Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mrKXn47mPW1npEEBwCGbG8TlQig.roa
File: mrKXn47mPW1npEEBwCGbG8TlQig.roa (raw, json)
Hash identifier: zsEUDVk0E3LnGWzyWEp2q7hwHvVElzWREoySmd+3lnM=
Subject key identifier: 9A:B2:97:9F:8E:E6:3D:6D:67:A4:41:01:C0:21:9B:1B:C4:E5:42:28
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018ACAFB8B3BB9121C25B65DA55270F594BB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mrKXn47mPW1npEEBwCGbG8TlQig.roa
Signing time: Mon 25 Sep 2023 06:16:37 +0000
ROA not before: Mon 25 Sep 2023 06:16:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.233.0/24 maxlen: 24
84.32.236.0/23 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.56.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.66.0/24 maxlen: 24
88.216.67.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Sep 2023 11:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ca:fb:8b:3b:b9:12:1c:25:b6:5d:a5:52:70:f5:94:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 25 06:16:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ab2979f8ee63d6d67a44101c0219b1bc4e54228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:f0:e7:64:47:fa:11:5f:73:4b:d6:fc:44:
2d:36:6a:9d:85:c2:63:59:57:df:40:da:6c:51:ed:
ae:86:ad:2b:05:24:8c:ea:2a:7c:fd:4f:a3:db:f8:
96:b2:35:46:0a:a5:0b:5e:3d:a8:45:ee:a7:d2:bb:
9d:6d:4f:fb:f3:5d:07:58:83:cb:20:04:ec:56:ce:
4f:3e:53:26:05:0a:67:80:21:6e:27:37:52:a5:cf:
bc:27:f6:d1:df:0d:fe:d5:30:08:a1:95:42:9f:e2:
a3:85:18:54:c5:96:6b:73:9d:62:c0:86:f1:af:b4:
39:d3:a3:1c:bd:52:cf:9f:60:c6:4f:0f:ea:a0:ca:
bd:ae:a1:f0:f5:ca:7e:16:5d:ba:2e:eb:96:f6:75:
cb:f6:50:f9:f6:a4:0b:19:64:6d:ed:ec:d3:5a:67:
96:20:bb:bd:9b:5b:c3:c2:92:a2:2f:3e:2a:bf:93:
c2:87:c3:81:90:ac:ed:97:31:83:da:1e:45:9f:47:
58:03:0b:45:ec:7d:4f:c6:24:4e:7c:a5:f7:8c:1e:
52:a0:5e:b9:e7:4b:94:de:0d:8e:7d:0a:12:96:e9:
e3:7b:ee:48:00:cf:06:31:d8:c5:f2:80:bf:b2:ea:
e9:4c:d2:d7:94:52:50:68:ff:ab:87:32:da:f9:84:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B2:97:9F:8E:E6:3D:6D:67:A4:41:01:C0:21:9B:1B:C4:E5:42:28
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mrKXn47mPW1npEEBwCGbG8TlQig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.8.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.42.0/23
84.32.46.0/23
84.32.49.0-84.32.51.255
84.32.56.0/24
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0-84.32.66.255
84.32.68.0/24
84.32.76.0/23
84.32.83.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0/22
84.32.105.0/24
84.32.107.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0-84.32.176.255
84.32.178.0/23
84.32.210.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.35.0-88.216.36.255
88.216.40.0/24
88.216.42.0-88.216.45.255
88.216.58.0/24
88.216.60.0-88.216.67.255
88.216.92.0/23
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
88:a1:d2:a7:c4:ba:bf:48:38:3f:0a:77:7c:e1:96:90:c7:09:
18:f5:4c:95:09:0f:b3:c5:0f:a9:54:fc:5b:a7:5a:ff:a0:4f:
6c:4b:6d:ff:1a:19:f5:7a:ef:24:cf:24:df:86:2b:1b:03:c9:
78:a0:46:25:e9:71:c5:ff:04:a7:73:8a:fd:4a:89:ce:79:db:
84:d6:5a:79:49:61:cd:95:52:78:c2:57:a2:b8:f4:4b:55:cb:
2f:eb:c2:04:de:e6:bc:ad:04:df:84:cb:ca:b3:03:f9:f1:54:
56:03:62:bf:fe:c3:47:ed:e9:b9:f6:35:3e:b7:05:5c:f8:28:
f9:aa:22:4a:da:8d:90:67:c5:df:55:b6:bc:72:e5:27:3d:ea:
d6:8d:24:23:9e:b6:5d:25:49:49:1c:8a:e0:ed:28:dd:d2:21:
19:f9:f2:49:10:7f:a5:1c:b4:dc:1f:7d:7d:c6:3b:9c:9f:df:
6a:f5:2f:bc:ae:53:e5:be:27:65:10:4b:cd:14:72:06:51:fa:
f8:fb:14:f9:99:e7:c1:52:fe:23:f3:8a:80:df:39:61:dd:dc:
2b:72:d3:95:2a:5b:1a:11:5a:8b:fc:31:95:95:34:ad:2b:1a:
9a:5b:88:bc:ca:6b:d8:79:f3:72:fa:09:ff:5d:ca:1f:f7:fa:
47:09:42:99
-----BEGIN CERTIFICATE-----
MIIHEDCCBfigAwIBAgISAYrK+4s7uRIcJbZdpVJw9ZS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwOTI1MDYxNjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWIyOTc5ZjhlZTYzZDZkNjdhNDQxMDFjMDIxOWIxYmM0ZTU0MjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoznw52RH+hFfc0vW/EQtNmqdhcJj
WVffQNpsUe2uhq0rBSSM6ip8/U+j2/iWsjVGCqULXj2oRe6n0rudbU/7810HWIPL
IATsVs5PPlMmBQpngCFuJzdSpc+8J/bR3w3+1TAIoZVCn+KjhRhUxZZrc51iwIbx
r7Q506McvVLPn2DGTw/qoMq9rqHw9cp+Fl26LuuW9nXL9lD59qQLGWRt7ezTWmeW
ILu9m1vDwpKiLz4qv5PCh8OBkKztlzGD2h5Fn0dYAwtF7H1PxiROfKX3jB5SoF65
50uU3g2OfQoSlunje+5IAM8GMdjF8oC/surpTNLXlFJQaP+rhzLa+YQqgwIDAQAB
o4IEHDCCBBgwHQYDVR0OBBYEFJqyl5+O5j1tZ6RBAcAhmxvE5UIoMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvbXJLWG40N21QVzFucEVFQndDR2JHOFRsUWlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICMAYIKwYBBQUHAQcBAf8EggIfMIICGzCCAhcEAgABMIIC
DwMEAFQgBDAMAwQAVCAHAwQAVCAIAwQAVCAOMAwDBAJUIBQDBAFUIBwDBABUIB8D
BAFUICoDBAFUIC4wDAMEAFQgMQMEAlQgMAMEAFQgOAMEAFQgOjAMAwQCVCA8AwQA
VCA+MAwDBAZUIEADBABUIEIDBABUIEQDBAFUIEwDBABUIFMDBABUIFUwDAMEA1Qg
WAMEAFQgWgMEAlQgXAMEAFQgaTAMAwQAVCBrAwQAVCBuAwQCVCCUAwQAVCCZAwQA
VCCbMAwDBABUIJ0DBAVUIIAwDAMEAVQgrgMEAFQgsAMEAVQgsjAMAwQBVCDSAwQD
VCDQAwQAVCDbAwQAVCDdAwQAVCDgAwQAVCDiAwQAVCDkMAwDBANUIOgDBABUIPID
BAJUIPQwCwMEAFQg+QMDAFQgAwQCWNgAAwQAWNgQAwQBWNgWMAwDBABY2CMDBABY
2CQDBABY2CgwDAMEAVjYKgMEAVjYLAMEAFjYOjAMAwQCWNg8AwQCWNhAAwQBWNhc
AwQAWNhfMAwDBABY2GUDBABY2GYDBAJY2GgwDAMEAFjYbQMEBFjYYDAMAwQHWNiA
AwQAWNiEAwQBWNiGAwQAWNi0AwQAWNi3MAwDBABY2LsDBAZY2IAwDAMEAFjYxQME
AFjYxgMEAFjY0DAMAwQAWNjTAwQDWNjQAwQAWNjcAwQAWNjfAwQCWNjkAwQCWNjs
MA0GCSqGSIb3DQEBCwUAA4IBAQCIodKnxLq/SDg/Cnd84ZaQxwkY9UyVCQ+zxQ+p
VPxbp1r/oE9sS23/Ghn1eu8kzyTfhisbA8l4oEYl6XHF/wSnc4r9SonOeduE1lp5
SWHNlVJ4wleiuPRLVcsv68IE3ua8rQTfhMvKswP58VRWA2K//sNH7em59jU+twVc
+Cj5qiJK2o2QZ8XfVba8cuUnPerWjSQjnrZdJUlJHIrg7Sjd0iEZ+fJJEH+lHLTc
H319xjucn99q9S+8rlPlvidlEEvNFHIGUfr4+xT5mefBUv4j84qA3zlh3dwrctOV
KlsaEVqL/DGVlTStKxqaW4i8ymvYefNy+gn/Xcof9/pHCUKZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:31 2024 by rpki-client on console-ams.rpki-client.org