Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bFJBTThzW4fAaqjArMKmi6TopwA.roa
File: bFJBTThzW4fAaqjArMKmi6TopwA.roa (raw, json)
Hash identifier: DjYRTkaRV2tM46s4c0F2/Q79HXZMZh/N7dFo7ghA164=
Subject key identifier: 6C:52:41:4D:38:73:5B:87:C0:6A:A8:C0:AC:C2:A6:8B:A4:E8:A7:00
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188478171BE2AB0538ACEE8F7C4A163ED4D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bFJBTThzW4fAaqjArMKmi6TopwA.roa
Signing time: Tue 23 May 2023 07:27:25 +0000
ROA not before: Tue 23 May 2023 07:27:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.217.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.108.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.19.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:81:71:be:2a:b0:53:8a:ce:e8:f7:c4:a1:63:ed:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 23 07:27:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c52414d38735b87c06aa8c0acc2a68ba4e8a700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:59:f4:e9:9a:b2:e8:e7:3d:8a:23:69:3d:1c:
a0:02:8d:97:f7:a9:29:bd:49:49:53:ea:b7:b0:cd:
d1:e2:c7:bc:20:dd:97:63:ad:45:43:79:3e:8a:43:
86:fc:5e:3d:7f:45:3c:d3:6d:75:4d:f6:f2:e5:b6:
97:ee:ee:d2:aa:35:3f:28:c2:91:8d:83:a2:6c:3c:
36:13:9a:f3:c3:6d:7a:79:be:a8:35:a7:37:b1:82:
33:a0:d9:4f:f9:8c:35:43:84:d6:eb:e4:1b:d6:08:
0c:c1:43:c1:af:0a:4e:44:b5:dc:46:80:f8:60:67:
46:0a:e3:5e:fd:10:cf:c2:68:d8:88:11:2b:b6:2b:
e4:49:f9:3d:e7:e8:ae:f2:1c:ea:ff:30:e2:76:7c:
d5:ab:66:89:82:07:a3:31:09:7c:8d:56:d5:05:41:
b8:8d:79:02:87:c6:64:d5:7d:4b:6e:49:09:e1:d5:
c0:4c:d0:d2:b3:a2:ad:c4:66:57:4c:24:b7:c4:88:
97:0f:49:16:0a:8a:e3:ec:37:b4:45:69:57:c8:9f:
48:02:72:f6:47:f0:c1:7f:f4:1e:ff:90:2f:c9:7b:
ef:fe:9f:72:6c:c0:49:0d:3e:ff:bd:91:b6:ef:5f:
c1:43:15:5b:b6:12:86:8f:f3:8f:f5:8e:a9:7e:2b:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:52:41:4D:38:73:5B:87:C0:6A:A8:C0:AC:C2:A6:8B:A4:E8:A7:00
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bFJBTThzW4fAaqjArMKmi6TopwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.60.0/24
84.32.67.0-84.32.68.255
84.32.70.0/24
84.32.77.0/24
84.32.79.0/24
84.32.89.0/24
84.32.110.0/24
84.32.148.0/22
84.32.158.0/23
84.32.177.0/24
84.32.212.0/22
84.32.217.0-84.32.218.255
84.32.221.0/24
84.32.224.0/23
84.32.231.0-84.32.232.255
84.32.235.0/24
84.32.239.0-84.32.240.255
84.32.242.0/23
84.32.250.0-84.32.253.255
88.216.0.0/22
88.216.16.0/24
88.216.19.0/24
88.216.32.0/24
88.216.35.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.100.0/24
88.216.105.0/24
88.216.107.0-88.216.108.255
88.216.111.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/23
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.208.0/24
88.216.212.0/22
88.216.220.0/24
88.216.232.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:e5:b9:3d:30:ce:4d:47:03:8d:41:79:2b:be:d5:9f:c8:f0:
89:ce:0e:57:77:28:f1:66:68:dd:e7:5b:09:b9:bb:64:67:5c:
0a:df:5d:62:2d:14:58:0b:e4:4c:5f:9a:1b:ff:c2:14:e9:8b:
cc:c4:e1:01:5b:c1:26:7b:5a:2e:a0:55:b8:50:c9:b9:c1:b1:
e0:bd:5f:8c:91:62:2b:79:23:f7:7f:b8:cb:01:8c:a0:ee:77:
15:f9:58:1b:36:2a:15:05:c6:4e:9c:08:45:94:17:fb:4f:1a:
2a:0c:d1:f3:37:e5:4a:87:83:17:eb:38:93:67:65:e2:c8:9e:
53:fe:ee:64:ac:cb:2e:09:24:d8:f2:e4:c2:87:ee:a3:6e:73:
7e:01:05:77:95:05:b0:54:c9:07:79:1d:27:66:dc:b5:a3:0a:
a0:5c:b8:43:37:86:5d:54:05:35:a7:7e:e7:77:fd:2b:b3:0f:
fe:09:15:04:4e:f1:5d:aa:4b:23:68:38:32:1d:19:cf:04:02:
af:6e:e2:23:ef:c8:e7:d0:bc:6d:2c:a7:1a:3a:df:d9:e0:1d:
90:07:6a:91:4b:ba:cb:93:6a:3d:52:38:95:71:fc:c6:c0:f8:
ba:bb:7c:88:bb:54:7e:f9:c0:32:0f:0b:aa:f1:6c:48:90:50:
a4:c9:34:21
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgISAYhHgXG+KrBTis7o98ShY+1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNTIzMDcyNzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzUyNDE0ZDM4NzM1Yjg3YzA2YWE4YzBhY2MyYTY4YmE0ZThhNzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFn06Zqy6Oc9iiNpPRygAo2X96kp
vUlJU+q3sM3R4se8IN2XY61FQ3k+ikOG/F49f0U80211Tfby5baX7u7SqjU/KMKR
jYOibDw2E5rzw216eb6oNac3sYIzoNlP+Yw1Q4TW6+Qb1ggMwUPBrwpORLXcRoD4
YGdGCuNe/RDPwmjYiBErtivkSfk95+iu8hzq/zDidnzVq2aJggejMQl8jVbVBUG4
jXkCh8Zk1X1LbkkJ4dXATNDSs6KtxGZXTCS3xIiXD0kWCorj7De0RWlXyJ9IAnL2
R/DBf/Qe/5AvyXvv/p9ybMBJDT7/vZG271/BQxVbthKGj/OP9Y6pfisaXQIDAQAB
o4IDVTCCA1EwHQYDVR0OBBYEFGxSQU04c1uHwGqowKzCpouk6KcAMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvYkZKQlRUaHpXNGZBYXFqQXJNS21pNlRvcHdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBaQYIKwYBBQUHAQcBAf8EggFYMIIBVDCCAVAEAgABMIIB
SAMEAFQgCAMEAlQgGAMEAFQgHgMEAFQgLgMEAFQgPDAMAwQAVCBDAwQAVCBEAwQA
VCBGAwQAVCBNAwQAVCBPAwQAVCBZAwQAVCBuAwQCVCCUAwQBVCCeAwQAVCCxAwQC
VCDUMAwDBABUINkDBABUINoDBABUIN0DBAFUIOAwDAMEAFQg5wMEAFQg6AMEAFQg
6zAMAwQAVCDvAwQAVCDwAwQBVCDyMAwDBAFUIPoDBAFUIPwDBAJY2AADBABY2BAD
BABY2BMDBABY2CADBABY2CMDBAFY2CwwDAMEA1jYOAMEAVjYQAMEAFjYZAMEAFjY
aTAMAwQAWNhrAwQAWNhsAwQAWNhvMAwDBAFY2IIDBABY2IQDBAFY2IYDBAFY2LQD
BABY2LcDBAFY2LwDBABY2MUDBABY2NADBAJY2NQDBABY2NwDBANY2OgwDQYJKoZI
hvcNAQELBQADggEBAKDluT0wzk1HA41BeSu+1Z/I8InODld3KPFmaN3nWwm5u2Rn
XArfXWItFFgL5Exfmhv/whTpi8zE4QFbwSZ7Wi6gVbhQybnBseC9X4yRYit5I/d/
uMsBjKDudxX5WBs2KhUFxk6cCEWUF/tPGioM0fM35UqHgxfrOJNnZeLInlP+7mSs
yy4JJNjy5MKH7qNuc34BBXeVBbBUyQd5HSdm3LWjCqBcuEM3hl1UBTWnfud3/Suz
D/4JFQRO8V2qSyNoODIdGc8EAq9u4iPvyOfQvG0spxo639ngHZAHapFLusuTaj1S
OJVx/MbA+Lq7fIi7VH75wDIPC6rxbEiQUKTJNCE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org