Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_uAmdn48Z2qiVwP2BBl9Dz0Fp3I.roa
File: _uAmdn48Z2qiVwP2BBl9Dz0Fp3I.roa (raw, json)
Hash identifier: iy9MKVAdlkC9RgESfdNQPnmLchYAkfo1Ujjl9O0aM84=
Subject key identifier: FE:E0:26:76:7E:3C:67:6A:A2:57:03:F6:04:19:7D:0F:3D:05:A7:72
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B36B816B1A565FCF38727983F764DC653
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_uAmdn48Z2qiVwP2BBl9Dz0Fp3I.roa
Signing time: Mon 16 Oct 2023 04:21:55 +0000
ROA not before: Mon 16 Oct 2023 04:21:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.253.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.33.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Oct 2023 19:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:36:b8:16:b1:a5:65:fc:f3:87:27:98:3f:76:4d:c6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 16 04:21:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fee026767e3c676aa25703f604197d0f3d05a772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:fe:a2:fd:60:9b:a8:ca:db:99:66:50:16:
af:be:87:5b:80:ea:ad:48:56:c4:bf:e1:59:69:1c:
08:da:74:f1:3e:4d:5c:53:8b:b2:34:cb:3f:dd:dd:
7f:8a:c5:5c:bf:49:da:40:b7:ff:36:66:5c:6b:8f:
17:3f:98:e9:27:6d:63:5d:da:1f:02:d6:a0:13:43:
97:ef:6b:a3:f6:ce:6c:19:a6:99:02:d9:61:46:21:
9c:bd:c0:d2:3d:65:7f:9b:32:34:a4:85:f8:b1:f2:
c2:06:f3:97:09:50:76:ff:34:2e:53:bf:90:24:1f:
c3:2f:38:ad:94:2e:c5:86:bb:46:7b:0c:dd:f1:10:
66:2f:88:77:fb:31:50:4f:4c:99:27:14:ef:ce:64:
09:02:7d:7c:4c:39:4c:d4:7f:5e:d5:5d:4b:f8:9c:
c2:9e:b4:91:7a:ba:6a:24:da:f2:c3:07:b4:a6:8b:
e3:95:24:85:36:eb:9a:fb:f4:35:b5:9c:73:a4:f1:
a1:2c:dc:8e:25:21:1c:21:d9:40:9c:c0:40:71:6c:
31:b7:1f:13:49:fb:c5:5b:d2:a1:37:9b:83:fe:d0:
78:1a:4c:5d:c5:93:22:87:4b:02:f7:6b:60:cb:91:
12:8f:fa:08:a1:ca:4d:e2:a1:29:7b:7e:d2:86:15:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E0:26:76:7E:3C:67:6A:A2:57:03:F6:04:19:7D:0F:3D:05:A7:72
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_uAmdn48Z2qiVwP2BBl9Dz0Fp3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.8.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.42.0/23
84.32.46.0/23
84.32.62.0/24
84.32.64.0-84.32.66.255
84.32.68.0/24
84.32.77.0/24
84.32.83.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0/23
84.32.95.0/24
84.32.105.0/24
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0-84.32.176.255
84.32.178.0/23
84.32.211.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0/24
84.32.234.0/23
84.32.238.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.251.255
84.32.253.0-84.32.255.255
88.216.0.0/23
88.216.3.0/24
88.216.16.0/24
88.216.22.0/23
88.216.33.0/24
88.216.35.0/24
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.47.0/24
88.216.58.0/24
88.216.64.0/23
88.216.93.0/24
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
16:42:a1:40:48:fa:1e:60:44:3f:cc:88:56:c2:32:94:0d:68:
69:68:ca:20:09:d6:7e:5f:57:ee:e8:79:c5:0e:97:bc:bd:0f:
3b:38:ec:8b:76:82:99:23:65:c0:67:eb:fc:29:86:81:bf:41:
c6:5e:ab:d6:36:68:46:4e:04:17:f2:ab:dc:1c:9a:b5:ed:1b:
1d:1e:7c:9f:5f:5b:01:52:d6:7a:3d:de:bd:c2:8d:af:d4:90:
28:f2:61:98:c6:5d:cc:27:e1:a0:9a:3c:c7:75:c7:be:2a:dd:
10:d9:b8:5f:a2:44:30:fe:ec:8b:4e:cc:b9:41:51:55:ea:28:
2d:b1:d2:1f:f8:c7:c3:72:99:1e:f5:ce:59:01:1f:fc:81:aa:
4e:50:4c:73:75:8e:90:80:e7:c2:72:9e:19:1a:04:1a:4a:94:
4b:b3:20:89:45:d7:b5:9c:b2:6f:f2:8e:5f:3a:7e:04:13:57:
4c:89:d1:5e:49:f7:22:f3:4f:0e:85:64:4a:94:9e:d0:66:87:
52:41:52:99:ad:c1:6b:e7:19:7c:3f:6b:10:45:d3:b5:54:e1:
95:ac:24:6b:4c:c1:94:41:b1:de:7b:f7:37:eb:14:fa:81:76:
94:41:84:12:38:e1:9d:c4:73:bc:41:c6:7f:e5:a9:57:14:c9:
03:fa:11:f6
-----BEGIN CERTIFICATE-----
MIIG+jCCBeKgAwIBAgISAYs2uBaxpWX884cnmD92TcZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMxMDE2MDQyMTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWUwMjY3NjdlM2M2NzZhYTI1NzAzZjYwNDE5N2QwZjNkMDVhNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj/+ov1gm6jK25lmUBavvodbgOqt
SFbEv+FZaRwI2nTxPk1cU4uyNMs/3d1/isVcv0naQLf/NmZca48XP5jpJ21jXdof
AtagE0OX72uj9s5sGaaZAtlhRiGcvcDSPWV/mzI0pIX4sfLCBvOXCVB2/zQuU7+Q
JB/DLzitlC7FhrtGewzd8RBmL4h3+zFQT0yZJxTvzmQJAn18TDlM1H9e1V1L+JzC
nrSRerpqJNrywwe0povjlSSFNuua+/Q1tZxzpPGhLNyOJSEcIdlAnMBAcWwxtx8T
SfvFW9KhN5uD/tB4GkxdxZMih0sC92tgy5ESj/oIocpN4qEpe37ShhV+aQIDAQAB
o4IEBjCCBAIwHQYDVR0OBBYEFP7gJnZ+PGdqolcD9gQZfQ89BadyMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvX3VBbWRuNDhaMnFpVndQMkJCbDlEejBGcDNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICGgYIKwYBBQUHAQcBAf8EggIJMIICBTCCAgEEAgABMIIB
+QMEAFQgBDAMAwQAVCAHAwQAVCAIAwQAVCAOMAwDBAJUIBQDBAFUIBwDBABUIB8D
BAFUICoDBAFUIC4DBABUID4wDAMEBlQgQAMEAFQgQgMEAFQgRAMEAFQgTQMEAFQg
UwMEAFQgVTAMAwQDVCBYAwQAVCBaAwQBVCBcAwQAVCBfAwQAVCBpAwQCVCCUAwQA
VCCZAwQAVCCbMAwDBABUIJ0DBAVUIIAwDAMEAVQgrgMEAFQgsAMEAVQgsjAMAwQA
VCDTAwQDVCDQAwQAVCDbAwQAVCDdAwQAVCDgAwQAVCDiAwQAVCDkAwQAVCDoAwQB
VCDqMAwDBAFUIO4DBABUIPIDBAJUIPQwDAMEAFQg+QMEAlQg+DALAwQAVCD9AwMA
VCADBAFY2AADBABY2AMDBABY2BADBAFY2BYDBABY2CEDBABY2CMDBABY2CYDBABY
2CgDBABY2CoDBAFY2CwDBABY2C8DBABY2DoDBAFY2EADBABY2F0DBABY2F8wDAME
AFjYZQMEAFjYZgMEAljYaDAMAwQAWNhtAwQEWNhgMAwDBAdY2IADBABY2IQDBAFY
2IYwDAMEAFjYuwMEBljYgDAMAwQAWNjFAwQAWNjGAwQAWNjQMAwDBABY2NMDBANY
2NADBABY2NwDBABY2N8DBAJY2OQDBAJY2OwwDQYJKoZIhvcNAQELBQADggEBABZC
oUBI+h5gRD/MiFbCMpQNaGloyiAJ1n5fV+7oecUOl7y9Dzs47It2gpkjZcBn6/wp
hoG/QcZeq9Y2aEZOBBfyq9wcmrXtGx0efJ9fWwFS1no93r3Cja/UkCjyYZjGXcwn
4aCaPMd1x74q3RDZuF+iRDD+7ItOzLlBUVXqKC2x0h/4x8NymR71zlkBH/yBqk5Q
THN1jpCA58JynhkaBBpKlEuzIIlF17Wcsm/yjl86fgQTV0yJ0V5J9yLzTw6FZEqU
ntBmh1JBUpmtwWvnGXw/axBF07VU4ZWsJGtMwZRBsd579zfrFPqBdpRBhBI44Z3E
c7xBxn/lqVcUyQP6EfY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org