Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/oveqBgiE6R5feDMguJIgBE_dCNY.roa
File: oveqBgiE6R5feDMguJIgBE_dCNY.roa (raw, json)
Hash identifier: P350RgNTr7Vtx/bcbLwJciJXb4bAntfRFbiqZn6gTCg=
Subject key identifier: A2:F7:AA:06:08:84:E9:1E:5F:78:33:20:B8:92:20:04:4F:DD:08:D6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01888F5FB0D79EA766D7E3FF19CAAC605FF0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/oveqBgiE6R5feDMguJIgBE_dCNY.roa
Signing time: Tue 06 Jun 2023 06:23:12 +0000
ROA not before: Tue 06 Jun 2023 06:23:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.56.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.59.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:5f:b0:d7:9e:a7:66:d7:e3:ff:19:ca:ac:60:5f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 6 06:23:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2f7aa060884e91e5f783320b89220044fdd08d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:1f:d5:c0:18:a4:f6:5b:fc:89:33:88:a3:
3d:6a:2c:be:82:f6:96:01:ca:87:bc:b6:22:43:34:
33:6f:b7:ff:87:aa:95:fd:53:aa:a1:d3:d9:53:f4:
59:0c:3c:9a:8f:29:f4:22:fc:30:ef:f7:a4:cd:6a:
8d:19:3b:a5:60:37:97:d3:1b:d5:46:f9:b6:d5:a3:
4c:51:4a:2d:1e:56:d3:b1:c9:a1:d9:32:b6:d4:51:
ad:cd:42:7a:98:fb:5f:bc:ba:85:4e:8e:8b:df:2f:
67:3b:c8:7d:fe:f0:ea:36:33:e5:0f:ba:6e:28:20:
6b:19:ab:14:89:a6:eb:24:3c:5e:84:64:7b:83:2d:
46:1f:eb:49:fc:d8:2e:05:93:b7:b6:31:62:3f:82:
2a:dd:b9:9e:4c:29:21:3e:e6:a2:9f:14:a7:e3:11:
c5:64:e9:fc:80:14:dc:08:c4:34:d5:3b:33:c6:d8:
57:d4:ff:e0:8a:fa:aa:2d:b3:85:d6:df:61:6a:eb:
cf:aa:18:81:52:9b:d5:59:51:9b:51:f1:98:80:4e:
12:63:f3:d1:11:d1:24:f9:b3:7c:62:6b:2b:6f:af:
f1:d6:7f:0e:05:a3:1b:52:49:ef:54:10:c6:de:8c:
3b:98:fc:8b:4b:b5:98:0d:e0:d8:33:41:bc:40:dc:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F7:AA:06:08:84:E9:1E:5F:78:33:20:B8:92:20:04:4F:DD:08:D6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/oveqBgiE6R5feDMguJIgBE_dCNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.30.0/24
84.32.46.0/24
84.32.56.0/24
84.32.59.0-84.32.60.255
84.32.62.0/24
84.32.65.0/24
84.32.67.0-84.32.68.255
84.32.79.0/24
84.32.89.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.158.0/23
84.32.177.0-84.32.179.255
84.32.212.0/24
84.32.214.0/23
84.32.221.0/24
84.32.224.0/24
84.32.231.0-84.32.232.255
84.32.235.0/24
84.32.239.0-84.32.240.255
84.32.243.0/24
84.32.250.0-84.32.253.255
88.216.0.0/24
88.216.3.0/24
88.216.16.0/24
88.216.32.0/24
88.216.35.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.100.0/24
88.216.111.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.232.0/21
Signature Algorithm: sha256WithRSAEncryption
11:37:9f:13:46:33:0a:61:7d:db:60:2c:11:43:cf:a1:31:95:
8f:a5:9d:b9:47:ff:4f:10:41:0e:d9:3e:18:eb:91:9f:5f:45:
3b:a6:1b:14:64:5a:56:b0:c9:9e:0d:10:81:b7:e5:50:09:27:
d1:87:a3:29:1a:32:90:30:59:86:43:83:2b:20:ed:43:26:89:
c4:30:95:c7:83:35:7e:0a:46:4c:af:4e:1f:fd:35:23:c2:4a:
21:0e:4d:65:ce:39:bd:5f:9d:5d:97:48:cb:b0:eb:8e:62:d5:
59:54:d0:6e:e1:b8:d3:63:5b:c7:20:73:a3:37:e7:10:9b:31:
fd:d1:de:0c:1d:13:0a:88:83:15:61:0c:19:1c:2d:8c:e3:f3:
0d:24:a7:d3:95:73:df:6b:ea:bb:dd:7e:c2:ee:9a:9e:5c:a9:
e7:35:cd:d9:9a:7c:ea:f0:ae:95:bf:df:45:3c:39:b3:eb:26:
69:12:1b:83:af:8a:c9:df:d2:11:a2:36:24:7d:22:06:b4:f7:
34:f9:69:e7:f7:9e:cb:f1:0b:1d:ce:74:df:55:53:72:a8:bc:
3b:69:a5:ea:29:82:24:6b:6b:e0:0a:fe:bf:4f:2c:c2:5f:47:
a7:cc:e1:cc:b4:f2:b8:ff:bc:72:fb:3a:a0:b5:62:af:ce:68:
09:19:f6:b0
-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgISAYiPX7DXnqdm1+P/GcqsYF/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNjA2MDYyMzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmY3YWEwNjA4ODRlOTFlNWY3ODMzMjBiODkyMjAwNDRmZGQwOGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt0f1cAYpPZb/IkziKM9aiy+gvaW
AcqHvLYiQzQzb7f/h6qV/VOqodPZU/RZDDyajyn0Ivww7/ekzWqNGTulYDeX0xvV
Rvm21aNMUUotHlbTscmh2TK21FGtzUJ6mPtfvLqFTo6L3y9nO8h9/vDqNjPlD7pu
KCBrGasUiabrJDxehGR7gy1GH+tJ/NguBZO3tjFiP4Iq3bmeTCkhPuainxSn4xHF
ZOn8gBTcCMQ01TszxthX1P/givqqLbOF1t9hauvPqhiBUpvVWVGbUfGYgE4SY/PR
EdEk+bN8Ymsrb6/x1n8OBaMbUknvVBDG3ow7mPyLS7WYDeDYM0G8QNx1JQIDAQAB
o4IDWTCCA1UwHQYDVR0OBBYEFKL3qgYIhOkeX3gzILiSIARP3QjWMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvb3ZlcUJnaUU2UjVmZURNZ3VKSWdCRV9kQ05ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBbQYIKwYBBQUHAQcBAf8EggFcMIIBWDCCAVQEAgABMIIB
TAMEAFQgCDAMAwQCVCAUAwQCVCAYAwQAVCAeAwQAVCAuAwQAVCA4MAwDBABUIDsD
BABUIDwDBABUID4DBABUIEEwDAMEAFQgQwMEAFQgRAMEAFQgTwMEAFQgWTAMAwQC
VCBsAwQAVCBuAwQCVCCUAwQBVCCeMAwDBABUILEDBAJUILADBABUINQDBAFUINYD
BABUIN0DBABUIOAwDAMEAFQg5wMEAFQg6AMEAFQg6zAMAwQAVCDvAwQAVCDwAwQA
VCDzMAwDBAFUIPoDBAFUIPwDBABY2AADBABY2AMDBABY2BADBABY2CADBABY2CMD
BAFY2CwwDAMEA1jYOAMEAVjYQAMEAFjYZAMEAFjYbzAMAwQBWNiCAwQAWNiEAwQB
WNiGAwQAWNi0AwQAWNi3AwQBWNi8AwQAWNjFAwQCWNjUAwQAWNjcAwQDWNjoMA0G
CSqGSIb3DQEBCwUAA4IBAQARN58TRjMKYX3bYCwRQ8+hMZWPpZ25R/9PEEEO2T4Y
65GfX0U7phsUZFpWsMmeDRCBt+VQCSfRh6MpGjKQMFmGQ4MrIO1DJonEMJXHgzV+
CkZMr04f/TUjwkohDk1lzjm9X51dl0jLsOuOYtVZVNBu4bjTY1vHIHOjN+cQmzH9
0d4MHRMKiIMVYQwZHC2M4/MNJKfTlXPfa+q73X7C7pqeXKnnNc3Zmnzq8K6Vv99F
PDmz6yZpEhuDr4rJ39IRojYkfSIGtPc0+Wnn957L8QsdznTfVVNyqLw7aaXqKYIk
a2vgCv6/TyzCX0enzOHMtPK4/7xy+zqgtWKvzmgJGfaw
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:33 2023 by rpki-client on console-ams.rpki-client.org