Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v1oDTks5Z1wwrdtHjJFGyLNGsTw.roa
File: v1oDTks5Z1wwrdtHjJFGyLNGsTw.roa (raw, json)
Hash identifier: USw3CREPQtL3Czik/eEfuUcYTV3vv/Y31MP+tixi9Nw=
Subject key identifier: BF:5A:03:4E:4B:39:67:5C:30:AD:DB:47:8C:91:46:C8:B3:46:B1:3C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B756C56AC9A827A1CDCBA08808ECC41BE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v1oDTks5Z1wwrdtHjJFGyLNGsTw.roa
Signing time: Sat 28 Oct 2023 08:35:16 +0000
ROA not before: Sat 28 Oct 2023 08:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.233.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.237.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.253.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
88.216.182.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.33.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:75:6c:56:ac:9a:82:7a:1c:dc:ba:08:80:8e:cc:41:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 28 08:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf5a034e4b39675c30addb478c9146c8b346b13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8e:3b:01:0e:24:5e:53:7c:70:59:ff:b8:5c:
2d:61:6b:a8:6f:51:bb:c9:d4:ff:56:7e:de:43:d4:
75:15:06:0c:e8:6b:9f:1d:b9:95:2b:58:c1:b4:af:
7b:14:61:72:f6:54:c2:9a:df:c6:bb:1b:dc:84:35:
9b:3e:fd:e7:bb:0c:d7:0d:fb:80:9c:19:6e:79:02:
89:52:31:ac:59:fe:a7:50:b5:2b:81:11:4d:0d:26:
dd:41:0e:29:34:4a:e2:13:05:6e:44:dd:76:ad:fa:
ac:97:66:d1:ba:9b:0e:a4:35:2a:64:e6:9e:55:97:
a7:09:59:d1:f8:6f:e2:35:21:a3:d0:0a:89:13:99:
69:2c:f7:a5:b8:d8:7e:84:d9:57:e4:47:02:a2:b3:
d1:9a:3e:9d:06:e6:14:40:4b:66:d6:3a:6c:c0:a1:
01:d5:0d:83:2c:36:4d:9e:19:c2:90:49:8a:3a:8e:
13:c6:ec:cd:2e:7a:7e:4b:d2:90:f8:05:2a:32:9f:
b6:41:ac:93:11:e9:df:1a:23:f6:e7:26:30:bc:69:
4f:3d:e4:0e:c5:04:91:12:1f:c9:dd:53:15:93:99:
bd:c2:e9:b5:08:05:d4:59:aa:a8:c6:21:aa:a8:7d:
d7:78:7b:de:6b:bc:a2:79:13:17:3d:60:5b:58:c9:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5A:03:4E:4B:39:67:5C:30:AD:DB:47:8C:91:46:C8:B3:46:B1:3C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v1oDTks5Z1wwrdtHjJFGyLNGsTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.66.0/24
84.32.95.0/24
84.32.105.0/24
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.211.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0/22
84.32.237.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/23
88.216.3.0/24
88.216.16.0/24
88.216.22.0/23
88.216.33.0/24
88.216.35.0/24
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.47.0/24
88.216.58.0/24
88.216.64.0/23
88.216.93.0/24
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.180.0/22
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
68:ea:eb:d5:cd:af:2f:c6:09:5b:ce:c6:dc:ec:be:41:e9:66:
eb:13:5a:7c:60:4b:79:62:d9:0b:ea:ff:11:35:33:71:63:44:
38:7b:97:50:51:7e:9f:a0:02:a4:04:5a:7f:37:24:d9:48:9d:
48:e1:85:df:23:a1:09:64:b8:21:30:ea:e2:06:d2:9b:70:e3:
fa:80:a2:aa:58:c1:98:08:ac:da:66:ca:5d:38:22:b2:ec:44:
32:fd:c8:cf:1f:29:f6:35:92:66:7f:ee:6d:1a:d0:60:79:d9:
26:d0:54:2d:b8:2c:19:37:26:e4:fa:62:bb:0e:92:3d:92:87:
90:85:40:ec:14:cb:f5:42:6a:0d:d5:83:7c:1e:45:02:da:3e:
aa:c0:04:01:81:f2:c0:1d:c3:cb:40:4e:cc:2c:ac:28:4c:de:
b5:3c:54:9f:43:bb:fa:ab:2b:c5:d1:f0:f6:0c:f6:96:2b:f0:
53:a8:e8:00:62:05:8a:96:26:c6:ce:b2:f3:d6:1c:8e:04:a3:
c2:22:0e:74:3c:e7:52:00:44:17:5c:a5:2c:14:83:24:ba:be:
6d:4b:e4:f1:08:c7:c6:d5:e6:12:e2:75:52:d4:43:cd:80:4a:
5a:bb:c3:00:1d:a2:34:6f:ae:39:48:9c:e6:95:e3:5c:c8:d7:
99:a7:6d:39
-----BEGIN CERTIFICATE-----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==
Generated at Sat Oct 28 16:23:41 2023 by rpki-client on console-fra.rpki-client.org