Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qiZWTnVF2X-z5AaxwknKikzLfic.roa
File: qiZWTnVF2X-z5AaxwknKikzLfic.roa (raw, json)
Hash identifier: eLy61kMv8/6Hgsi/FnZpobFElE5er24cV/2T26Ou/mM=
Subject key identifier: AA:26:56:4E:75:45:D9:7F:B3:E4:06:B1:C2:49:CA:8A:4C:CB:7E:27
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018A240CE6B3B199431D091611C9F27F9069
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qiZWTnVF2X-z5AaxwknKikzLfic.roa
Signing time: Wed 23 Aug 2023 20:18:59 +0000
ROA not before: Wed 23 Aug 2023 20:18:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.66.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:24:0c:e6:b3:b1:99:43:1d:09:16:11:c9:f2:7f:90:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 23 20:18:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa26564e7545d97fb3e406b1c249ca8a4ccb7e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:1a:6b:38:12:00:f9:5a:b2:be:46:a7:28:
3b:c6:cc:6a:90:4b:4a:57:c7:f0:30:30:99:3d:11:
22:8f:89:73:f6:b4:94:a4:26:54:3d:a3:d9:06:ae:
00:bc:a5:19:76:66:52:47:d4:4b:00:e0:5b:13:80:
f1:9b:aa:c0:fb:8e:24:ac:31:f3:96:b7:99:a9:0f:
4d:41:c0:85:3d:94:94:73:88:da:9a:29:e6:f7:81:
12:b0:6c:d2:de:97:f6:a3:46:8e:b1:fa:10:6d:d0:
56:3a:50:74:61:30:10:1e:ed:ce:8a:ec:30:fc:d2:
c3:20:e7:59:2c:fb:96:60:74:17:ca:3a:f3:a9:56:
f1:99:38:c8:e9:53:9b:d4:9b:f3:13:18:2c:1b:71:
0e:ae:b6:f6:e5:da:63:76:60:09:61:66:88:e2:76:
14:e7:a0:b5:42:c4:45:a4:cf:f3:0e:ba:3e:f8:0c:
05:88:cf:37:90:bd:00:b7:04:d6:54:9a:fd:bc:6a:
99:10:87:fd:80:06:d2:a7:16:1c:26:6f:29:40:e7:
5f:18:43:a9:21:a7:52:be:c4:97:11:6f:af:a2:77:
c4:26:ff:07:d1:4a:2a:97:0a:c4:88:47:c0:43:69:
cd:d6:ac:00:e5:0a:9c:2e:77:e9:bd:e8:ef:5d:d9:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:26:56:4E:75:45:D9:7F:B3:E4:06:B1:C2:49:CA:8A:4C:CB:7E:27
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qiZWTnVF2X-z5AaxwknKikzLfic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.9.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.39.0/24
84.32.43.0-84.32.45.255
84.32.47.0/24
84.32.49.0-84.32.51.255
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0/23
84.32.67.0-84.32.68.255
84.32.76.0/23
84.32.83.0/24
84.32.88.0-84.32.90.255
84.32.92.0-84.32.94.255
84.32.105.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.210.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.232.0/24
84.32.234.0/23
84.32.239.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0-88.216.36.255
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.60.0-88.216.66.255
88.216.92.0/23
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/22
88.216.197.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.222.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
97:51:f1:6f:21:e3:5d:f4:89:53:2a:ab:84:e4:f8:ef:1f:27:
78:38:d0:3c:72:bb:eb:c4:2c:4e:d5:a1:10:ff:2c:ff:a5:b9:
1f:97:86:43:27:4f:8d:a8:38:c0:05:27:34:24:62:f2:bc:3c:
2a:a8:05:2a:ac:54:19:ad:8d:e2:df:f8:db:09:37:7f:7e:40:
19:a3:98:f6:e6:ce:fd:46:bd:cd:de:1d:ef:6e:58:9a:14:85:
02:ff:59:6e:82:c1:70:05:5b:d3:da:e7:9b:2d:4e:d2:e4:e4:
a7:6d:ed:48:2b:9d:1f:82:40:c7:b6:51:71:6f:39:37:d4:94:
a3:94:80:f0:0d:9b:a0:85:1d:3f:9f:2c:1e:58:8f:4f:e7:fe:
bb:95:2f:5d:6c:e5:78:14:24:59:b8:9b:78:a0:17:82:dd:5f:
ce:ac:b4:1b:18:29:90:e7:ef:5f:38:fc:4b:07:90:e2:5e:a8:
83:20:f3:80:3c:fb:21:0b:19:4f:91:1d:fe:8c:46:fc:df:54:
a2:4f:46:ee:f5:fa:ac:e6:e2:72:9c:02:4c:97:9e:b8:99:2d:
8c:3b:9b:ca:45:e7:ac:0c:79:f4:c3:25:92:a1:b7:c1:d6:07:
d1:8f:52:ff:05:12:66:4e:35:86:3d:7e:be:86:b2:3e:e7:69:
9e:99:a7:88
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 25 14:16:16 2023 by rpki-client on console-fra.rpki-client.org