Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jr8c2ONjnlZSDBZLwQxDdM0LRvU.roa
File: jr8c2ONjnlZSDBZLwQxDdM0LRvU.roa (raw, json)
Hash identifier: Z+Px+mHd1WTnaQ2jO5IujX8DId8nbPxdBbWzzK44dt0=
Subject key identifier: 8E:BF:1C:D8:E3:63:9E:56:52:0C:16:4B:C1:0C:43:74:CD:0B:46:F5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01887AA631A5B8C6CDA26928DEC8895BB966
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jr8c2ONjnlZSDBZLwQxDdM0LRvU.roa
Signing time: Fri 02 Jun 2023 05:48:12 +0000
ROA not before: Fri 02 Jun 2023 05:48:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.56.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7a:a6:31:a5:b8:c6:cd:a2:69:28:de:c8:89:5b:b9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 2 05:48:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ebf1cd8e3639e56520c164bc10c4374cd0b46f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:8e:6a:ab:6e:d7:87:f8:1c:77:73:34:15:
39:54:e0:fc:2f:ad:15:70:bd:53:26:15:5c:62:96:
34:58:43:f3:ae:ab:71:cd:90:ea:64:d0:35:f8:26:
41:03:d4:0b:f0:de:1a:41:7a:18:7d:ac:59:9a:a5:
8c:17:d4:09:cd:54:fc:2c:aa:c3:6d:e9:db:a3:9b:
eb:37:66:4c:0e:bf:9d:f7:d5:d6:8d:76:85:73:f9:
c7:15:94:8f:0a:17:4e:b0:9e:cf:49:92:6e:34:46:
8d:c6:c6:ab:00:0b:f9:1f:89:43:e5:61:8a:3f:cb:
e8:66:46:53:36:47:18:e3:d6:22:8c:c4:2a:c7:33:
c2:4b:fd:52:00:ae:30:3c:56:08:63:14:e8:f2:37:
bd:ac:64:25:aa:da:a9:25:4c:e2:ba:99:09:3a:84:
7b:ac:ab:57:97:b5:f7:14:1c:17:01:55:6d:ab:82:
35:8a:c0:e4:66:70:87:9f:24:ab:88:e6:e3:a0:17:
ca:a9:ee:9a:d1:cc:ba:87:d3:8e:02:15:b6:0b:f6:
b0:c1:f5:cf:46:79:e9:39:79:98:fc:4a:20:bc:c2:
47:f1:c4:78:b1:1a:48:ee:c8:49:fc:ec:f8:8b:ad:
12:15:97:75:68:8a:4b:fb:36:6a:5b:52:c8:d2:cf:
31:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:1C:D8:E3:63:9E:56:52:0C:16:4B:C1:0C:43:74:CD:0B:46:F5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jr8c2ONjnlZSDBZLwQxDdM0LRvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.30.0/24
84.32.46.0/24
84.32.56.0/24
84.32.60.0/24
84.32.65.0/24
84.32.67.0-84.32.68.255
84.32.79.0/24
84.32.89.0/24
84.32.110.0/24
84.32.148.0/22
84.32.158.0/23
84.32.177.0/24
84.32.212.0/24
84.32.214.0/23
84.32.221.0/24
84.32.224.0/24
84.32.231.0-84.32.232.255
84.32.235.0/24
84.32.239.0-84.32.240.255
84.32.243.0/24
84.32.250.0-84.32.253.255
88.216.0.0/24
88.216.3.0/24
88.216.16.0/24
88.216.32.0/24
88.216.35.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.100.0/24
88.216.111.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.232.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:44:51:00:6d:51:5c:93:ca:c8:d0:3e:c3:78:3c:c3:f5:d5:
14:75:fa:c8:33:12:0c:54:73:6d:32:91:39:85:32:7b:07:fc:
c2:df:bf:99:9c:64:57:25:a6:58:35:64:59:1f:7b:d4:d0:ed:
72:e7:6e:5b:0d:72:8e:ec:e4:95:32:b4:7f:88:68:42:70:86:
41:aa:35:de:ad:d4:93:9c:a9:5f:c4:31:9a:64:f4:bb:bd:c6:
f9:0b:dc:63:c6:8f:1f:27:c4:15:ec:46:7f:8e:6a:06:55:0a:
81:4c:ee:29:ce:c6:0e:6c:96:33:63:51:1d:2f:ce:8c:2c:fa:
b5:c4:3a:9b:34:58:e5:b7:3a:a8:1c:8f:93:a6:8b:74:5d:15:
65:dd:1b:bf:d5:55:87:51:46:f1:78:5e:4f:3f:9b:af:87:ca:
39:7c:4d:5b:39:fc:13:64:7d:42:9e:27:2c:a9:3e:f9:2b:dd:
65:a3:29:ad:7f:d8:7b:54:7c:a6:97:38:f4:b9:d3:c6:6f:85:
08:9c:87:34:40:6a:3c:6e:7f:32:f6:d1:42:c2:58:c5:b7:09:
f6:cc:4b:69:e8:ea:33:4d:52:e0:46:8c:54:a8:34:54:d4:20:
d3:00:4e:db:24:3e:42:d7:eb:7d:f9:e8:e9:a8:ba:cf:93:e7:
a6:46:7d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:50 2023 by rpki-client on console-fra.rpki-client.org