Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lmeoxI9xlxGwSsgsItGF5DJlAik.roa
File: lmeoxI9xlxGwSsgsItGF5DJlAik.roa (raw, json)
Hash identifier: jit/uwOFitjCiBBu+IhylGKU6+H/RUShpO+Qm1VcQM8=
Subject key identifier: 96:67:A8:C4:8F:71:97:11:B0:4A:C8:2C:22:D1:85:E4:32:65:02:29
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018995D58B10BC02718AAC88477B828C6844
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lmeoxI9xlxGwSsgsItGF5DJlAik.roa
Signing time: Thu 27 Jul 2023 05:32:27 +0000
ROA not before: Thu 27 Jul 2023 05:32:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:95:d5:8b:10:bc:02:71:8a:ac:88:47:7b:82:8c:68:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 27 05:32:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9667a8c48f719711b04ac82c22d185e432650229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:8a:3e:bf:fe:3a:69:45:9e:3b:a1:3f:d5:
c0:b9:82:d5:a6:c7:6a:8a:2a:0b:a8:01:2f:43:35:
1e:5e:25:2f:54:4a:ad:ba:08:ad:12:30:52:4c:38:
7a:9d:b1:73:30:ea:74:9b:f3:69:8f:19:19:35:ca:
51:ef:32:ac:8f:56:d2:45:c4:79:c4:c5:e7:18:20:
fe:31:aa:12:a3:04:ef:e6:9d:26:26:c2:09:48:7d:
70:11:7e:2c:70:ac:16:aa:84:10:10:c9:e7:d8:be:
02:d0:54:b8:eb:bd:8d:c8:73:3d:9c:cb:4e:ca:1e:
e5:06:36:3f:13:6a:2e:2f:bc:c3:92:24:d0:89:68:
f2:75:9c:12:45:c0:87:54:54:c6:9c:1a:62:24:43:
b0:87:83:b7:cc:14:93:ea:98:cb:a7:15:aa:5d:fd:
60:72:8f:13:00:36:d4:a3:cd:b4:80:38:8d:8d:db:
a1:a5:76:0a:c6:e7:58:09:32:77:37:dc:26:2a:07:
d1:d8:9c:48:57:71:3b:e1:7e:d2:b9:60:40:54:6e:
40:44:c4:6b:f4:ea:d0:68:73:df:c7:b7:03:a5:e5:
9a:d5:6f:d6:a5:da:a8:67:7d:5a:c7:05:73:f7:5e:
22:98:22:19:5a:0b:2e:a7:f1:da:7f:0c:d9:da:2a:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:67:A8:C4:8F:71:97:11:B0:4A:C8:2C:22:D1:85:E4:32:65:02:29
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lmeoxI9xlxGwSsgsItGF5DJlAik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/23
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.39.0/24
84.32.45.0-84.32.46.255
84.32.50.0/23
84.32.58.0/24
84.32.61.0/24
84.32.79.0/24
84.32.83.0/24
84.32.89.0/24
84.32.94.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.210.0/24
84.32.212.0/22
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.247.255
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0-88.216.36.255
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.60.0-88.216.65.255
88.216.92.0/23
88.216.101.0/24
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.222.0/24
88.216.228.0/22
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
16:01:ed:e5:b8:0d:ac:67:6e:23:00:e1:7f:6b:92:eb:d0:7c:
59:aa:7c:86:a0:37:f8:85:a2:32:ae:37:24:46:fe:7a:38:76:
ea:5f:a7:43:e5:89:e4:a1:00:b1:dd:31:db:b9:12:93:7a:a0:
35:88:c0:cd:d3:45:bf:56:ff:a3:8f:eb:3b:d5:1c:08:7a:b7:
92:d4:3e:9e:1b:4a:dd:07:05:ff:c5:f2:4d:9a:74:0c:d1:5f:
99:eb:16:87:ca:63:95:69:95:ab:ce:ad:57:24:b4:37:19:f4:
1e:c3:eb:67:6b:f4:39:6d:d6:d8:c9:ad:7b:f7:93:a6:7e:84:
f8:4c:b8:50:79:fb:ed:3f:57:61:74:87:83:53:ee:e8:3e:8a:
6c:7b:64:95:6e:14:4a:7b:14:59:a7:e4:3d:50:1a:bf:c0:62:
66:25:f1:44:f8:20:53:2b:79:b8:16:50:14:48:6f:b0:77:06:
76:1c:b0:cf:3a:7e:fe:54:ec:fa:9f:41:35:4d:b8:3d:53:07:
d0:eb:e4:6d:09:e2:9a:58:5f:5b:81:f7:8b:2a:06:66:9e:a6:
b0:f9:e4:b3:7a:42:36:ac:ac:49:5a:10:f4:d2:2e:a5:d4:86:
6d:29:a9:59:82:77:47:be:4c:53:73:f2:96:7f:8e:21:78:64:
fd:4a:0a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 07:51:22 2023 by rpki-client on console-fra.rpki-client.org