Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hJAp4AR2V1mWuRwHQzJYmXCNV5c.roa
File: hJAp4AR2V1mWuRwHQzJYmXCNV5c.roa (raw, json)
Hash identifier: q1mGD5JlQupLUaCi1fbqNFnufUJSymSj9273U6fOF0I=
Subject key identifier: 84:90:29:E0:04:76:57:59:96:B9:1C:07:43:32:58:99:70:8D:57:97
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01890792A595128C4B676DD8CE253ECDE389
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hJAp4AR2V1mWuRwHQzJYmXCNV5c.roa
Signing time: Thu 29 Jun 2023 14:33:18 +0000
ROA not before: Thu 29 Jun 2023 14:33:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Jul 2023 19:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:07:92:a5:95:12:8c:4b:67:6d:d8:ce:25:3e:cd:e3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 29 14:33:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=849029e00476575996b91c0743325899708d5797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:cc:bb:60:19:c8:c7:71:09:e2:17:f8:fc:
db:5d:39:e7:4b:b7:9e:02:c6:7b:dc:61:ac:f6:d7:
15:51:f3:1c:e6:e1:a9:80:3e:bb:9b:62:b8:0d:d4:
a3:57:c8:d0:3e:1d:54:f9:b6:02:b9:c7:a3:34:8a:
f9:6d:1d:88:00:45:f5:56:c5:2a:34:2a:d7:3e:bd:
53:90:13:58:54:e2:97:b8:2f:c2:89:09:ff:01:1b:
91:7e:b0:1e:87:e1:db:1c:7e:2c:c7:13:cf:4f:51:
13:a2:58:eb:18:16:fe:fb:a0:96:0e:fb:0a:77:21:
0c:dd:03:45:03:a4:1b:73:cd:89:af:ab:d7:c9:07:
4d:49:e0:7c:69:6a:a2:c4:4b:93:91:5e:85:14:8d:
d8:b2:14:99:3d:96:69:28:dd:2c:a6:8a:c8:37:46:
0d:19:c8:1a:7a:34:1c:6a:69:c5:55:59:63:4c:db:
e4:44:14:c6:2b:e1:ce:ad:9c:12:14:86:13:74:30:
7b:32:b7:3d:d1:d6:7e:d3:7a:32:ec:03:e6:5d:3a:
a7:b5:fd:1e:9c:89:f0:b1:26:62:fb:3c:90:3e:4f:
7c:b5:69:8f:19:f8:c3:45:3f:3e:45:9e:ae:a9:c3:
7e:f4:86:4d:94:88:e0:67:16:fe:e7:aa:26:f9:e3:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:90:29:E0:04:76:57:59:96:B9:1C:07:43:32:58:99:70:8D:57:97
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hJAp4AR2V1mWuRwHQzJYmXCNV5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.31.0/24
84.32.46.0/24
84.32.67.0-84.32.68.255
84.32.79.0/24
84.32.92.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.156.0/24
84.32.158.0/23
84.32.178.0/23
84.32.213.0-84.32.215.255
84.32.221.0/24
84.32.224.0/24
84.32.231.0-84.32.232.255
84.32.235.0/24
84.32.239.0-84.32.240.255
84.32.243.0-84.32.247.255
84.32.250.0-84.32.253.255
88.216.0.0/24
88.216.2.0/23
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0/24
88.216.40.0/24
88.216.44.0/23
88.216.58.0/24
88.216.61.0-88.216.65.255
88.216.93.0/24
88.216.100.0/23
88.216.104.0/23
88.216.107.0/24
88.216.109.0-88.216.111.255
88.216.130.0/23
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
04:3c:8d:69:74:e3:60:0c:7c:2f:3c:2d:51:bd:97:e0:d8:4d:
b5:6f:19:52:70:d2:6b:ac:77:ac:b2:c4:5a:16:c3:b0:bb:59:
9a:bf:b0:cf:81:7c:cf:cd:75:68:b5:6b:f6:ea:0d:7a:ed:8a:
b6:19:19:c3:fc:a1:82:34:85:ce:bf:ae:b1:b2:41:4c:33:cb:
77:63:da:cd:61:d6:6f:5b:b9:69:e2:dc:8d:0c:dd:d6:00:d6:
51:e0:40:84:fc:cf:25:fb:61:97:1e:5f:53:51:3c:f9:7d:df:
e6:7f:58:41:d0:ee:56:6e:75:10:7a:f0:3e:6a:ca:39:d1:e5:
e4:11:3c:78:0f:05:f6:78:d3:dc:25:96:f8:9f:f0:0d:c6:29:
15:24:73:66:0c:9e:bf:91:80:a2:63:a4:51:58:a1:4a:55:c9:
a2:57:52:b7:51:d6:de:ee:8a:5f:98:76:56:c4:35:f5:1c:20:
0c:19:18:39:f5:8e:ec:32:d4:23:20:5a:6a:23:b4:f0:e0:fb:
4c:b5:21:d7:ea:99:69:a0:cd:cf:ca:63:94:2f:e4:3c:06:55:
07:34:72:6d:6c:c8:41:bc:4b:58:88:c5:21:bf:90:9c:87:1f:
7e:b3:9a:3d:a2:59:51:61:0d:09:5c:72:99:c9:fe:9e:5a:59:
57:e2:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org