Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pu1T9EynFBXYc-IZKYlSE8LmjXA.roa
File: pu1T9EynFBXYc-IZKYlSE8LmjXA.roa (raw, json)
Hash identifier: STer7bwnflHp1CDMNtMxxqPvHGsQCgqyCCWCEH2g65M=
Subject key identifier: A6:ED:53:F4:4C:A7:14:15:D8:73:E2:19:29:89:52:13:C2:E6:8D:70
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B277587DBAC9CDF393FE5EDF1E304391A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pu1T9EynFBXYc-IZKYlSE8LmjXA.roa
Signing time: Fri 13 Oct 2023 05:14:55 +0000
ROA not before: Fri 13 Oct 2023 05:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.253.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.104.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.33.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:27:75:87:db:ac:9c:df:39:3f:e5:ed:f1:e3:04:39:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 13 05:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6ed53f44ca71415d873e21929895213c2e68d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:74:c6:62:3e:74:88:0a:e1:7b:2a:d3:ca:
3c:d0:00:2b:b8:f2:38:8e:03:55:06:22:64:dd:29:
8a:3d:f3:8f:1a:a2:29:25:f7:0b:6b:d4:94:8a:a3:
3e:98:9d:c5:3d:ac:e0:11:85:2c:29:d4:b7:6e:75:
33:df:5c:37:47:b7:d1:56:a5:81:93:f2:4a:0e:16:
75:f9:8f:1e:a8:b7:f8:91:d8:ae:fe:34:85:19:3c:
0a:66:a1:7a:5c:4f:43:cf:fd:60:47:d1:26:d9:17:
06:d9:d9:37:33:af:c8:c6:b4:e0:bc:8f:4e:f9:13:
82:42:01:7a:90:1a:74:8d:e8:78:2c:08:5a:b4:e6:
fb:eb:4c:c6:04:26:e7:b7:e3:91:7a:f1:ff:06:e7:
35:37:11:42:dc:6e:c5:52:6d:5a:35:ba:38:c4:c4:
d2:75:69:5f:d8:e3:d6:27:d8:51:6e:b2:69:e2:e3:
7b:12:0a:b1:6f:75:ed:c8:36:f3:a4:0a:81:13:03:
23:1e:09:e1:4a:d3:3b:d2:be:20:0f:7e:51:08:fa:
80:25:66:17:9f:27:71:cf:d1:0a:a2:e0:17:32:d9:
fd:88:8e:b8:38:1b:5f:ba:fb:2a:7c:15:7b:f1:61:
36:94:33:dd:63:b1:79:40:70:d6:9d:8c:8b:a1:88:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:ED:53:F4:4C:A7:14:15:D8:73:E2:19:29:89:52:13:C2:E6:8D:70
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pu1T9EynFBXYc-IZKYlSE8LmjXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.8.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.42.0/23
84.32.46.0/23
84.32.62.0/24
84.32.64.0-84.32.66.255
84.32.68.0/24
84.32.77.0/24
84.32.83.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0/23
84.32.95.0/24
84.32.104.0/23
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0-84.32.176.255
84.32.178.0/23
84.32.211.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0/24
84.32.234.0/23
84.32.238.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.251.255
84.32.253.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.33.0/24
88.216.35.0/24
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.47.0/24
88.216.58.0/24
88.216.64.0/23
88.216.93.0/24
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:6c:ed:2e:0a:7c:a5:41:61:9b:a7:f4:50:c3:9f:58:04:c1:
93:0b:58:3c:11:34:c2:0a:f0:f1:13:57:0e:01:3d:36:6b:90:
8a:af:09:88:01:8b:e4:73:21:7b:e5:7e:11:18:a8:76:58:0f:
40:e8:a4:27:aa:4e:a4:41:42:f0:b2:5b:0a:45:34:96:f7:3b:
f3:8b:a7:a4:2e:c0:4e:d4:36:fc:59:f1:e9:fe:5a:1c:b2:7e:
03:ea:59:71:ad:d2:71:96:30:b0:ec:16:1f:85:71:c4:bd:4d:
b8:04:4d:ae:83:4c:12:13:17:59:8b:7c:03:93:9d:a8:f7:37:
d3:15:c3:67:42:93:36:cc:a9:2d:02:2a:35:24:09:3d:98:eb:
ef:aa:c6:34:8c:6c:27:68:7f:b4:48:9b:d2:05:3b:65:c7:b4:
c2:83:6c:aa:68:7e:3a:a9:a7:8f:48:e8:50:86:b3:f9:8c:d1:
3f:aa:a1:19:62:9a:d1:88:88:94:1b:b2:6d:18:25:83:34:32:
db:09:8a:1b:ad:16:fc:dd:01:df:0c:5a:b9:4d:7f:e2:18:0d:
fa:c8:de:70:07:8e:35:bd:eb:cf:56:98:1f:51:9d:77:50:71:
03:4d:c5:87:1e:dc:bb:47:2a:20:cb:b6:4c:20:e7:1b:f4:79:
f0:f6:31:38
-----BEGIN CERTIFICATE-----
MIIG9DCCBdygAwIBAgISAYsndYfbrJzfOT/l7fHjBDkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMxMDEzMDUxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmVkNTNmNDRjYTcxNDE1ZDg3M2UyMTkyOTg5NTIxM2MyZTY4ZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+l0xmI+dIgK4Xsq08o80AAruPI4
jgNVBiJk3SmKPfOPGqIpJfcLa9SUiqM+mJ3FPazgEYUsKdS3bnUz31w3R7fRVqWB
k/JKDhZ1+Y8eqLf4kdiu/jSFGTwKZqF6XE9Dz/1gR9Em2RcG2dk3M6/IxrTgvI9O
+ROCQgF6kBp0jeh4LAhatOb760zGBCbnt+ORevH/Buc1NxFC3G7FUm1aNbo4xMTS
dWlf2OPWJ9hRbrJp4uN7Egqxb3XtyDbzpAqBEwMjHgnhStM70r4gD35RCPqAJWYX
nydxz9EKouAXMtn9iI64OBtfuvsqfBV78WE2lDPdY7F5QHDWnYyLoYihCwIDAQAB
o4IEADCCA/wwHQYDVR0OBBYEFKbtU/RMpxQV2HPiGSmJUhPC5o1wMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvcHUxVDlFeW5GQlhZYy1JWktZbFNFOExtalhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICFAYIKwYBBQUHAQcBAf8EggIDMIIB/zCCAfsEAgABMIIB
8wMEAFQgBDAMAwQAVCAHAwQAVCAIAwQAVCAOMAwDBAJUIBQDBAFUIBwDBABUIB8D
BAFUICoDBAFUIC4DBABUID4wDAMEBlQgQAMEAFQgQgMEAFQgRAMEAFQgTQMEAFQg
UwMEAFQgVTAMAwQDVCBYAwQAVCBaAwQBVCBcAwQAVCBfAwQBVCBoAwQCVCCUAwQA
VCCZAwQAVCCbMAwDBABUIJ0DBAVUIIAwDAMEAVQgrgMEAFQgsAMEAVQgsjAMAwQA
VCDTAwQDVCDQAwQAVCDbAwQAVCDdAwQAVCDgAwQAVCDiAwQAVCDkAwQAVCDoAwQB
VCDqMAwDBAFUIO4DBABUIPIDBAJUIPQwDAMEAFQg+QMEAlQg+DALAwQAVCD9AwMA
VCADBAJY2AADBABY2BADBAFY2BYDBABY2CEDBABY2CMDBABY2CYDBABY2CgDBABY
2CoDBAFY2CwDBABY2C8DBABY2DoDBAFY2EADBABY2F0DBABY2F8wDAMEAFjYZQME
AFjYZgMEAljYaDAMAwQAWNhtAwQEWNhgMAwDBAdY2IADBABY2IQDBAFY2IYwDAME
AFjYuwMEBljYgDAMAwQAWNjFAwQAWNjGAwQAWNjQMAwDBABY2NMDBANY2NADBABY
2NwDBABY2N8DBAJY2OQDBAJY2OwwDQYJKoZIhvcNAQELBQADggEBAAps7S4KfKVB
YZun9FDDn1gEwZMLWDwRNMIK8PETVw4BPTZrkIqvCYgBi+RzIXvlfhEYqHZYD0Do
pCeqTqRBQvCyWwpFNJb3O/OLp6QuwE7UNvxZ8en+WhyyfgPqWXGt0nGWMLDsFh+F
ccS9TbgETa6DTBITF1mLfAOTnaj3N9MVw2dCkzbMqS0CKjUkCT2Y6++qxjSMbCdo
f7RIm9IFO2XHtMKDbKpofjqpp49I6FCGs/mM0T+qoRlimtGIiJQbsm0YJYM0MtsJ
ihutFvzdAd8MWrlNf+IYDfrI3nAHjjW9689WmB9RnXdQcQNNxYce3LtHKiDLtkwg
5xv0efD2MTg=
Generated at Mon Oct 16 05:03:35 2023 by rpki-client on console-fra.rpki-client.org