Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hMZFqgrEgmkVV1Y4SjvCjzRDT0w.roa
File: hMZFqgrEgmkVV1Y4SjvCjzRDT0w.roa (raw, json)
Hash identifier: ODeY1S5bNmgrMsgQYtmgOfbHe1GklfrtVze5rZfWCR4=
Subject key identifier: 84:C6:45:AA:0A:C4:82:69:15:57:56:38:4A:3B:C2:8F:34:43:4F:4C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189BB790966AB8E04EF2FA3342A41DE4129
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hMZFqgrEgmkVV1Y4SjvCjzRDT0w.roa
Signing time: Thu 03 Aug 2023 12:56:58 +0000
ROA not before: Thu 03 Aug 2023 12:56:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.94.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:79:09:66:ab:8e:04:ef:2f:a3:34:2a:41:de:41:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 3 12:56:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84c645aa0ac48269155756384a3bc28f34434f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:56:02:f8:ab:8e:03:ff:cd:f4:2b:ea:1f:
2f:05:fd:97:17:6e:0c:61:34:f6:40:ee:cd:d2:86:
cc:6e:7f:74:13:04:7c:36:04:65:d7:43:0b:eb:3b:
1c:9a:96:51:05:ef:58:5d:b8:5c:92:dd:1d:02:e0:
6c:d8:71:d8:32:c7:6b:da:ec:6e:79:dd:f4:e0:9f:
2d:44:41:49:80:22:66:dc:fa:4d:7e:ed:04:dc:64:
ab:d5:ae:87:74:e1:d4:73:63:d9:c7:ae:26:2d:3a:
6d:6e:d8:c9:3f:91:48:18:de:06:42:2b:09:a6:2c:
cd:b5:19:d5:0d:3e:5f:4e:fa:46:4b:d3:08:f8:3e:
a8:b7:ab:44:04:40:c8:f6:af:72:5f:06:ae:2c:26:
a4:4a:ca:3a:9d:6f:ab:4c:bb:b8:09:cb:87:34:e9:
04:4a:58:17:49:01:85:33:b6:36:52:0f:52:24:fb:
4a:b0:e5:58:22:0b:83:39:1e:6d:f1:7d:58:01:d6:
ab:26:0a:45:0e:28:5e:f9:53:90:c0:7e:0a:20:22:
8e:f9:11:a3:b1:02:1c:c9:10:25:4b:cc:81:c5:31:
ef:b4:68:ac:69:99:96:3b:a1:4e:46:1c:8a:6d:93:
78:d7:95:80:19:20:20:b0:03:d9:0f:f6:49:fd:d8:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C6:45:AA:0A:C4:82:69:15:57:56:38:4A:3B:C2:8F:34:43:4F:4C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hMZFqgrEgmkVV1Y4SjvCjzRDT0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/23
84.32.14.0/24
84.32.20.0-84.32.28.255
84.32.31.0/24
84.32.39.0/24
84.32.43.0/24
84.32.45.0/24
84.32.50.0/23
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0/23
84.32.67.0-84.32.68.255
84.32.76.0/24
84.32.83.0/24
84.32.89.0/24
84.32.92.0-84.32.94.255
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.210.0/24
84.32.212.0/22
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0-88.216.36.255
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.60.0-88.216.65.255
88.216.92.0-88.216.94.255
88.216.101.0/24
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/22
88.216.197.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.222.0/24
88.216.228.0/22
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
5e:ce:8b:f2:46:e5:46:9c:27:2b:b0:1c:86:e4:90:ef:19:7a:
96:11:27:d8:79:34:59:37:66:10:34:d8:16:26:50:b5:66:4b:
0b:b1:42:a5:b5:69:15:64:72:f5:e9:0b:06:2c:81:f0:1f:bb:
19:eb:87:4c:49:76:f9:60:9a:78:0b:7b:7e:ae:94:8b:7e:31:
0d:c5:1a:8a:a4:60:8e:8d:bd:62:76:14:8e:7c:1f:b8:c7:c5:
ef:35:bc:84:25:f0:58:ef:31:ef:d4:e9:4b:f3:93:3f:80:08:
dc:16:18:51:89:20:b1:0b:f0:0a:c8:a6:a9:0b:75:83:6b:a1:
cd:c8:4d:d5:a5:8d:49:4b:de:29:d9:ec:87:53:c9:4b:ef:50:
89:09:da:18:26:40:13:01:7a:13:5f:27:e6:a8:d9:ba:7a:50:
8d:de:30:c6:bb:c7:4c:99:f9:96:d1:60:7e:6e:c5:9d:c8:a1:
a7:a2:94:94:fd:b0:01:86:d3:9d:67:48:2b:93:2c:00:9a:71:
76:b8:ab:a4:62:50:25:9c:20:7d:30:48:24:63:4b:41:7f:1d:
7d:cc:c3:7a:cf:53:aa:60:46:bc:88:ed:b3:e4:9b:75:a8:9d:
b2:4a:ff:9d:bc:f2:5c:4e:04:8e:3b:4e:10:0b:02:25:82:ec:
34:bd:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 08:57:36 2023 by rpki-client on console-fra.rpki-client.org