Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rOGQOXcouK1O2ee1fWLmrQKWe9E.roa
File: rOGQOXcouK1O2ee1fWLmrQKWe9E.roa (raw, json)
Hash identifier: 9BNbnzrr3g1bAxfQL06HgFbTpp7PNe8/y82pyYXyRu0=
Subject key identifier: AC:E1:90:39:77:28:B8:AD:4E:D9:E7:B5:7D:62:E6:AD:02:96:7B:D1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01886E4FD1A613477C0CDCD38C5C35E1803D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rOGQOXcouK1O2ee1fWLmrQKWe9E.roa
Signing time: Tue 30 May 2023 20:18:24 +0000
ROA not before: Tue 30 May 2023 20:18:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.19.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 20:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6e:4f:d1:a6:13:47:7c:0c:dc:d3:8c:5c:35:e1:80:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 30 20:18:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ace190397728b8ad4ed9e7b57d62e6ad02967bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:69:6e:51:95:c4:cb:b1:12:75:15:9c:52:
10:75:9c:16:04:4b:47:e3:17:78:64:96:3f:cd:25:
d9:ce:16:88:aa:f5:9f:34:f4:9c:5a:21:80:bc:0c:
e6:4f:f2:b9:5a:69:a5:cf:ae:08:9c:d9:ec:da:3e:
e3:7a:81:9c:27:a9:96:b4:88:3e:88:0b:a4:c3:26:
4d:3a:b0:71:e2:48:40:39:8e:81:26:20:6c:12:d8:
ff:ab:29:4c:48:89:c4:a9:6e:68:aa:f5:b5:d6:2a:
7f:1c:12:69:3d:ad:66:9b:06:c3:cd:03:61:55:02:
8e:ee:29:a6:28:10:2e:cf:4c:ba:bd:9e:ce:a0:1e:
ee:bd:9c:d2:05:ee:15:ab:48:4c:6b:16:a8:ba:8a:
24:19:f1:01:02:21:dc:6a:f2:98:56:5d:c1:5e:3e:
4c:ae:b1:e4:fb:63:2c:66:4c:38:1e:82:cf:ce:28:
7f:bb:f9:d0:e9:f8:27:6b:db:e8:ce:9b:b0:62:b9:
e8:01:a8:54:75:7b:f4:ac:99:84:7d:e8:01:55:da:
c3:59:d1:db:ac:ba:31:bf:e3:6e:ea:4f:94:81:d5:
cb:30:1e:9b:f6:05:e0:0d:b8:16:00:91:ec:27:28:
f4:a5:cb:58:ec:ed:fc:19:55:d8:fe:cf:ba:70:7f:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E1:90:39:77:28:B8:AD:4E:D9:E7:B5:7D:62:E6:AD:02:96:7B:D1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rOGQOXcouK1O2ee1fWLmrQKWe9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.30.0/24
84.32.46.0/24
84.32.60.0/24
84.32.67.0-84.32.68.255
84.32.70.0/24
84.32.77.0/24
84.32.79.0/24
84.32.89.0/24
84.32.110.0/24
84.32.148.0/22
84.32.158.0/23
84.32.177.0/24
84.32.212.0/24
84.32.214.0/23
84.32.218.0/24
84.32.221.0/24
84.32.224.0/23
84.32.231.0-84.32.232.255
84.32.235.0/24
84.32.239.0-84.32.240.255
84.32.242.0/23
84.32.250.0-84.32.253.255
88.216.0.0/23
88.216.3.0/24
88.216.16.0/24
88.216.19.0/24
88.216.32.0/24
88.216.35.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.100.0/24
88.216.111.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.208.0/24
88.216.212.0/22
88.216.220.0/24
88.216.232.0/21
Signature Algorithm: sha256WithRSAEncryption
52:51:a8:56:3a:9a:89:7c:4e:03:aa:64:ae:8a:97:1f:6c:c7:
d2:b6:85:36:f9:df:78:fd:a7:48:99:88:8e:33:2d:c5:d7:e2:
be:42:d9:fb:f2:41:80:45:5b:e8:31:7c:aa:a7:a3:e2:97:ff:
d1:c5:9c:ec:7d:b6:d9:3a:0d:5a:f3:f2:43:41:19:24:b7:54:
54:e8:d0:c4:2e:30:a4:f4:a9:e8:c9:56:bf:51:2e:42:f0:55:
a4:35:31:54:07:0e:86:ac:c4:c6:7a:44:65:ed:10:ec:41:6c:
9d:81:02:14:9e:c0:db:f4:dc:9f:ef:5f:05:b5:e4:d9:6c:ec:
1a:df:71:d4:58:40:ca:35:92:e3:e0:f0:3c:35:3c:b3:26:56:
30:bf:1c:50:35:f1:c7:5f:98:6d:53:3f:c5:d0:46:55:4e:08:
e4:47:d7:35:03:6c:3a:60:ad:e9:f1:30:35:26:67:57:b3:5c:
e8:79:e3:04:2b:81:b1:a6:c7:56:09:55:2e:13:b9:d0:ff:92:
7d:e1:f6:19:56:ac:40:8a:e7:c7:2b:e6:52:05:a1:93:6d:24:
bb:d9:cc:5d:f9:5a:19:a3:8e:9f:a1:53:59:9f:31:67:47:21:
45:8c:21:87:cc:39:de:dc:ec:34:e9:c3:ca:87:88:4b:a4:1d:
f8:9c:45:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:32 2024 by rpki-client on console-ams.rpki-client.org