:c3:a7:ab:6e:1c:49:df:45:af:e2:
0c:5d:c8:62:05:53:4b:aa:4b:88:ae:3e:a4:d7:99:
7a:ad:d8:05:19:b8:3c:12:d0:2f:7f:0a:9a:22:ae:
b2:da:09:52:49:d2:25:0a:59:e7:40:8b:96:59:59:
69:e5:27:49:4c:ae:d0:0e:1a:46:31:f9:f7:87:0c:
f7:d1:24:95:40:cd:f8:18:c6:ed:fc:d1:66:e2:53:
5a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:55:65:82:3F:0D:D9:75:C4:06:73:59:E9:49:CE:D4:43:C9:17:E2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XVVlgj8N2XXEBnNZ6UnO1EPJF-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.8.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.42.0/23
84.32.46.0/23
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0-84.32.66.255
84.32.68.0/24
84.32.76.0/23
84.32.83.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0/22
84.32.105.0/24
84.32.107.0/24
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0-84.32.176.255
84.32.178.0/23
84.32.211.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0/24
84.32.234.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.35.0-88.216.36.255
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.47.0/24
88.216.58.0/24
88.216.64.0/23
88.216.92.0/23
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:cf:76:9d:9e:3d:bf:b0:3e:88:56:a0:f2:13:07:75:46:29:
19:42:57:02:09:49:7b:e6:5d:07:d4:05:fa:49:41:30:8f:28:
b6:a3:c5:79:da:4e:56:51:a6:cd:76:80:07:1f:7e:96:a4:51:
0a:fe:ea:81:a4:16:68:ac:34:36:ab:5e:db:3a:98:0a:59:22:
01:f9:a2:30:de:b4:4e:64:4a:1b:08:8e:e7:32:3a:96:35:de:
98:e6:28:9f:9b:d9:d0:a5:77:64:64:ac:22:09:8e:6d:69:02:
64:2d:fd:87:2a:29:d6:6e:76:6a:dc:3e:94:fd:47:8a:37:08:
59:09:a8:ae:5f:f9:0e:06:37:24:55:a0:6a:20:39:95:7c:d3:
f6:41:f5:81:47:e8:0b:66:0d:6d:59:3d:f4:6a:9f:0b:32:10:
d2:7a:0a:10:c9:fe:be:4a:a0:81:72:99:61:9a:f8:8b:75:0a:
9c:62:bf:79:a6:13:af:ae:b2:e8:df:13:20:ca:a7:4b:32:67:
fc:1f:a1:c4:3b:ac:c2:1b:b0:e0:e0:46:fd:d2:cc:f5:39:f0:
8d:5c:a9:cc:d5:72:5a:a1:e7:4b:74:cf:57:49:a1:f0:49:f7:
a3:b1:f4:3a:51:df:b9:19:f0:be:c0:61:9f:66:f4:84:6a:52:
3b:9d:2b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org