Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vwiu_sUK8hjubFP-3ji2EKYhLDo.roa
File: vwiu_sUK8hjubFP-3ji2EKYhLDo.roa (raw, json)
Hash identifier: CzUh4sbZ7ae3gFqg5z2QNYvHtEfZ0ohF+BD0G/z2qvE=
Subject key identifier: BF:08:AE:FE:C5:0A:F2:18:EE:6C:53:FE:DE:38:B6:10:A6:21:2C:3A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B4E9DF354C3B0FEF00BB4CFF92984705F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vwiu_sUK8hjubFP-3ji2EKYhLDo.roa
Signing time: Fri 20 Oct 2023 19:44:16 +0000
ROA not before: Fri 20 Oct 2023 19:44:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.233.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.237.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.253.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.182.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.33.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 07:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4e:9d:f3:54:c3:b0:fe:f0:0b:b4:cf:f9:29:84:70:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 20 19:44:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf08aefec50af218ee6c53fede38b610a6212c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:3f:c2:ee:c4:d5:fc:0f:60:16:f8:d1:3b:
62:35:56:d9:be:e6:b2:c3:6b:e9:6c:9e:60:b9:28:
6d:9a:e2:26:f2:8f:36:8b:46:a1:3b:b8:c5:89:4a:
c0:0b:2f:60:14:88:b8:25:02:dc:62:fd:f5:ca:56:
26:8d:2c:88:56:91:73:d0:16:4f:d8:18:58:cc:40:
51:b4:bc:a6:18:c4:ad:1d:d1:73:dd:33:88:4c:84:
78:32:38:9d:7d:ee:0f:18:65:c8:c2:c1:e7:7e:72:
16:9b:37:a6:74:76:65:37:2a:2b:44:90:bb:bf:6e:
83:d7:6f:9c:9a:8e:2a:d9:bc:95:c9:17:e2:41:c1:
11:45:2f:57:92:d7:44:d9:b5:63:b5:d3:0a:38:55:
94:db:ab:e4:9a:56:0b:bf:27:11:45:87:f0:b5:52:
3e:97:6d:e2:41:27:3c:a0:18:bb:01:d6:27:8d:ad:
e4:76:ab:ed:70:3e:03:c8:23:76:ac:07:62:e5:9a:
69:b4:8c:71:f4:6d:f9:02:d3:5f:01:b8:4b:89:3c:
51:a5:28:cf:eb:97:d3:ee:db:ee:ac:7d:27:27:84:
a8:e0:59:4a:1b:30:72:27:16:8b:5c:14:70:7a:27:
de:62:cb:96:1e:38:a5:45:6c:b6:33:cd:78:e3:aa:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:08:AE:FE:C5:0A:F2:18:EE:6C:53:FE:DE:38:B6:10:A6:21:2C:3A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vwiu_sUK8hjubFP-3ji2EKYhLDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.8.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.42.0/23
84.32.46.0/23
84.32.62.0/24
84.32.64.0-84.32.66.255
84.32.68.0/24
84.32.76.0/23
84.32.79.0/24
84.32.83.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0/22
84.32.105.0/24
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0-84.32.176.255
84.32.178.0/23
84.32.211.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0/22
84.32.237.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/23
88.216.3.0/24
88.216.16.0/24
88.216.22.0/23
88.216.33.0/24
88.216.35.0/24
88.216.38.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.47.0/24
88.216.58.0/24
88.216.64.0/23
88.216.93.0/24
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.182.0/23
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
45:27:9f:91:27:04:bc:2f:00:01:8a:e6:2d:43:c4:59:9c:64:
82:eb:71:b7:de:e0:8b:77:af:04:96:e5:3a:64:46:91:71:e8:
59:5b:72:02:d0:aa:15:d5:65:24:30:19:b0:e9:98:11:ff:56:
5b:82:bb:b8:23:b8:d1:7f:e3:4e:c8:87:50:01:2b:42:16:7d:
9a:3a:8f:34:b4:8b:4f:15:01:ca:21:4a:89:ab:bb:1d:f8:17:
49:bb:06:53:8d:5b:58:4c:91:26:2e:1c:13:66:b1:df:f9:da:
b5:3e:89:d3:aa:68:db:3c:ee:08:ae:3a:19:b8:14:c5:ca:ae:
44:e2:ce:b5:3f:a9:c2:81:c9:b2:06:05:fb:5b:e9:8c:4b:6f:
1b:7e:44:b6:0b:54:d4:ea:15:f8:d0:ed:b5:2e:7a:ac:d1:f8:
d8:c1:a3:9c:d0:35:1c:b5:5e:1a:62:37:7f:a4:eb:44:84:5a:
25:db:e7:c8:9b:b3:8d:f5:ea:1d:e7:c5:4a:97:1b:b2:47:a8:
43:31:43:f7:87:de:90:aa:5c:99:8f:3c:2d:19:22:b1:c6:5d:
c9:96:f6:8e:be:eb:aa:47:da:4f:77:5a:06:9f:d4:81:20:48:
d7:7a:5a:c1:62:56:75:7a:3f:36:d7:a2:85:19:40:80:d1:d5:
d1:8a:18:2d
-----BEGIN CERTIFICATE-----
MIIG8jCCBdqgAwIBAgISAYtOnfNUw7D+8Au0z/kphHBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMxMDIwMTk0NDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjA4YWVmZWM1MGFmMjE4ZWU2YzUzZmVkZTM4YjYxMGE2MjEyYzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH4/wu7E1fwPYBb40TtiNVbZvuay
w2vpbJ5guShtmuIm8o82i0ahO7jFiUrACy9gFIi4JQLcYv31ylYmjSyIVpFz0BZP
2BhYzEBRtLymGMStHdFz3TOITIR4Mjidfe4PGGXIwsHnfnIWmzemdHZlNyorRJC7
v26D12+cmo4q2byVyRfiQcERRS9XktdE2bVjtdMKOFWU26vkmlYLvycRRYfwtVI+
l23iQSc8oBi7AdYnja3kdqvtcD4DyCN2rAdi5ZpptIxx9G35AtNfAbhLiTxRpSjP
65fT7tvurH0nJ4So4FlKGzByJxaLXBRweifeYsuWHjilRWy2M81446rohQIDAQAB
o4ID/jCCA/owHQYDVR0OBBYEFL8Irv7FCvIY7mxT/t44thCmISw6MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvdndpdV9zVUs4aGp1YkZQLTNqaTJFS1loTERvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICEgYIKwYBBQUHAQcBAf8EggIBMIIB/TCCAfkEAgABMIIB
8QMEAFQgBDAMAwQAVCAHAwQAVCAIAwQAVCAOMAwDBAJUIBQDBAFUIBwDBABUIB8D
BAFUICoDBAFUIC4DBABUID4wDAMEBlQgQAMEAFQgQgMEAFQgRAMEAVQgTAMEAFQg
TwMEAFQgUwMEAFQgVTAMAwQDVCBYAwQAVCBaAwQCVCBcAwQAVCBpAwQCVCCUAwQA
VCCZAwQAVCCbMAwDBABUIJ0DBAVUIIAwDAMEAVQgrgMEAFQgsAMEAVQgsjAMAwQA
VCDTAwQDVCDQAwQAVCDbAwQAVCDdAwQAVCDgAwQAVCDiAwQAVCDkAwQCVCDoMAwD
BABUIO0DBABUIPIDBAJUIPQwCwMEAFQg+QMDAFQgAwQBWNgAAwQAWNgDAwQAWNgQ
AwQBWNgWAwQAWNghAwQAWNgjAwQAWNgmAwQAWNgoAwQAWNgqAwQBWNgsAwQAWNgv
AwQAWNg6AwQBWNhAAwQAWNhdAwQAWNhfMAwDBABY2GUDBABY2GYDBAJY2GgwDAME
AFjYbQMEBFjYYDAMAwQHWNiAAwQAWNiEAwQBWNiGAwQAWNi0AwQBWNi2MAwDBABY
2LsDBAZY2IAwDAMEAFjYxQMEAFjYxgMEAFjY0DAMAwQAWNjTAwQDWNjQAwQAWNjc
AwQAWNjfAwQCWNjkAwQCWNjsMA0GCSqGSIb3DQEBCwUAA4IBAQBFJ5+RJwS8LwAB
iuYtQ8RZnGSC63G33uCLd68EluU6ZEaRcehZW3IC0KoV1WUkMBmw6ZgR/1Zbgru4
I7jRf+NOyIdQAStCFn2aOo80tItPFQHKIUqJq7sd+BdJuwZTjVtYTJEmLhwTZrHf
+dq1PonTqmjbPO4IrjoZuBTFyq5E4s61P6nCgcmyBgX7W+mMS28bfkS2C1TU6hX4
0O21Lnqs0fjYwaOc0DUctV4aYjd/pOtEhFol2+fIm7ON9eod58VKlxuyR6hDMUP3
h96QqlyZjzwtGSKxxl3JlvaOvuuqR9pPd1oGn9SBIEjXelrBYlZ1ej8216KFGUCA
0dXRihgt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org