Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/r5hgwLkr6_pB0JZ3FHEAAyPirW4.roa
File: r5hgwLkr6_pB0JZ3FHEAAyPirW4.roa (raw, json)
Hash identifier: onFcV0qdrwg4AHsCoh1wxdG9roTxrV4dFKsyRu2AOqM=
Subject key identifier: AF:98:60:C0:B9:2B:EB:FA:41:D0:96:77:14:71:00:03:23:E2:AD:6E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018A2CF049291FFA77A57CA364111852C6A3
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/r5hgwLkr6_pB0JZ3FHEAAyPirW4.roa
Signing time: Fri 25 Aug 2023 13:44:19 +0000
ROA not before: Fri 25 Aug 2023 13:44:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.66.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:f0:49:29:1f:fa:77:a5:7c:a3:64:11:18:52:c6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 25 13:44:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af9860c0b92bebfa41d096771471000323e2ad6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:bf:a0:2b:de:5a:12:3b:1a:ac:36:a2:1a:
9b:8b:19:d4:e5:21:67:52:0d:99:0e:b0:cd:3a:51:
f5:7a:44:96:d6:37:0e:f0:4c:50:8f:8f:be:b5:06:
f8:12:16:c3:90:fa:5e:3e:68:40:f3:2f:ce:f0:7e:
af:01:24:09:d2:e5:a9:e9:e9:64:59:09:81:ab:fa:
0a:2b:b1:2d:b2:54:80:1a:6b:c2:6d:5d:4d:4b:9b:
d4:e0:03:da:39:7d:e5:92:87:e5:5b:46:8d:20:4c:
b4:41:9b:f9:15:6a:45:f3:4d:38:1a:14:9e:6c:0b:
5e:11:c3:7b:d5:13:50:11:42:8a:8f:a1:38:fa:4f:
29:bb:95:b6:68:fe:fc:1e:22:76:fb:fa:15:e7:1b:
d7:c8:2a:88:16:5a:f5:8c:d8:10:ae:8a:cb:96:77:
ba:17:63:85:c7:b5:61:ae:c1:16:e8:6e:1b:3a:05:
b7:03:1a:ed:5b:c2:fc:74:8c:05:d4:d4:e9:8a:9a:
04:53:2a:db:96:bb:cb:55:6d:52:1f:aa:9e:ab:8d:
ff:d3:81:87:32:77:96:f0:4c:b8:1c:52:01:51:a6:
60:3f:60:af:d7:b8:31:39:4f:b5:29:7e:df:ae:23:
43:b0:be:2a:30:d2:4b:10:ae:b7:c1:ac:ed:bd:71:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:98:60:C0:B9:2B:EB:FA:41:D0:96:77:14:71:00:03:23:E2:AD:6E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/r5hgwLkr6_pB0JZ3FHEAAyPirW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.9.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.39.0/24
84.32.43.0-84.32.44.255
84.32.47.0/24
84.32.49.0-84.32.51.255
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0/23
84.32.67.0-84.32.68.255
84.32.76.0/23
84.32.83.0/24
84.32.88.0-84.32.90.255
84.32.92.0-84.32.94.255
84.32.105.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.210.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.232.0/24
84.32.234.0/23
84.32.239.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0-88.216.36.255
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.60.0-88.216.66.255
88.216.92.0/23
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/22
88.216.197.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.222.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
99:7e:f3:1e:17:a5:8a:6d:d2:d0:b7:54:d9:8e:67:a7:31:d6:
0e:69:48:07:e8:31:fd:32:b3:82:74:9b:4f:87:cc:5f:d7:ae:
fd:31:a1:d8:42:bb:48:8b:60:20:5f:70:66:2c:fa:48:d2:f5:
22:cb:5f:84:72:64:03:2b:54:20:d6:0c:af:12:00:53:6c:e0:
47:41:42:e7:7c:df:a9:1e:47:bd:77:22:70:d4:14:e9:05:58:
e0:b7:0e:3b:4a:b5:9a:4a:e8:38:f1:26:9b:66:af:a7:70:41:
7b:f7:ff:29:fe:24:46:ae:83:3c:43:11:96:63:90:16:e4:f6:
30:db:01:6d:be:8c:1f:54:a9:2f:a9:13:38:26:7a:9f:af:f3:
f0:1c:7d:7f:94:cf:90:fa:ce:f4:f1:33:0c:38:4b:f1:2a:4f:
b5:3b:a8:60:51:bb:19:26:94:f1:08:5d:4f:03:db:04:74:90:
1e:10:27:f6:23:39:8a:c3:2a:e1:6e:be:25:07:ec:f2:3c:3e:
dc:db:09:42:ba:68:fd:ef:48:e5:f3:af:88:b9:fd:70:82:9d:
88:e1:c6:c2:0c:4d:ae:e9:c9:f5:7e:65:45:1b:77:78:f3:76:
b6:80:5c:69:67:7a:a5:2e:b6:e5:14:cb:1a:f5:7e:55:af:5e:
20:56:e5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 09:07:13 2023 by rpki-client on console-ams.rpki-client.org