Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rc_-qSdQoW36UxMvxw6PZmTc9eI.roa
File: rc_-qSdQoW36UxMvxw6PZmTc9eI.roa (raw, json)
Hash identifier: RndMJsEGbl5VwTgzoIq3WIQMuZWK5u+Ewkx011Q9Evo=
Subject key identifier: AD:CF:FE:A9:27:50:A1:6D:FA:53:13:2F:C7:0E:8F:66:64:DC:F5:E2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186B31013CEE3A00578D9CFE3F5DC8B7C78
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rc_-qSdQoW36UxMvxw6PZmTc9eI.roa
Signing time: Sun 05 Mar 2023 18:37:00 +0000
ROA not before: Sun 05 Mar 2023 18:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.186.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b3:10:13:ce:e3:a0:05:78:d9:cf:e3:f5:dc:8b:7c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 5 18:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adcffea92750a16dfa53132fc70e8f6664dcf5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:76:fe:79:b5:ab:0e:eb:74:90:ce:a1:b3:76:
36:2e:75:de:e1:af:c2:49:a8:e3:49:bd:dc:fb:5e:
2c:64:ef:64:3c:f2:d3:aa:29:ae:63:02:1d:26:c7:
27:89:07:ff:b4:3f:7b:c5:f0:12:b7:3e:ef:f5:0e:
16:3d:d3:01:7b:ed:8b:01:41:f6:81:2f:7a:40:12:
89:ad:df:7b:4b:70:a8:1e:2c:87:e3:6b:a6:82:4a:
47:0d:ef:db:57:7b:76:1d:4d:ca:8a:78:71:65:75:
af:04:1e:b3:5d:1c:81:7b:6a:f3:67:69:4c:74:93:
f6:e0:36:13:86:d1:69:12:8d:c4:ec:8b:9b:9e:f9:
4f:c0:9b:e2:71:3e:d4:b7:db:9c:02:00:13:72:34:
d1:5b:6d:3f:7d:f9:48:14:a3:ed:a8:23:53:e4:5d:
35:33:a5:92:6b:34:db:1a:d2:f9:58:be:f5:e0:7d:
fd:d5:b7:8c:27:9c:96:ab:7d:ae:d2:ed:28:61:97:
9a:2d:78:77:92:37:6f:cb:10:0e:40:8d:e6:aa:fe:
a9:6b:a6:12:82:d4:16:1c:11:c2:e1:df:ac:ba:f4:
8b:07:3a:b4:5d:e0:04:2f:31:81:20:6b:34:1e:59:
c2:4b:6a:92:12:d2:d9:d2:06:86:cf:33:fd:ba:21:
b7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CF:FE:A9:27:50:A1:6D:FA:53:13:2F:C7:0E:8F:66:64:DC:F5:E2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rc_-qSdQoW36UxMvxw6PZmTc9eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.71.0/24
84.32.76.0/23
84.32.79.0/24
84.32.88.0/24
84.32.148.0/22
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.221.0-84.32.222.255
84.32.229.0/24
84.32.232.0/24
84.32.239.0-84.32.240.255
84.32.242.0/23
84.32.245.0/24
84.32.252.0/23
88.216.3.0/24
88.216.17.0/24
88.216.21.0/24
88.216.32.0/24
88.216.92.0/23
88.216.128.0/24
88.216.131.0-88.216.133.255
88.216.186.0/24
88.216.189.0-88.216.190.255
88.216.199.0/24
88.216.215.0/24
88.216.228.0-88.216.235.255
Signature Algorithm: sha256WithRSAEncryption
55:5e:d2:49:b4:81:fe:d5:3a:2f:18:ba:ee:8f:3e:57:ee:2e:
da:8e:e3:2b:4b:6c:dc:e7:db:9f:af:9e:d0:a6:bb:ca:df:d2:
21:7c:60:e5:2d:57:b1:29:1c:0f:d8:60:34:4f:96:77:36:e9:
cb:6d:cf:a5:38:31:0f:39:97:3e:07:1c:9e:01:7c:9c:33:84:
6a:e3:9d:7e:d8:11:ff:12:93:e8:a7:fe:81:4b:e0:ca:25:3b:
d3:ff:0e:ae:16:e5:91:5e:de:6c:69:b0:cf:25:7e:f2:df:7d:
62:e7:32:d8:ea:13:e2:ec:6a:a4:6b:04:e4:e8:b8:58:1d:07:
ba:e8:5a:eb:17:40:8b:1b:13:0a:ec:b8:2d:93:46:9d:71:20:
0f:15:9c:f4:9d:92:6b:3e:ba:57:aa:ff:91:45:e3:93:e7:12:
a9:76:f3:e6:da:8d:90:0b:42:ed:5a:eb:e4:3c:fe:8a:c6:5f:
99:69:98:c9:c9:1f:2b:b6:b4:f7:6e:18:54:f0:ab:dc:cd:f0:
81:ab:b8:44:b1:1b:f3:fb:59:3c:ea:fc:be:ef:ae:6e:da:94:
91:e8:68:1b:2b:de:48:e3:6a:e4:33:64:0d:d2:ef:24:51:52:
38:9a:72:c1:fe:64:a3:43:66:5f:77:00:ba:f8:5a:68:54:6b:
23:e3:25:ee
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgISAYazEBPO46AFeNnP4/Xci3x4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMzA1MTgzNzAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGNmZmVhOTI3NTBhMTZkZmE1MzEzMmZjNzBlOGY2NjY0ZGNmNWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHb+ebWrDut0kM6hs3Y2LnXe4a/C
SajjSb3c+14sZO9kPPLTqimuYwIdJscniQf/tD97xfAStz7v9Q4WPdMBe+2LAUH2
gS96QBKJrd97S3CoHiyH42umgkpHDe/bV3t2HU3KinhxZXWvBB6zXRyBe2rzZ2lM
dJP24DYThtFpEo3E7IubnvlPwJvicT7Ut9ucAgATcjTRW20/fflIFKPtqCNT5F01
M6WSazTbGtL5WL714H391beMJ5yWq32u0u0oYZeaLXh3kjdvyxAOQI3mqv6pa6YS
gtQWHBHC4d+suvSLBzq0XeAELzGBIGs0HlnCS2qSEtLZ0gaGzzP9uiG3TwIDAQAB
o4IC8TCCAu0wHQYDVR0OBBYEFK3P/qknUKFt+lMTL8cOj2Zk3PXiMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvcmNfLXFTZFFvVzM2VXhNdnh3NlBabVRjOWVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBQYIKwYBBQUHAQcBAf8EgfUwgfIwge8EAgABMIHoAwQA
VCAIAwQAVCAKAwQCVCAYAwQAVCAeAwQAVCAuAwQAVCBHAwQBVCBMAwQAVCBPAwQA
VCBYAwQCVCCUAwQAVCCzAwQAVCDUAwQBVCDWMAwDBABUIN0DBABUIN4DBABUIOUD
BABUIOgwDAMEAFQg7wMEAFQg8AMEAVQg8gMEAFQg9QMEAVQg/AMEAFjYAwMEAFjY
EQMEAFjYFQMEAFjYIAMEAVjYXAMEAFjYgDAMAwQAWNiDAwQBWNiEAwQAWNi6MAwD
BABY2L0DBABY2L4DBABY2McDBABY2NcwDAMEAljY5AMEAljY6DANBgkqhkiG9w0B
AQsFAAOCAQEAVV7SSbSB/tU6Lxi67o8+V+4u2o7jK0ts3Ofbn6+e0Ka7yt/SIXxg
5S1XsSkcD9hgNE+Wdzbpy23PpTgxDzmXPgccngF8nDOEauOdftgR/xKT6Kf+gUvg
yiU70/8OrhblkV7ebGmwzyV+8t99Yucy2OoT4uxqpGsE5Oi4WB0Huuha6xdAixsT
Cuy4LZNGnXEgDxWc9J2Saz66V6r/kUXjk+cSqXbz5tqNkAtC7Vrr5Dz+isZfmWmY
yckfK7a0924YVPCr3M3wgau4RLEb8/tZPOr8vu+ubtqUkehoGyveSONq5DNkDdLv
JFFSOJpywf5ko0NmX3cAuvhaaFRrI+Ml7g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:51 2023 by rpki-client on console-fra.rpki-client.org