Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xP5F0VXuWUdYcKUmJyN3jc2MLKM.roa
File: xP5F0VXuWUdYcKUmJyN3jc2MLKM.roa (raw, json)
Hash identifier: TD3FkqbFA9MmtEpj0yvTVdLHc+ETSX1QqXx1TRa9vGo=
Subject key identifier: C4:FE:45:D1:55:EE:59:47:58:70:A5:26:27:23:77:8D:CD:8C:2C:A3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01892F0B6708779D2A1A7628D22EEB89A388
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xP5F0VXuWUdYcKUmJyN3jc2MLKM.roa
Signing time: Fri 07 Jul 2023 06:30:23 +0000
ROA not before: Fri 07 Jul 2023 06:30:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.21.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jul 2023 06:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:0b:67:08:77:9d:2a:1a:76:28:d2:2e:eb:89:a3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 7 06:30:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4fe45d155ee59475870a5262723778dcd8c2ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:00:fc:e2:c3:65:96:c9:18:67:06:97:f4:
95:e8:04:93:be:f7:4f:34:c9:1d:01:9e:ec:d4:60:
13:b5:54:30:cf:9f:29:90:4b:33:ed:52:12:7b:26:
28:15:2e:f6:13:37:cd:72:17:27:0a:ae:00:12:e0:
3d:91:59:af:ed:ca:05:87:d0:df:1d:d2:ae:19:a9:
58:88:99:da:34:ad:b0:91:e4:db:5d:a7:02:b2:cb:
cf:36:a6:ec:43:2e:29:8d:ba:55:5d:ce:ec:43:e4:
59:86:35:f8:2d:7d:f6:ba:a0:5c:54:74:44:23:ce:
b6:1c:0a:9d:c5:b7:d0:b4:96:14:45:c1:94:4b:73:
6a:2d:c9:41:0e:29:b2:d2:70:d4:a9:58:f2:03:54:
8c:7f:58:cc:f2:c4:f3:d5:e2:88:0e:3e:71:d7:71:
d4:f6:8e:5b:8a:79:7b:a7:b9:7c:82:f5:29:f6:58:
5d:e9:1f:7c:89:b5:87:51:3f:8e:ba:15:69:a5:91:
a0:e5:ab:26:4b:10:91:39:9a:d4:39:90:d8:7e:b5:
d8:30:64:40:3e:b4:b1:5f:6a:3c:ce:49:c4:7f:95:
74:41:38:a9:67:5d:8f:09:90:b6:6f:8e:94:44:fb:
fc:bf:a1:9e:06:dc:77:68:f5:76:5f:fb:94:2f:03:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FE:45:D1:55:EE:59:47:58:70:A5:26:27:23:77:8D:CD:8C:2C:A3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xP5F0VXuWUdYcKUmJyN3jc2MLKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.14.0/24
84.32.20.0-84.32.27.255
84.32.31.0/24
84.32.46.0/24
84.32.50.0/23
84.32.58.0/24
84.32.79.0/24
84.32.83.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.158.0/23
84.32.174.0/23
84.32.178.0/23
84.32.213.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.240.255
84.32.242.0-84.32.247.255
84.32.250.0-84.32.253.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0/24
88.216.40.0/24
88.216.44.0/23
88.216.58.0/24
88.216.61.0-88.216.65.255
88.216.93.0/24
88.216.100.0/23
88.216.104.0/23
88.216.107.0/24
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0/23
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.222.0/24
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
94:ac:d5:22:a6:d2:a4:f4:da:13:95:f1:aa:01:bb:50:74:e3:
c0:6b:83:ce:02:31:72:02:1f:25:1e:82:1c:fa:8d:5e:af:81:
6e:29:ed:5a:2c:6a:e3:12:22:3c:3f:a6:f4:df:8b:25:89:3d:
ec:d2:9b:9b:57:9c:62:cd:75:da:6c:74:6e:c3:7d:c1:34:9a:
86:f5:a4:68:68:8d:ae:14:40:94:e0:6a:ff:6f:79:8e:6c:69:
4a:22:91:a8:68:71:fd:d8:7c:cc:4c:ba:53:d9:41:38:f9:f4:
b7:b4:e4:40:e2:b2:0c:c1:48:29:d6:66:34:df:91:82:f0:22:
18:91:f3:15:1e:01:89:77:a0:c0:04:7c:97:df:24:b9:35:55:
ca:b7:47:40:68:07:60:4d:75:e6:6f:14:10:24:0c:38:9f:45:
21:51:c9:21:80:a2:73:32:f2:d3:9d:d3:58:45:b2:e1:d8:47:
5d:34:1f:4a:e3:5b:45:c3:32:03:cf:8c:2f:65:1f:3a:7e:ea:
bc:b2:f2:61:99:95:40:94:df:e0:f9:7f:8e:e5:e8:81:9d:8b:
2e:5c:a2:9e:41:20:18:53:39:fc:5b:ff:ff:a3:d6:8c:e3:1c:
69:d2:50:8c:e2:fe:e1:5e:c4:70:3d:40:6a:1e:9c:24:2e:4d:
41:15:1b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:33 2024 by rpki-client on console-ams.rpki-client.org