Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/akrk4IY0qCR04n1iwYeXgbhNdZ8.roa
File: akrk4IY0qCR04n1iwYeXgbhNdZ8.roa (raw, json)
Hash identifier: KTHB2ZAKyy7+ju138kNg2hJI3bxNi6Hp15sPbfcDJ1Y=
Subject key identifier: 6A:4A:E4:E0:86:34:A8:24:74:E2:7D:62:C1:87:97:81:B8:4D:75:9F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186E9AF557D4BD1CA84DA371C7FA0E42DB0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/akrk4IY0qCR04n1iwYeXgbhNdZ8.roa
Signing time: Thu 16 Mar 2023 09:10:27 +0000
ROA not before: Thu 16 Mar 2023 09:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.244.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Mar 2023 16:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:af:55:7d:4b:d1:ca:84:da:37:1c:7f:a0:e4:2d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 16 09:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a4ae4e08634a82474e27d62c1879781b84d759f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6f:f8:4b:0c:83:f4:e6:f9:8d:4a:e0:9f:3b:
f8:ab:0b:fa:66:8f:8e:57:7a:2a:39:e1:cc:79:c8:
5b:36:b0:0c:a1:bc:3b:64:37:17:3b:0c:45:17:a0:
e8:cc:50:9d:7e:4a:ea:66:20:b4:8e:a9:81:b9:62:
96:cb:a6:f2:a5:80:cb:e3:d5:08:f8:53:7f:e8:68:
a8:e9:9c:0a:da:92:17:69:d3:a2:fe:f6:69:37:5f:
31:59:65:d4:6b:8a:db:9d:a2:10:f5:0a:1b:57:2c:
2e:c7:91:31:4f:a8:b8:e1:a1:6d:2a:95:8b:df:18:
05:ed:19:e4:dd:05:e0:21:31:f6:5c:d8:ea:c0:96:
da:df:45:df:3d:aa:43:a1:ba:ef:06:1d:b7:70:5d:
51:1c:a0:87:d3:f3:79:48:5e:ee:af:98:06:36:0b:
37:4b:3f:f2:0a:23:b9:e0:f9:d2:a7:f2:81:7e:2e:
32:db:86:2a:d9:89:50:f9:0f:97:ce:33:da:3e:bc:
ad:cc:c8:c1:05:2d:11:b6:8e:47:1c:de:5e:7a:2d:
e4:33:bf:31:ed:98:20:aa:62:0c:fa:0b:19:d5:c7:
9d:ed:96:44:51:30:04:7b:d4:25:63:37:81:59:69:
2c:d9:19:46:b0:a9:a9:6a:bf:b8:a6:3f:9a:52:8d:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4A:E4:E0:86:34:A8:24:74:E2:7D:62:C1:87:97:81:B8:4D:75:9F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/akrk4IY0qCR04n1iwYeXgbhNdZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.71.0/24
84.32.77.0/24
84.32.79.0/24
84.32.88.0/24
84.32.148.0/22
84.32.174.0/23
84.32.177.0/24
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.221.0-84.32.222.255
84.32.224.0/24
84.32.227.0/24
84.32.229.0/24
84.32.232.0/24
84.32.239.0-84.32.240.255
84.32.242.0-84.32.245.255
84.32.252.0/23
88.216.3.0/24
88.216.17.0/24
88.216.21.0/24
88.216.32.0/24
88.216.36.0/24
88.216.92.0/23
88.216.111.0/24
88.216.128.0/24
88.216.131.0-88.216.133.255
88.216.186.0/24
88.216.189.0/24
88.216.199.0/24
88.216.215.0/24
88.216.228.0-88.216.235.255
Signature Algorithm: sha256WithRSAEncryption
8a:7b:b7:b6:8a:d8:08:ec:0e:29:61:41:28:42:56:ca:a1:47:
4c:b1:38:bc:12:d7:bc:a8:8f:6e:fd:43:7e:a2:66:4f:fd:3c:
9c:38:21:d7:04:01:38:9d:fd:d7:64:90:1f:bb:e4:fa:19:5c:
21:34:d8:a6:3d:e5:ff:92:ef:ac:22:94:6a:21:e6:b0:a4:71:
c3:4e:be:2d:d5:d2:8c:2e:1c:9f:71:cd:cf:9a:de:ca:28:41:
95:4f:6d:ab:32:5f:31:7a:46:6c:41:28:99:39:55:ef:ef:59:
ff:0e:c5:98:a8:b5:f0:a5:aa:3a:9d:d5:44:40:44:7f:c7:9a:
85:5d:57:9a:d1:9b:69:4d:ae:75:dc:5d:f4:e5:40:7c:30:1b:
a8:6e:e5:7b:ae:11:34:09:95:f5:a8:c2:7d:cc:ff:58:e5:4a:
6a:8b:45:98:46:38:14:77:17:3b:aa:0b:9d:f8:87:e3:48:a0:
fa:3a:4c:59:6d:34:75:ba:35:ed:23:09:77:55:0e:15:59:3c:
c4:48:6c:dc:c5:98:53:a0:1c:c9:0f:07:6f:15:17:e6:98:e8:
c6:87:b6:28:0d:23:de:9e:07:38:9d:39:ee:bd:c3:f1:dc:09:
58:0b:2e:a6:68:0d:e6:cd:32:5b:d7:09:c4:7c:82:e2:24:00:
79:8c:9d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org