Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bvmKMPVI4O-Ow0tx_2PE73uf0dA.roa
File: bvmKMPVI4O-Ow0tx_2PE73uf0dA.roa (raw, json)
Hash identifier: wCCK2rW24c0zMwyZNZEYoAJ1IvmBGnKIhRN4YRDGq6E=
Subject key identifier: 6E:F9:8A:30:F5:48:E0:EF:8E:C3:4B:71:FF:63:C4:EF:7B:9F:D1:D0
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189CF0F60ADCB5635BC6858E4E31D115665
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bvmKMPVI4O-Ow0tx_2PE73uf0dA.roa
Signing time: Mon 07 Aug 2023 08:13:58 +0000
ROA not before: Mon 07 Aug 2023 08:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.66.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:0f:60:ad:cb:56:35:bc:68:58:e4:e3:1d:11:56:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 7 08:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ef98a30f548e0ef8ec34b71ff63c4ef7b9fd1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5b:10:e4:f2:de:40:5d:37:a1:51:a9:7d:54:
c0:ac:c5:69:fb:fd:1e:b8:aa:78:6a:75:86:72:f1:
a8:aa:d7:bc:ac:f3:ac:28:11:f8:af:1f:1e:79:13:
f7:6c:ea:24:ec:3f:67:19:67:4d:ba:ea:a4:5f:dc:
e7:0b:05:32:f7:5f:d9:e2:aa:92:c2:8a:f0:3e:5a:
45:05:b0:19:c2:0c:09:8e:c9:ff:12:74:a3:a3:07:
03:34:7a:10:6f:f6:d2:d9:6f:10:94:a6:f8:41:7b:
59:ae:77:27:c1:c0:0f:03:ae:32:2c:f1:b1:ca:0f:
01:ae:9e:f2:9c:37:d2:ab:58:e2:0b:b7:5e:d7:a3:
32:3a:82:ad:f0:0e:77:32:09:98:75:3d:8e:ef:d5:
e6:75:86:a7:0a:9f:7d:a6:a1:d0:01:8c:dd:87:fb:
36:21:4b:2d:9a:20:cd:3c:04:e5:17:18:4a:bd:ff:
03:72:86:0f:6e:8a:b7:19:4a:f1:f0:f5:58:d4:9b:
00:dc:d8:d2:4f:a4:6d:70:6b:42:a2:7f:35:eb:79:
88:24:cc:2c:b4:5b:26:43:b5:d8:c5:2c:57:e8:1e:
3f:2d:d6:8c:69:ef:39:ea:70:fc:26:85:4f:8e:51:
b1:e9:61:2f:69:3b:2b:c6:c1:9d:92:35:c6:29:c6:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F9:8A:30:F5:48:E0:EF:8E:C3:4B:71:FF:63:C4:EF:7B:9F:D1:D0
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bvmKMPVI4O-Ow0tx_2PE73uf0dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/23
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.39.0/24
84.32.43.0/24
84.32.45.0/24
84.32.49.0-84.32.51.255
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0/23
84.32.67.0-84.32.68.255
84.32.76.0/24
84.32.83.0/24
84.32.89.0/24
84.32.92.0-84.32.94.255
84.32.105.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.210.0/24
84.32.212.0/22
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0-88.216.36.255
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.60.0-88.216.66.255
88.216.92.0/23
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/22
88.216.197.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.222.0/24
88.216.228.0/22
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
9c:bb:b5:ca:15:76:b3:59:49:75:bf:79:07:c4:4f:91:38:80:
25:cf:b6:39:b9:38:1b:6e:4f:93:07:19:b2:77:b8:7b:e6:70:
53:8e:f1:93:f3:77:3e:eb:8f:1c:87:90:d4:01:1b:59:ce:9f:
19:80:16:7f:16:45:b8:59:fe:50:da:e1:e7:25:98:9e:3d:27:
ce:9a:6e:9d:73:b5:b0:d9:ce:b6:5d:03:2f:77:45:c9:5b:d6:
2f:a8:39:b3:1f:08:9b:f0:04:36:60:c7:91:d5:5e:03:8a:bd:
52:4c:00:fb:56:cb:79:b1:da:2a:f3:99:da:98:22:ae:cb:89:
64:62:09:a2:f6:f1:97:fe:de:f1:1a:de:3f:38:2b:91:d1:19:
a0:0a:94:9d:da:9c:61:dd:8f:d3:89:0e:ff:45:63:6c:17:ca:
b6:6b:7c:41:ea:a4:95:fb:62:4c:41:89:b2:8d:16:4d:64:44:
96:ab:ec:c5:c9:4d:e9:89:71:7c:45:50:db:4f:9f:b9:de:d8:
43:49:a7:f6:57:38:e0:38:ba:fa:47:c4:cb:bc:0f:ab:27:61:
3f:c1:f9:bb:15:53:3e:63:ef:08:9e:5c:5f:dd:bf:0b:b4:89:
ea:11:49:8c:d5:bd:ba:81:c8:78:60:a1:ec:ae:83:46:ed:d0:
2d:89:61:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 09:08:59 2023 by rpki-client on console-ams.rpki-client.org