Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tm01fGJX1ylodB_o9Zhs9u4zIEo.roa
File: tm01fGJX1ylodB_o9Zhs9u4zIEo.roa (raw, json)
Hash identifier: ePePTdS87twnrbHCp8O10k+rrdoNRMgs5VTTVggi3+M=
Subject key identifier: B6:6D:35:7C:62:57:D7:29:68:74:1F:E8:F5:98:6C:F6:EE:33:20:4A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018AEF4EE6B92CAE5147CAB8BED3661C8AA6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tm01fGJX1ylodB_o9Zhs9u4zIEo.roa
Signing time: Mon 02 Oct 2023 07:33:59 +0000
ROA not before: Mon 02 Oct 2023 07:33:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.233.0/24 maxlen: 24
84.32.236.0/23 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Oct 2023 18:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:4e:e6:b9:2c:ae:51:47:ca:b8:be:d3:66:1c:8a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 2 07:33:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b66d357c6257d72968741fe8f5986cf6ee33204a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:82:d4:75:50:c1:06:6f:59:a5:49:a0:c4:e6:
58:50:8b:94:2c:cb:79:a9:d0:a8:40:70:55:9d:48:
f9:6b:dc:69:5a:dc:6b:77:7c:09:ae:00:67:59:ed:
77:58:5b:c4:f1:e8:ee:e6:13:b8:e1:3f:74:57:ed:
3a:81:e9:f1:d5:0e:9d:1a:56:1e:2b:a5:6e:55:07:
86:45:3b:c5:86:94:8e:7e:7a:7d:e6:95:b3:08:4f:
9f:d7:e7:0a:b7:7e:83:d7:57:bd:75:06:2d:a3:e4:
09:67:21:b4:11:2c:01:7e:47:3b:c3:a3:57:c2:82:
c8:48:b2:e9:c2:ff:cc:d9:74:5d:51:df:6f:06:31:
44:5e:37:6c:9f:e3:80:23:46:22:82:5c:3a:87:be:
b9:aa:3a:8b:0f:9c:52:d9:c2:87:15:7b:57:c8:e4:
b3:7f:3f:dc:40:9a:c1:b9:1f:89:29:f3:7c:4a:49:
da:8a:c2:fa:bc:18:87:61:ec:a4:6e:98:8e:c1:91:
cd:ce:ec:f7:5f:e7:5d:2b:de:ca:5e:7d:75:b3:a1:
90:db:39:e0:b1:f5:ad:41:be:2d:37:54:ae:c0:f6:
f4:11:80:e9:8e:aa:df:74:1a:26:1b:da:97:31:10:
c6:d2:43:dd:8f:f3:64:8f:d9:68:2d:04:96:21:81:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6D:35:7C:62:57:D7:29:68:74:1F:E8:F5:98:6C:F6:EE:33:20:4A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tm01fGJX1ylodB_o9Zhs9u4zIEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.8.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.42.0/23
84.32.46.0-84.32.51.255
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0-84.32.66.255
84.32.68.0/24
84.32.76.0/23
84.32.83.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0/22
84.32.105.0/24
84.32.107.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0-84.32.176.255
84.32.178.0/23
84.32.211.0-84.32.215.255
84.32.219.0-84.32.221.255
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.35.0-88.216.36.255
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.47.0/24
88.216.58.0/24
88.216.60.0-88.216.65.255
88.216.92.0/23
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:be:17:48:25:d2:d8:ab:29:07:38:1a:34:95:7a:b5:97:cb:
c8:91:ad:a4:b1:75:10:6a:51:80:47:39:5e:15:83:fd:9c:13:
f1:dd:9f:b8:ec:6c:b3:84:80:3c:90:a4:61:f1:ff:21:2c:ed:
6a:13:5f:d0:b2:25:63:86:82:98:4b:d9:81:33:b0:12:00:e9:
f9:9d:b1:47:23:23:a8:91:80:60:1e:a6:2a:1c:ef:9a:eb:a0:
2d:78:90:05:5d:0b:f0:7f:92:f7:35:dc:e7:f4:d6:a4:21:d4:
07:2a:5d:b7:59:e9:f2:a1:da:89:a4:3f:8c:81:32:cc:a2:89:
ef:9d:db:9c:01:eb:8e:0c:3c:11:98:8f:f1:0a:a1:6f:d2:8f:
bd:67:ef:49:50:99:84:d0:d4:1a:26:f4:ee:9d:b9:1b:09:fd:
74:1d:be:23:06:93:45:c8:9a:22:64:22:27:8a:69:bf:39:7e:
6c:42:37:f5:c6:dd:f7:73:f0:94:53:0b:b5:de:f8:d9:a1:1b:
60:1b:f8:5f:5c:ef:13:65:48:97:c6:7a:10:75:d0:1f:58:03:
73:6c:60:9c:95:7b:17:c6:41:87:92:46:80:49:64:a2:d4:dc:
5b:be:a9:28:a4:a1:4f:92:2a:e7:b6:2e:fb:93:23:bc:09:e1:
79:c7:84:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:32 2024 by rpki-client on console-ams.rpki-client.org