Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rtPvdlZF8rQ_3SkxWEtoIvAba9w.roa
File: rtPvdlZF8rQ_3SkxWEtoIvAba9w.roa (raw, json)
Hash identifier: 86waKwzVMiTYs7RmYbjJHUkV2OgbnugFCTbaz1nmjuY=
Subject key identifier: AE:D3:EF:76:56:45:F2:B4:3F:DD:29:31:58:4B:68:22:F0:1B:6B:DC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188E3FBE4D2345FDE3CD6519EA25F1F2E76
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rtPvdlZF8rQ_3SkxWEtoIvAba9w.roa
Signing time: Thu 22 Jun 2023 16:41:56 +0000
ROA not before: Thu 22 Jun 2023 16:41:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.184.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:fb:e4:d2:34:5f:de:3c:d6:51:9e:a2:5f:1f:2e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 22 16:41:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aed3ef765645f2b43fdd2931584b6822f01b6bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bf:89:94:d7:99:c6:59:01:5e:1c:4a:1d:89:
98:f1:27:3d:af:1b:13:e4:92:cb:9e:c2:f2:31:6f:
5a:5f:ba:18:55:fc:63:c4:43:40:f0:4b:db:c9:1e:
15:31:1c:76:5f:ec:da:39:d7:b1:8c:83:5d:14:55:
82:9b:d6:2b:aa:60:35:ba:5e:52:f9:2b:82:a1:5d:
f4:d5:a5:07:50:fb:8e:3a:a6:8c:10:3e:55:69:57:
ca:18:2f:f4:fd:18:2d:0f:18:67:6f:dd:d7:bc:70:
bf:53:98:86:96:93:f0:1a:ce:58:bd:49:e3:5f:b1:
13:06:db:7a:ce:21:60:01:2b:1e:64:84:ad:72:10:
1c:32:25:0e:cf:e8:a0:4c:22:d9:9b:42:27:cd:9b:
79:a5:6a:d7:2a:33:19:d6:da:bf:bd:0c:e1:b4:1d:
d0:bc:1f:ab:8c:a0:52:c7:de:5a:19:34:79:4a:08:
9d:be:58:2a:6f:f6:ab:4e:2d:14:51:a4:bb:26:5f:
bd:49:a0:c7:50:9e:f3:04:ec:37:e2:80:8e:d9:8e:
ca:42:26:0e:b9:24:5a:1a:e0:0d:76:0c:c2:b0:03:
76:df:22:4e:79:0f:c6:f5:e6:05:ca:f7:69:74:8e:
cb:ec:4c:12:a6:db:a0:9d:19:28:d9:87:a6:79:63:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D3:EF:76:56:45:F2:B4:3F:DD:29:31:58:4B:68:22:F0:1B:6B:DC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rtPvdlZF8rQ_3SkxWEtoIvAba9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.31.0/24
84.32.46.0/24
84.32.60.0/24
84.32.62.0/24
84.32.65.0/24
84.32.67.0-84.32.68.255
84.32.79.0/24
84.32.92.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.156.0/22
84.32.178.0/23
84.32.214.0/23
84.32.221.0/24
84.32.224.0/24
84.32.231.0-84.32.232.255
84.32.235.0/24
84.32.239.0-84.32.240.255
84.32.243.0/24
84.32.246.0/23
84.32.250.0-84.32.253.255
88.216.0.0/24
88.216.3.0/24
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0/24
88.216.38.0-88.216.40.255
88.216.44.0/23
88.216.58.0/24
88.216.60.0-88.216.65.255
88.216.100.0/23
88.216.109.0/24
88.216.111.0/24
88.216.130.0/23
88.216.134.0/23
88.216.180.0/24
88.216.183.0-88.216.184.255
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
4e:72:58:72:e3:ac:d9:8b:05:f6:6d:79:33:58:33:5e:ab:62:
8e:38:80:66:71:c7:46:22:f3:ed:3e:19:19:54:b7:53:04:70:
7a:fe:63:6c:ac:c1:2c:c8:9a:b1:fa:97:37:3c:98:fc:e7:cd:
72:a3:7a:4c:59:21:e2:0a:c7:83:45:60:1e:75:05:a7:03:59:
ed:74:1d:e6:b6:94:1f:c6:aa:cf:70:f5:25:de:74:9f:89:15:
bb:b0:89:82:0d:a5:41:83:b6:5a:c6:83:cc:2e:9a:6b:d3:df:
d3:87:ea:c1:4d:a8:8e:3f:33:9b:a0:48:5d:55:ea:6f:64:60:
76:65:10:69:d5:dc:30:30:99:ae:74:eb:53:1d:2c:b6:6a:e3:
e4:9f:ae:d5:39:99:fc:44:96:9a:16:26:ae:74:33:93:3d:c1:
c4:2d:ce:d5:a6:48:7e:3b:45:f3:63:a4:6c:8b:8d:ab:90:ee:
16:cd:e1:9c:78:a7:5a:4d:24:69:c4:62:e7:c7:6f:03:6f:4d:
b3:65:a4:da:92:e5:6f:9f:ff:51:d8:1f:5e:a9:6f:be:9d:82:
92:f8:3b:1c:e7:1d:23:e4:24:35:5e:f5:82:93:73:2c:ad:96:
00:7b:41:b2:b5:b0:41:a9:ab:be:9b:9c:7e:94:69:13:db:19:
fb:df:b1:ec
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgISAYjj++TSNF/ePNZRnqJfHy52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNjIyMTY0MTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWQzZWY3NjU2NDVmMmI0M2ZkZDI5MzE1ODRiNjgyMmYwMWI2YmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir+JlNeZxlkBXhxKHYmY8Sc9rxsT
5JLLnsLyMW9aX7oYVfxjxENA8EvbyR4VMRx2X+zaOdexjINdFFWCm9YrqmA1ul5S
+SuCoV301aUHUPuOOqaMED5VaVfKGC/0/RgtDxhnb93XvHC/U5iGlpPwGs5YvUnj
X7ETBtt6ziFgASseZIStchAcMiUOz+igTCLZm0InzZt5pWrXKjMZ1tq/vQzhtB3Q
vB+rjKBSx95aGTR5Sgidvlgqb/arTi0UUaS7Jl+9SaDHUJ7zBOw34oCO2Y7KQiYO
uSRaGuANdgzCsAN23yJOeQ/G9eYFyvdpdI7L7EwSptugnRko2YemeWPhNwIDAQAB
o4IDcTCCA20wHQYDVR0OBBYEFK7T73ZWRfK0P90pMVhLaCLwG2vcMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvcnRQdmRsWkY4clFfM1NreFdFdG9JdkFiYTl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBhQYIKwYBBQUHAQcBAf8EggF0MIIBcDCCAWwEAgABMIIB
ZAMEAFQgCDAMAwQCVCAUAwQCVCAYAwQAVCAfAwQAVCAuAwQAVCA8AwQAVCA+AwQA
VCBBMAwDBABUIEMDBABUIEQDBABUIE8DBABUIFwwDAMEAlQgbAMEAFQgbgMEAlQg
lAMEAFQgmQMEAlQgnAMEAVQgsgMEAVQg1gMEAFQg3QMEAFQg4DAMAwQAVCDnAwQA
VCDoAwQAVCDrMAwDBABUIO8DBABUIPADBABUIPMDBAFUIPYwDAMEAVQg+gMEAVQg
/AMEAFjYAAMEAFjYAwMEAFjYEAMEAVjYFgMEAFjYIAMEAFjYIzAMAwQBWNgmAwQA
WNgoAwQBWNgsAwQAWNg6MAwDBAJY2DwDBAFY2EADBAFY2GQDBABY2G0DBABY2G8D
BAFY2IIDBAFY2IYDBABY2LQwDAMEAFjYtwMEAFjYuAMEAVjYvAMEAFjYxQMEAljY
1AMEAFjY3DAMAwQCWNjsAwQDWNjwMA0GCSqGSIb3DQEBCwUAA4IBAQBOclhy46zZ
iwX2bXkzWDNeq2KOOIBmccdGIvPtPhkZVLdTBHB6/mNsrMEsyJqx+pc3PJj8581y
o3pMWSHiCseDRWAedQWnA1ntdB3mtpQfxqrPcPUl3nSfiRW7sImCDaVBg7ZaxoPM
Lppr09/Th+rBTaiOPzOboEhdVepvZGB2ZRBp1dwwMJmudOtTHSy2auPkn67VOZn8
RJaaFiaudDOTPcHELc7Vpkh+O0XzY6Rsi42rkO4WzeGceKdaTSRpxGLnx28Db02z
ZaTakuVvn/9R2B9eqW++nYKS+Dsc5x0j5CQ1XvWCk3MsrZYAe0GytbBBqau+m5x+
lGkT2xn737Hs
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:33 2023 by rpki-client on console-ams.rpki-client.org