Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jeeEkJcP5bnGPsUuRyLXEaRc1k8.roa
File: jeeEkJcP5bnGPsUuRyLXEaRc1k8.roa (raw, json)
Hash identifier: sbe2yq+mJlLBxMGEbr1O0hkCQ1JGv87cp89RJCrRmp0=
Subject key identifier: 8D:E7:84:90:97:0F:E5:B9:C6:3E:C5:2E:47:22:D7:11:A4:5C:D6:4F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188A03C64B9A94484546B723D53E4F7A189
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jeeEkJcP5bnGPsUuRyLXEaRc1k8.roa
Signing time: Fri 09 Jun 2023 12:58:12 +0000
ROA not before: Fri 09 Jun 2023 12:58:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.56.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a0:3c:64:b9:a9:44:84:54:6b:72:3d:53:e4:f7:a1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 9 12:58:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8de78490970fe5b9c63ec52e4722d711a45cd64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:98:b4:cb:ba:ea:63:84:94:7f:b6:e4:9e:50:
26:13:d8:0b:d6:ad:91:43:19:aa:45:da:fa:3a:81:
85:f0:a3:44:9a:fd:4f:c4:1d:cb:ab:0e:ba:83:cc:
d9:d2:2e:66:ad:d8:ae:0b:f0:8a:f6:fd:83:e0:56:
91:ee:89:84:21:88:f3:31:eb:02:6a:02:ad:54:a6:
53:40:b8:44:0d:09:08:40:63:3d:a6:e9:09:ad:32:
80:8c:60:e9:78:80:b3:a1:2a:a3:64:42:34:e1:da:
74:ef:ec:42:a3:19:8a:ee:77:f0:d4:2b:c8:96:c1:
68:63:eb:ef:c6:ee:df:e9:08:f7:21:8d:f2:b9:d8:
fc:c8:8d:47:ce:5f:c2:5c:71:4c:ee:4c:14:a3:c4:
0e:e6:2a:f3:be:f4:e9:67:de:8a:ff:2e:96:42:69:
fa:cb:32:8d:8f:f9:f5:0f:d7:08:60:35:5e:52:08:
53:25:bb:45:30:93:e6:bb:bf:cd:0a:98:a8:b5:b1:
11:b3:f4:db:99:2d:af:b4:59:42:85:15:4f:c9:77:
01:d6:e6:49:76:86:dc:a0:49:c7:26:3f:ac:e3:86:
3c:9b:e7:c2:96:f6:35:8b:8a:c9:8e:6f:0c:cd:ba:
99:88:6b:92:6b:be:e3:0d:e7:8e:92:d3:71:7d:b5:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E7:84:90:97:0F:E5:B9:C6:3E:C5:2E:47:22:D7:11:A4:5C:D6:4F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jeeEkJcP5bnGPsUuRyLXEaRc1k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.30.0/23
84.32.46.0/24
84.32.56.0/24
84.32.60.0/24
84.32.62.0/24
84.32.65.0/24
84.32.67.0-84.32.68.255
84.32.79.0/24
84.32.89.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.158.0/23
84.32.177.0-84.32.179.255
84.32.212.0/24
84.32.214.0/23
84.32.221.0/24
84.32.224.0/24
84.32.231.0-84.32.232.255
84.32.235.0/24
84.32.239.0-84.32.240.255
84.32.243.0/24
84.32.250.0-84.32.253.255
88.216.0.0/24
88.216.3.0/24
88.216.16.0/24
88.216.32.0/24
88.216.35.0/24
88.216.38.0/23
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.100.0/23
88.216.111.0/24
88.216.130.0/23
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.236.0/22
88.216.244.0/22
Signature Algorithm: sha256WithRSAEncryption
19:d2:ca:d3:10:35:2d:b8:69:f5:30:d3:12:30:80:6a:8a:97:
25:d0:b1:84:7f:bd:b6:dc:7f:9d:e0:75:dd:df:21:c7:d0:d7:
4b:1e:42:dc:f1:5d:b3:a7:d4:9a:91:50:fd:6b:e6:41:46:62:
86:5a:92:2b:c2:b0:c1:6a:8e:de:87:88:71:fe:ab:b6:c3:9e:
f3:5f:37:f4:0a:ae:97:ee:70:34:ca:12:52:9b:9d:95:b1:c4:
e6:ad:96:f3:d6:0d:8e:f2:c9:11:c0:64:08:fa:50:35:d1:f1:
df:d9:30:f5:f1:77:9d:91:15:9b:e5:fe:06:e7:59:58:eb:b6:
28:31:9c:c7:6e:27:0c:a6:5b:66:84:08:39:9a:bb:85:51:f5:
ed:10:17:c1:06:46:6d:83:2b:a1:1d:ee:40:e8:0b:85:63:18:
38:99:bd:59:f8:8d:f1:20:73:0e:aa:0d:c1:72:fd:01:2e:c7:
bf:f8:7e:57:7e:10:a2:8c:02:d7:ee:8b:ee:e8:87:59:4f:99:
dd:ab:be:63:43:fb:b2:e1:91:f2:82:75:71:3f:a3:e2:9d:64:
ac:34:61:a1:f5:ea:d6:1d:cd:1d:f8:16:55:33:e4:59:7c:d2:
cc:1b:e3:b1:74:34:ec:68:03:2c:97:c6:8e:70:e6:99:34:53:
16:97:35:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:32 2023 by rpki-client on console-ams.rpki-client.org