Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kjYJbx_2R7_5cTuHuHH89sl2Qoc.roa
File: kjYJbx_2R7_5cTuHuHH89sl2Qoc.roa (raw, json)
Hash identifier: /1YmhlrfEMlX+EwURsPigqVCVLiaEAIFiyGkV5SY6hA=
Subject key identifier: 92:36:09:6F:1F:F6:47:BF:F9:71:3B:87:B8:71:FC:F6:C9:76:42:87
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018A08131BEF01FD30922F9813867B740AD6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kjYJbx_2R7_5cTuHuHH89sl2Qoc.roa
Signing time: Fri 18 Aug 2023 09:56:24 +0000
ROA not before: Fri 18 Aug 2023 09:56:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.66.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:13:1b:ef:01:fd:30:92:2f:98:13:86:7b:74:0a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 18 09:56:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9236096f1ff647bff9713b87b871fcf6c9764287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:81:cf:4a:cb:6a:a8:26:c9:73:e9:e8:d4:
11:63:fe:9f:d9:c2:e9:62:6c:54:36:47:9e:25:75:
68:88:f8:18:f5:eb:a8:11:ce:4e:c8:b4:11:3a:9c:
f3:8e:0e:f7:14:1d:ce:1a:dd:57:0a:a4:b7:04:ac:
61:8c:34:6c:42:fc:d1:14:c3:f9:a5:86:d8:9f:99:
c7:95:2d:21:3e:3d:33:6f:93:ac:e9:d9:c0:50:65:
3c:6e:3c:bd:8e:b8:8b:06:14:2d:ed:69:66:1e:4e:
7b:e9:c9:c2:01:81:38:99:00:12:18:65:74:90:71:
b9:65:ab:86:8b:0c:7c:db:1a:6c:9d:d7:2d:be:16:
1f:69:63:9b:af:7a:48:09:a6:30:53:ba:e6:7b:c4:
fd:9e:c4:ac:94:8e:6c:e5:5a:99:8f:d7:62:87:02:
f7:11:52:df:d2:2e:93:41:26:ca:30:ef:3c:a3:97:
cb:ad:ee:cc:77:2e:d6:23:80:44:a8:29:17:94:83:
6d:ea:5f:36:7f:50:c2:e4:13:f5:96:3a:05:39:6f:
01:68:a3:3e:bf:65:cd:d4:7c:81:29:35:7c:f6:97:
b2:cc:e6:99:5d:7a:99:c1:4f:24:ea:ae:70:bd:e7:
8b:c2:c2:a0:f1:ce:1e:0a:cd:fe:b7:a7:e6:a3:fe:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:36:09:6F:1F:F6:47:BF:F9:71:3B:87:B8:71:FC:F6:C9:76:42:87
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kjYJbx_2R7_5cTuHuHH89sl2Qoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.9.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.39.0/24
84.32.43.0/24
84.32.45.0/24
84.32.49.0-84.32.51.255
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0/23
84.32.67.0-84.32.68.255
84.32.76.0/23
84.32.83.0/24
84.32.88.0/23
84.32.92.0-84.32.94.255
84.32.105.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.210.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0-88.216.36.255
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.60.0-88.216.66.255
88.216.92.0/23
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/22
88.216.197.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.222.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:68:84:42:0d:03:eb:d2:7d:43:d3:a8:a8:96:b4:9b:31:58:
31:74:78:51:5a:6c:fa:c3:3c:75:33:48:79:63:ef:c5:3d:3e:
3b:f0:b4:b3:68:ff:82:98:7e:96:c6:e9:f0:45:65:d7:3b:a6:
83:43:7a:d5:1a:a4:f5:d2:44:0d:26:09:2e:92:15:5c:13:0c:
f4:23:d6:02:70:52:d5:38:55:b3:52:0f:ef:76:b2:4e:f0:6d:
bc:f6:0a:9c:ff:6c:42:1f:d6:2d:61:40:72:59:f8:9a:41:52:
27:91:19:34:53:8d:fc:a5:66:b5:d1:f0:f5:4a:8a:53:7b:d6:
9e:50:df:e8:88:6f:ad:3e:96:f5:41:3c:43:17:96:ef:1e:04:
c7:18:b4:7a:c7:7b:49:61:cc:2e:9a:fa:4b:60:f9:77:21:23:
cc:83:72:f4:b3:ac:1d:b6:5e:2b:4f:d4:54:85:ea:ea:ed:13:
16:3d:4b:5c:39:37:9b:4c:2e:7e:96:d3:b8:35:d3:fe:a5:a7:
d2:ec:bc:36:d4:d2:3c:46:60:a8:45:44:6d:37:24:a2:84:fe:
ec:c4:24:af:d0:d1:8d:82:2a:2e:2a:97:40:96:80:0c:29:42:
df:80:b2:e0:ae:37:aa:18:a2:3e:6e:d7:79:69:27:f5:0d:4c:
47:7c:83:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 12:17:29 2023 by rpki-client on console-fra.rpki-client.org