Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xk6KBml12yjyA-tnD1QTseABeuI.roa
File: xk6KBml12yjyA-tnD1QTseABeuI.roa (raw, json)
Hash identifier: +NHW4pYydROey7ygy2rDd7xu4/8iwhJ7ecLUahGHV4A=
Subject key identifier: C6:4E:8A:06:69:75:DB:28:F2:03:EB:67:0F:54:13:B1:E0:01:7A:E2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B770DD199F1BE29133C8BB059208F97BA
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xk6KBml12yjyA-tnD1QTseABeuI.roa
Signing time: Sat 28 Oct 2023 16:11:16 +0000
ROA not before: Sat 28 Oct 2023 16:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.233.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.237.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.253.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.11.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.172.0/24 maxlen: 24
84.32.174.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
88.216.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:77:0d:d1:99:f1:be:29:13:3c:8b:b0:59:20:8f:97:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 28 16:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c64e8a066975db28f203eb670f5413b1e0017ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:84:42:2f:1a:ec:49:8d:26:b4:ed:66:96:
8d:24:7b:d2:e1:42:0c:1c:ff:2e:dc:10:2b:26:cd:
f4:16:5b:b3:0b:bf:fc:e7:ad:8b:7a:63:5e:e6:f6:
fd:e7:0f:0b:5e:86:a8:80:76:6a:1a:80:22:1b:9b:
85:2c:8c:50:6d:c4:fa:75:34:2a:8a:1b:27:4c:09:
64:90:53:51:13:db:63:22:10:9e:50:61:42:79:7d:
0c:f0:85:9f:56:88:d1:80:6a:8e:ab:9c:54:98:c8:
3f:49:95:f4:e8:25:c9:d7:3a:9f:e3:46:3c:e6:53:
37:ba:b2:e3:92:47:f5:07:58:68:b9:bb:83:e5:33:
99:2b:dd:22:bf:91:4c:f2:a2:89:3a:f0:27:54:35:
74:08:df:4d:d7:96:e7:11:e5:0c:e9:70:30:db:c6:
bf:16:57:80:bf:2d:27:9c:f3:a5:7b:45:d3:fd:0e:
a9:fd:c8:6a:47:43:d0:fd:98:a5:51:c3:24:88:67:
4e:75:b9:8e:6d:0f:46:db:48:a4:9a:70:b3:41:51:
63:a9:9f:5c:48:c1:76:f5:74:44:04:5e:a3:a1:24:
0a:a3:11:2f:51:5d:85:1b:f6:89:ab:4b:97:dc:f6:
a8:60:03:eb:be:6c:ba:f8:c1:91:30:bb:0d:f0:c1:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4E:8A:06:69:75:DB:28:F2:03:EB:67:0F:54:13:B1:E0:01:7A:E2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xk6KBml12yjyA-tnD1QTseABeuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.11.0/24
84.32.14.0/24
84.32.27.0-84.32.31.255
84.32.42.0/23
84.32.62.0/24
84.32.65.0/24
84.32.68.0/24
84.32.76.0/23
84.32.79.0/24
84.32.83.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0-84.32.94.255
84.32.105.0/24
84.32.150.0/24
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.172.0/24
84.32.174.0/23
84.32.211.0-84.32.213.255
84.32.219.0/24
84.32.221.0-84.32.222.255
84.32.224.0/24
84.32.226.0/24
84.32.228.0/23
84.32.232.0/22
84.32.237.0-84.32.243.255
84.32.245.0-84.32.247.255
84.32.250.0-84.32.255.255
88.216.97.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:5a:11:34:e0:9a:d2:1d:c8:40:7f:b4:64:74:7a:89:be:c8:
75:fe:60:bf:16:55:3e:87:e7:9a:47:66:bd:16:8a:ef:1d:8d:
79:01:e3:01:23:67:af:75:37:7a:ac:47:30:4a:a0:22:39:e0:
3a:ef:96:e1:5d:1e:aa:ed:e6:92:c7:d6:85:72:aa:d1:90:ac:
b7:a4:bf:69:8e:db:cf:df:0c:e0:e2:0d:da:37:56:33:87:cd:
f1:69:50:7d:7d:8d:89:df:c2:ac:e1:43:05:a8:12:0b:b7:bc:
28:9e:76:b1:a9:75:df:23:21:69:82:e1:0a:de:2e:ab:7b:2f:
c1:43:f3:42:82:09:e9:2f:21:75:10:ba:fc:e5:4b:f2:3d:25:
cd:eb:a6:6d:32:50:2b:51:93:04:19:1a:59:ca:70:7a:e3:47:
f9:d2:a1:e0:2e:40:35:53:94:a7:20:d6:7b:bf:e5:eb:45:03:
3a:c0:24:85:e9:3f:e2:fa:11:c2:5f:07:04:c0:9d:ce:6c:c6:
dd:6b:18:4e:24:1d:b5:c3:6e:01:29:f2:70:d0:0e:57:8c:62:
e6:c4:7f:51:45:d4:49:dc:59:45:cc:6d:0c:96:c1:95:16:7c:
ab:f7:bc:b0:67:9d:08:e1:a0:c0:ea:18:7b:b2:d3:14:17:6f:
4c:e4:b0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 28 18:50:47 2023 by rpki-client on console-ams.rpki-client.org