Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tAWnnD7i1_txPxBfZo7fLymhuso.roa
File: tAWnnD7i1_txPxBfZo7fLymhuso.roa (raw, json)
Hash identifier: RXIInPQwcJJrXvwYuhV6pYO/lK6EEwmziutfpmtIbCM=
Subject key identifier: B4:05:A7:9C:3E:E2:D7:FB:71:3F:10:5F:66:8E:DF:2F:29:A1:BA:CA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188760C19E707440A71135DD678FAFD9D7D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tAWnnD7i1_txPxBfZo7fLymhuso.roa
Signing time: Thu 01 Jun 2023 08:21:24 +0000
ROA not before: Thu 01 Jun 2023 08:21:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:0c:19:e7:07:44:0a:71:13:5d:d6:78:fa:fd:9d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 1 08:21:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b405a79c3ee2d7fb713f105f668edf2f29a1baca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:4b:a4:15:7f:f3:77:6a:8f:43:ae:41:d6:
3e:b6:18:c2:ed:7c:16:1c:d5:7a:57:4a:35:4e:e2:
fd:2c:48:f5:79:a6:de:e8:0a:ae:8f:ce:76:d5:0e:
b4:8f:15:24:ea:d5:94:ad:11:51:da:8d:93:a7:28:
60:bf:ca:9e:5b:4e:74:e2:e5:7d:43:d6:f1:e2:dd:
c1:b7:9d:48:b5:53:f1:75:af:97:af:a9:e0:c9:ea:
aa:c6:55:cf:f4:b2:ce:9e:a2:72:34:d2:4b:5b:78:
b2:30:c1:80:d3:57:df:b7:1a:d4:73:ae:50:fe:e3:
6f:5d:88:17:bd:ac:dd:d0:d2:45:9f:e2:c2:da:3e:
a7:02:03:ce:85:a0:98:60:76:8e:b3:e8:35:c5:df:
fd:1a:9b:57:0f:d9:08:99:20:58:06:4f:81:df:44:
99:4e:2f:8c:63:7d:aa:54:b6:5c:d7:18:a2:f0:c7:
6e:51:b0:95:91:88:38:f9:a4:19:ad:6f:0e:5a:66:
c2:4c:b2:ea:9e:65:c5:b7:37:8f:c3:26:47:49:8f:
7b:36:64:2a:69:bd:f9:a3:7f:49:ab:86:fe:90:e2:
0c:81:e3:b8:63:8b:a3:79:9d:41:77:4b:87:73:e6:
cb:82:03:aa:33:26:26:16:b0:08:b9:ce:23:60:6e:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:05:A7:9C:3E:E2:D7:FB:71:3F:10:5F:66:8E:DF:2F:29:A1:BA:CA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tAWnnD7i1_txPxBfZo7fLymhuso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.30.0/24
84.32.46.0/24
84.32.60.0/24
84.32.65.0/24
84.32.67.0-84.32.68.255
84.32.79.0/24
84.32.89.0/24
84.32.110.0/24
84.32.148.0/22
84.32.158.0/23
84.32.177.0/24
84.32.212.0/24
84.32.214.0/23
84.32.221.0/24
84.32.224.0/24
84.32.231.0-84.32.232.255
84.32.235.0/24
84.32.239.0-84.32.240.255
84.32.243.0/24
84.32.250.0-84.32.253.255
88.216.0.0/24
88.216.3.0/24
88.216.16.0/24
88.216.32.0/24
88.216.35.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.100.0/24
88.216.111.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.232.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:e9:c0:32:12:fc:be:6c:cb:25:30:4b:1b:f3:3d:55:c2:ba:
20:3e:20:35:b6:55:30:34:e5:b7:ad:05:ec:b3:ce:b9:c3:64:
86:0b:66:e1:1c:d1:7e:67:11:2a:71:18:df:72:af:94:37:af:
1d:26:a0:7c:49:75:04:3b:03:f3:36:6d:28:64:1a:ec:e0:42:
ed:c7:66:2a:5f:a8:a5:37:fe:4e:17:de:7a:53:33:79:bb:63:
b9:d6:ab:34:ec:79:5f:60:b4:2a:87:59:03:f5:a3:e8:f5:59:
91:fd:d9:32:fc:9d:3f:18:2f:e6:e0:5a:8a:d5:22:02:90:2c:
af:01:d8:68:b7:2c:f1:f0:07:95:ba:6d:3c:16:b2:5c:1c:fe:
3d:56:02:88:84:da:07:c4:5e:61:bb:0b:60:fe:91:c8:38:95:
f0:ea:55:87:7a:93:6c:7a:d9:b6:45:45:42:5c:7a:eb:25:f1:
3b:96:f7:d8:83:3e:4d:87:ad:22:b8:78:32:a2:7c:81:54:17:
db:c1:d9:92:65:00:cb:e2:d6:3c:e5:f4:07:d4:e9:aa:f3:f7:
3e:ff:d6:fa:89:6c:ba:9f:c6:0e:f9:27:b5:bf:1e:21:15:44:
d2:c8:fd:bf:7f:58:58:c9:51:80:75:e2:c5:bf:10:27:fa:7d:
7b:5e:53:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:51 2023 by rpki-client on console-fra.rpki-client.org