Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q1YSQcKuvzIk-isvJrdpKLpPKfA.roa
File: q1YSQcKuvzIk-isvJrdpKLpPKfA.roa (raw, json)
Hash identifier: 264ZPcpok/41YHVHwpYk0Jm6Tmi6kSFdbQ3m3xg0MYY=
Subject key identifier: AB:56:12:41:C2:AE:BF:32:24:FA:2B:2F:26:B7:69:28:BA:4F:29:F0
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01893EABBE62928A6188740B23CD256BF0ED
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q1YSQcKuvzIk-isvJrdpKLpPKfA.roa
Signing time: Mon 10 Jul 2023 07:19:50 +0000
ROA not before: Mon 10 Jul 2023 07:19:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.21.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jul 2023 18:12:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:ab:be:62:92:8a:61:88:74:0b:23:cd:25:6b:f0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 10 07:19:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab561241c2aebf3224fa2b2f26b76928ba4f29f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:c3:35:0b:7f:2d:6c:24:d3:78:02:24:cd:
9b:71:2e:d2:42:b5:b8:a4:22:2e:7f:1b:2a:ab:33:
88:94:e7:b5:a9:4b:06:69:1b:6c:c6:bb:85:d4:7e:
07:ec:be:4f:87:18:de:3a:e3:21:91:3b:99:cc:ca:
1b:3b:0d:ee:6f:1a:f6:68:41:e5:60:c9:fa:f0:81:
c8:06:7f:92:9b:de:c2:b5:38:2f:b8:05:52:28:5a:
f2:3d:0b:cc:3c:62:17:78:1b:aa:82:71:50:51:e8:
8f:3f:3e:d7:39:d2:16:8b:84:74:40:fb:10:f6:0f:
cb:29:8a:04:e8:c9:fb:83:36:60:99:11:15:84:83:
85:aa:11:8b:b0:02:02:63:6f:19:2d:6a:17:3c:ad:
e9:b5:73:2b:a9:ed:0c:3d:f2:00:2c:9a:3b:d5:65:
0e:4c:f7:e5:80:f2:90:6a:f9:d2:26:45:51:27:24:
30:4e:b0:b3:ac:eb:66:c4:0d:b5:58:d9:79:1b:20:
9c:af:4c:b0:23:c6:59:9e:29:1b:40:66:f4:44:3f:
0f:32:bd:a0:f9:0a:30:a6:e4:16:c8:93:54:64:3e:
bc:aa:36:cb:e9:83:42:e3:ea:ab:71:ba:86:63:21:
3f:6f:28:88:ae:b6:5f:cb:6c:95:a7:fe:26:1b:e5:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:56:12:41:C2:AE:BF:32:24:FA:2B:2F:26:B7:69:28:BA:4F:29:F0
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q1YSQcKuvzIk-isvJrdpKLpPKfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.45.0-84.32.46.255
84.32.50.0/23
84.32.58.0/24
84.32.61.0/24
84.32.79.0/24
84.32.83.0/24
84.32.94.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.158.0/23
84.32.174.0/23
84.32.178.0/23
84.32.213.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.247.255
84.32.249.0-84.32.254.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.61.0-88.216.65.255
88.216.93.0/24
88.216.100.0/23
88.216.104.0/23
88.216.107.0/24
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.222.0/24
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
93:03:eb:0d:f0:b7:f8:98:bc:03:9c:9b:57:bf:5c:56:b9:76:
c0:c6:f4:d4:0d:40:c4:62:ba:1e:74:40:4c:0e:cc:28:54:d5:
54:69:6a:3f:f0:82:6b:3f:5c:1f:f9:d5:f4:2d:e8:22:89:bd:
d3:64:15:d6:04:01:79:5d:e7:68:7b:16:9f:b1:60:48:30:3d:
13:e4:f6:e1:0e:75:68:cc:58:a9:d0:5c:a8:62:35:35:e9:f0:
ad:f6:de:f8:9d:63:40:47:28:ee:e3:72:bd:49:3a:82:2e:f1:
50:50:eb:db:69:e5:cf:5c:47:76:ad:7f:eb:1a:a4:af:ff:92:
8d:ac:22:f3:96:e5:83:b7:98:af:aa:39:b9:d7:07:69:68:85:
6f:78:b1:fc:1d:93:e6:b8:00:66:96:0b:3b:0b:ac:4b:e4:fa:
55:97:fc:9c:4b:ce:9f:bc:fe:3d:ee:35:5c:78:4e:4d:34:a5:
19:00:0c:b1:03:14:76:61:4d:14:0b:b4:7d:6f:58:18:be:4c:
15:de:75:b0:98:04:a7:41:b0:7f:b5:79:a4:97:80:ec:e1:e0:
9c:cd:ab:d0:a9:8c:cd:e3:56:f5:b7:c1:28:18:84:89:09:70:
ad:fc:44:82:79:7f:fa:7c:15:64:d2:11:bf:97:3d:20:6e:79:
6a:0d:99:70
-----BEGIN CERTIFICATE-----
MIIGnzCCBYegAwIBAgISAYk+q75ikophiHQLI80la/DtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNzEwMDcxOTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjU2MTI0MWMyYWViZjMyMjRmYTJiMmYyNmI3NjkyOGJhNGYyOWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5nDNQt/LWwk03gCJM2bcS7SQrW4
pCIufxsqqzOIlOe1qUsGaRtsxruF1H4H7L5PhxjeOuMhkTuZzMobOw3ubxr2aEHl
YMn68IHIBn+Sm97CtTgvuAVSKFryPQvMPGIXeBuqgnFQUeiPPz7XOdIWi4R0QPsQ
9g/LKYoE6Mn7gzZgmREVhIOFqhGLsAICY28ZLWoXPK3ptXMrqe0MPfIALJo71WUO
TPflgPKQavnSJkVRJyQwTrCzrOtmxA21WNl5GyCcr0ywI8ZZnikbQGb0RD8PMr2g
+QowpuQWyJNUZD68qjbL6YNC4+qrcbqGYyE/byiIrrZfy2yVp/4mG+U6AwIDAQAB
o4IDqzCCA6cwHQYDVR0OBBYEFKtWEkHCrr8yJPorLya3aSi6TynwMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvcTFZU1FjS3V2eklrLWlzdkpyZHBLTHBQS2ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBvwYIKwYBBQUHAQcBAf8EggGuMIIBqjCCAaYEAgABMIIB
ngMEAFQgCAMEAFQgDjAMAwQCVCAUAwQBVCAcAwQAVCAfMAwDBABUIC0DBABUIC4D
BAFUIDIDBABUIDoDBABUID0DBABUIE8DBABUIFMDBABUIF4wDAMEAlQgbAMEAFQg
bgMEAlQglAMEAFQgmQMEAFQgmwMEAVQgngMEAVQgrgMEAVQgsjAMAwQAVCDVAwQD
VCDQAwQAVCDbAwQAVCDdMAwDBAVUIOADBABUIOIDBABUIOQwDAMEAFQg5wMEAFQg
6AMEAVQg6jAMAwQAVCDvAwQDVCDwMAwDBABUIPkDBABUIP4DBAJY2AADBABY2BAD
BAFY2BYDBABY2CADBABY2CMDBABY2CgDBABY2CoDBAFY2CwDBABY2DowDAMEAFjY
PQMEAVjYQAMEAFjYXQMEAVjYZAMEAVjYaAMEAFjYazAMAwQAWNhtAwQEWNhgAwQA
WNiAMAwDBAFY2IIDBABY2IQDBAFY2IYDBABY2LQDBABY2LcDBAFY2LwDBABY2MUD
BAJY2NQDBABY2NwDBABY2N4wDAMEAljY7AMEA1jY8DANBgkqhkiG9w0BAQsFAAOC
AQEAkwPrDfC3+Ji8A5ybV79cVrl2wMb01A1AxGK6HnRATA7MKFTVVGlqP/CCaz9c
H/nV9C3oIom902QV1gQBeV3naHsWn7FgSDA9E+T24Q51aMxYqdBcqGI1Nenwrfbe
+J1jQEco7uNyvUk6gi7xUFDr22nlz1xHdq1/6xqkr/+Sjawi85blg7eYr6o5udcH
aWiFb3ix/B2T5rgAZpYLOwusS+T6VZf8nEvOn7z+Pe41XHhOTTSlGQAMsQMUdmFN
FAu0fW9YGL5MFd51sJgEp0Gwf7V5pJeA7OHgnM2r0KmMzeNW9bfBKBiEiQlwrfxE
gnl/+nwVZNIRv5c9IG55ag2ZcA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org