Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q7JhhqnUL3-wK8ofdhmyccQ9lr8.roa
File: q7JhhqnUL3-wK8ofdhmyccQ9lr8.roa (raw, json)
Hash identifier: r3ZZjJZHIQZXpe3xTt/SJEDQYTceRGax2I6rEkmQC4s=
Subject key identifier: AB:B2:61:86:A9:D4:2F:7F:B0:2B:CA:1F:76:19:B2:71:C4:3D:96:BF
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186D03891551F15C4F5783851298AF8C203
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q7JhhqnUL3-wK8ofdhmyccQ9lr8.roa
Signing time: Sat 11 Mar 2023 10:30:13 +0000
ROA not before: Sat 11 Mar 2023 10:30:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.244.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.173.0/24 maxlen: 24
84.32.174.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Mar 2023 10:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d0:38:91:55:1f:15:c4:f5:78:38:51:29:8a:f8:c2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 11 10:30:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abb26186a9d42f7fb02bca1f7619b271c43d96bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:fc:8d:6b:1a:12:65:fd:3a:42:4b:fd:4a:
0f:aa:2e:e3:cc:88:c1:da:19:6d:2f:a5:6f:2f:2a:
77:08:56:9b:44:7d:02:8a:08:6a:71:cd:37:6d:aa:
d4:b4:bd:8f:44:70:39:9b:e1:d9:4b:02:93:40:56:
e2:56:b5:86:86:dc:d7:88:ed:39:e9:ac:51:f7:fc:
05:bd:d6:93:aa:13:75:f5:e3:ac:f4:72:c2:01:bf:
48:5e:4f:85:6e:60:74:7a:d1:ba:e5:a0:58:56:2e:
fd:71:b5:ee:95:bd:1c:30:a3:68:cf:ec:fe:ea:be:
00:7f:0d:fb:0e:7a:58:e6:5f:4f:42:ff:af:9c:1e:
41:a4:ca:a8:f6:34:47:f8:5f:3a:92:6c:91:5c:b3:
c5:72:4c:98:41:f0:aa:51:fd:af:6c:8c:03:c5:4c:
ff:6a:f1:3c:b6:e1:3b:bb:ee:c5:dc:51:cb:58:25:
75:b8:8c:88:ca:b5:00:6a:ba:77:5b:6e:d0:b0:dd:
a4:a8:fa:e5:9e:0e:cc:c9:bf:7c:22:16:7a:84:e5:
9e:af:21:14:c2:14:78:20:93:7d:f6:b6:d7:4d:92:
c6:98:4b:b4:d3:3c:31:83:40:21:d8:ac:97:03:83:
4b:d1:48:b7:de:d5:20:e5:6c:ee:bc:77:31:ff:4e:
52:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B2:61:86:A9:D4:2F:7F:B0:2B:CA:1F:76:19:B2:71:C4:3D:96:BF
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q7JhhqnUL3-wK8ofdhmyccQ9lr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.71.0/24
84.32.77.0/24
84.32.79.0/24
84.32.88.0/24
84.32.148.0/22
84.32.173.0-84.32.174.255
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.221.0-84.32.222.255
84.32.227.0/24
84.32.229.0/24
84.32.232.0/24
84.32.239.0-84.32.240.255
84.32.242.0-84.32.245.255
84.32.252.0/23
88.216.3.0/24
88.216.17.0/24
88.216.21.0/24
88.216.32.0/24
88.216.36.0/24
88.216.92.0/23
88.216.128.0/24
88.216.131.0-88.216.133.255
88.216.181.0/24
88.216.186.0/24
88.216.189.0/24
88.216.199.0/24
88.216.215.0/24
88.216.228.0-88.216.235.255
Signature Algorithm: sha256WithRSAEncryption
9c:91:e3:be:c8:c7:65:e7:1d:f5:5b:7d:bf:b6:10:1c:6e:90:
25:57:a7:95:35:a7:25:ba:0f:ab:26:3d:99:d7:69:9e:fb:cd:
8f:b7:5a:dc:9d:e8:26:ac:9a:d3:93:81:9c:dc:9d:9c:c2:3c:
ba:4c:f9:32:a6:e2:2b:d1:ab:ba:41:ea:ad:85:8c:9e:f6:1d:
42:f7:4b:1f:0a:8c:9d:aa:78:f8:ba:c0:00:ff:ad:a8:c0:0a:
7e:87:81:87:49:25:6a:9f:b1:ea:b6:f8:a5:8c:35:56:f6:3d:
f8:ec:9e:27:89:6e:ca:23:d8:42:d7:45:99:a5:95:6d:17:5a:
04:a9:34:18:73:84:30:fe:b0:2f:a7:6e:5f:52:fa:1f:e8:b7:
97:bc:09:b4:97:47:75:9e:74:9f:b4:5a:98:6b:b6:7b:63:80:
f3:79:4f:35:c8:fa:b9:6b:41:05:8d:21:b3:d8:46:09:74:63:
5a:fc:a2:cc:29:2b:54:3a:de:99:f5:14:2a:ee:bc:08:d5:65:
8c:d6:d2:d7:d2:b0:84:b0:d8:34:cf:b4:59:75:d4:7e:c6:86:
17:dc:0b:45:e8:0a:1c:10:8a:ed:df:c7:75:95:44:bd:3f:a5:
72:5c:59:8c:ec:3a:59:8e:70:ce:37:52:48:59:9a:a8:c5:cc:
65:76:04:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:31 2024 by rpki-client on console-ams.rpki-client.org