Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gv9RLmV3MzQdDoqR08OBkGhP8XQ.roa
File: gv9RLmV3MzQdDoqR08OBkGhP8XQ.roa (raw, json)
Hash identifier: Jycgt3+jNLGhjaXWhGRHbA29UZL5VwXqTKhpW/+FJSQ=
Subject key identifier: 82:FF:51:2E:65:77:33:34:1D:0E:8A:91:D3:C3:81:90:68:4F:F1:74
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B036E530CF714242133CE386BE0C59825
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gv9RLmV3MzQdDoqR08OBkGhP8XQ.roa
Signing time: Fri 06 Oct 2023 05:20:43 +0000
ROA not before: Fri 06 Oct 2023 05:20:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.236.0/23 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.253.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.104.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Oct 2023 17:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:6e:53:0c:f7:14:24:21:33:ce:38:6b:e0:c5:98:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 6 05:20:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82ff512e657733341d0e8a91d3c38190684ff174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ee:5d:6b:12:cc:d8:fd:f3:34:10:21:6c:3a:
06:9a:b3:2a:40:a0:27:66:d0:22:ca:37:c6:20:61:
5e:10:8c:c8:00:8d:d7:fb:46:a6:ea:b2:bf:4f:1d:
34:c2:09:fb:60:eb:c3:bd:8a:7e:b2:71:0b:29:f3:
66:39:f2:ab:a3:e0:1f:36:21:56:d2:dd:a5:d1:29:
03:fe:ea:c6:fb:a9:e0:51:79:af:c2:d4:ad:29:2d:
4d:ba:ea:db:26:ed:74:19:0d:54:dd:08:52:ea:d2:
d4:54:b7:55:35:6b:80:5e:d0:cc:71:ce:48:93:36:
3e:4f:6c:74:c9:49:bb:3a:01:1b:22:92:4f:4a:56:
3f:9c:c1:b8:5c:1f:1b:c3:7f:ad:e5:14:59:10:ff:
83:9e:fb:2a:eb:c2:a6:52:2b:10:48:b5:07:f5:be:
b5:56:f9:70:50:da:83:bf:f7:38:a0:5e:76:b9:a9:
a6:d2:b5:e5:1a:12:ea:7f:28:8e:47:36:5a:b6:80:
8c:63:e1:05:fa:b8:7f:6f:00:d1:e1:00:a7:ae:f3:
df:26:e0:de:4f:c4:9f:b1:60:e9:2f:67:55:e7:a2:
42:35:07:d0:a7:02:09:fe:03:71:ff:f2:aa:bc:07:
95:1e:7a:42:45:3e:27:23:de:5e:fa:21:62:6f:dc:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FF:51:2E:65:77:33:34:1D:0E:8A:91:D3:C3:81:90:68:4F:F1:74
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gv9RLmV3MzQdDoqR08OBkGhP8XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.8.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.42.0/23
84.32.46.0/23
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0-84.32.66.255
84.32.68.0/24
84.32.76.0/23
84.32.83.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0/22
84.32.104.0/23
84.32.107.0/24
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0-84.32.176.255
84.32.178.0/23
84.32.211.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0/24
84.32.234.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.35.0-88.216.36.255
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.47.0/24
88.216.58.0/24
88.216.64.0/23
88.216.92.0/23
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
07:ac:f2:f3:c2:a3:87:c9:53:34:21:90:45:f1:ab:43:4a:4c:
f3:af:dc:c4:66:cc:4f:d0:3a:a6:f6:e1:21:8d:c1:a9:98:35:
cd:d0:c0:ba:85:50:42:06:c6:bb:a9:f7:a0:b6:98:f1:b7:5a:
e3:64:ea:80:6f:62:a9:4e:46:94:96:63:58:34:95:bc:96:9b:
38:e6:64:36:62:90:a3:93:78:31:3b:86:e8:21:f4:b3:2f:78:
b6:b0:99:8f:7e:b6:87:64:19:33:f8:f9:7a:81:1b:64:39:a1:
09:32:43:1f:84:f9:9d:c4:d3:a9:d5:9f:e1:90:31:ee:bb:c8:
36:7b:57:99:d7:f9:9f:e3:90:59:e7:2a:e3:8a:7b:bd:e9:f3:
68:29:cc:c2:c8:3c:6c:d8:0b:87:b6:d1:fe:c4:14:86:7f:34:
dd:bd:df:d7:52:56:53:ff:67:8b:d0:0d:d8:89:93:47:e9:02:
9a:92:29:6b:ef:48:10:5e:2f:e4:e1:3e:e1:0f:a4:20:46:6a:
ab:ca:f9:57:5b:4f:a0:0f:8f:31:da:22:11:10:e0:68:ec:1a:
e4:d8:ba:a3:24:09:7d:19:30:f3:dd:3b:8e:fe:9d:4b:01:d1:
91:c0:68:0b:2f:d0:16:68:53:65:c0:d1:ae:c2:79:ff:25:06:
8d:00:2f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org