Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zBosNJ7WTJ8Y0frpx89mqdITkxY.roa
File: zBosNJ7WTJ8Y0frpx89mqdITkxY.roa (raw, json)
Hash identifier: ffVTFt4Mw++YMKC/a+fOXjyIS0wF80xIpn1MwqDb3s4=
Subject key identifier: CC:1A:2C:34:9E:D6:4C:9F:18:D1:FA:E9:C7:CF:66:A9:D2:13:93:16
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018AFE6491AAF07029F7843D9375C16508FC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zBosNJ7WTJ8Y0frpx89mqdITkxY.roa
Signing time: Thu 05 Oct 2023 05:51:58 +0000
ROA not before: Thu 05 Oct 2023 05:51:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.236.0/23 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.85.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.4.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Oct 2023 07:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:64:91:aa:f0:70:29:f7:84:3d:93:75:c1:65:08:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 5 05:51:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc1a2c349ed64c9f18d1fae9c7cf66a9d2139316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3d:be:57:fb:0c:18:b2:cd:06:e4:4c:2a:ae:
b1:64:cf:cd:a9:86:69:ca:d8:d9:84:1b:09:86:1a:
52:3f:bb:5a:3e:df:c0:65:38:cc:30:67:c8:c3:e0:
be:ba:cc:5a:54:fc:14:ca:32:7c:fe:55:3c:70:78:
ac:53:4a:e6:12:38:c5:11:84:8c:fe:7b:47:e7:61:
d3:6d:07:e0:9c:eb:cb:34:08:1d:80:2b:2c:56:5d:
65:9b:ea:d2:aa:2e:9b:8a:21:f2:e7:39:7d:4e:b8:
31:54:bc:cb:6d:1f:36:df:30:20:88:a4:c2:89:f0:
93:84:9f:e9:90:c7:1d:20:5f:cb:76:5e:22:88:b5:
37:7f:b8:98:68:30:a0:c7:e7:af:81:03:23:b0:02:
75:92:4b:0f:6f:5a:2b:46:20:91:ad:28:78:b4:47:
0b:18:cd:da:d7:8e:5e:16:4e:1a:7c:28:f2:ab:a4:
2e:58:da:bc:9d:a7:e4:ae:b0:41:7a:ed:b9:15:3d:
50:18:ff:e2:cb:1c:fa:64:20:21:e9:da:d1:15:c3:
33:7e:50:63:bc:ec:98:c6:60:63:ac:53:95:08:77:
d7:81:f5:51:a9:3d:6e:f7:c0:83:79:46:74:de:bb:
39:17:f2:0c:3f:23:da:93:09:6e:90:85:05:95:9b:
f8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1A:2C:34:9E:D6:4C:9F:18:D1:FA:E9:C7:CF:66:A9:D2:13:93:16
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zBosNJ7WTJ8Y0frpx89mqdITkxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.7.0-84.32.8.255
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.42.0/23
84.32.46.0/23
84.32.58.0/24
84.32.60.0-84.32.62.255
84.32.64.0-84.32.66.255
84.32.68.0/24
84.32.76.0/23
84.32.83.0/24
84.32.85.0/24
84.32.88.0-84.32.90.255
84.32.92.0/22
84.32.105.0/24
84.32.107.0/24
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0-84.32.176.255
84.32.178.0/23
84.32.211.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0/24
84.32.234.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.35.0-88.216.36.255
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.47.0/24
88.216.58.0/24
88.216.64.0/23
88.216.92.0/23
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
94:5c:eb:93:f1:e2:23:d0:59:13:41:1b:32:80:53:e4:57:88:
2f:06:97:e1:31:f0:64:43:23:ec:37:ad:bd:5a:bb:f0:17:b0:
70:77:38:ae:70:e9:6f:c8:60:57:01:c9:57:9e:85:85:67:ee:
5f:85:01:f9:9c:14:da:5a:15:5f:77:ef:8d:11:88:1c:a9:e4:
da:20:1c:13:8a:82:23:98:f7:92:60:7e:3d:90:b0:b4:84:1b:
bb:6f:8d:14:8d:3c:86:f1:c8:c8:77:06:7b:3f:26:96:f7:1b:
32:10:b9:4e:ed:ab:6c:cf:85:92:98:23:d4:d6:a2:e6:40:3c:
aa:92:b8:a8:db:98:fd:55:e9:26:ad:0b:95:15:32:c0:4d:64:
f8:17:af:af:26:ef:de:9d:03:3b:05:a6:e8:1f:25:18:41:a6:
1b:dc:c6:db:6b:58:e3:d2:6b:27:51:07:de:8f:fc:a1:fb:51:
65:28:68:14:5a:99:b5:1f:1d:c4:ce:da:fd:f4:d2:8c:06:19:
f2:13:a2:31:a3:a8:26:a2:a2:bb:04:d6:2b:cf:c7:89:be:1d:
da:1d:b4:d6:8b:cf:1c:d2:f5:86:82:49:5f:b5:8f:3d:9c:79:
02:a6:e8:00:8a:1d:38:82:30:9c:74:c8:04:45:18:f4:1b:fc:
9c:70:a1:db
-----BEGIN CERTIFICATE-----
MIIG9jCCBd6gAwIBAgISAYr+ZJGq8HAp94Q9k3XBZQj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMxMDA1MDU1MTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzFhMmMzNDllZDY0YzlmMThkMWZhZTljN2NmNjZhOWQyMTM5MzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD2+V/sMGLLNBuRMKq6xZM/NqYZp
ytjZhBsJhhpSP7taPt/AZTjMMGfIw+C+usxaVPwUyjJ8/lU8cHisU0rmEjjFEYSM
/ntH52HTbQfgnOvLNAgdgCssVl1lm+rSqi6biiHy5zl9TrgxVLzLbR823zAgiKTC
ifCThJ/pkMcdIF/Ldl4iiLU3f7iYaDCgx+evgQMjsAJ1kksPb1orRiCRrSh4tEcL
GM3a145eFk4afCjyq6QuWNq8nafkrrBBeu25FT1QGP/iyxz6ZCAh6drRFcMzflBj
vOyYxmBjrFOVCHfXgfVRqT1u98CDeUZ03rs5F/IMPyPakwlukIUFlZv4hQIDAQAB
o4IEAjCCA/4wHQYDVR0OBBYEFMwaLDSe1kyfGNH66cfPZqnSE5MWMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvekJvc05KN1dUSjhZMGZycHg4OW1xZElUa3hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICFgYIKwYBBQUHAQcBAf8EggIFMIICATCCAf0EAgABMIIB
9QMEAFQgBDAMAwQAVCAHAwQAVCAIAwQAVCAOMAwDBAJUIBQDBAFUIBwDBABUIB8D
BAFUICoDBAFUIC4DBABUIDowDAMEAlQgPAMEAFQgPjAMAwQGVCBAAwQAVCBCAwQA
VCBEAwQBVCBMAwQAVCBTAwQAVCBVMAwDBANUIFgDBABUIFoDBAJUIFwDBABUIGkD
BABUIGsDBAJUIJQDBABUIJkDBABUIJswDAMEAFQgnQMEBVQggDAMAwQBVCCuAwQA
VCCwAwQBVCCyMAwDBABUINMDBANUINADBABUINsDBABUIN0DBABUIOADBABUIOID
BABUIOQDBABUIOgwDAMEAVQg6gMEAFQg8gMEAlQg9DALAwQAVCD5AwMAVCADBAJY
2AADBABY2BADBAFY2BYwDAMEAFjYIwMEAFjYJAMEAFjYKAMEAFjYKgMEAVjYLAME
AFjYLwMEAFjYOgMEAVjYQAMEAVjYXAMEAFjYXzAMAwQAWNhlAwQAWNhmAwQCWNho
MAwDBABY2G0DBARY2GAwDAMEB1jYgAMEAFjYhAMEAVjYhgMEAFjYtAMEAFjYtzAM
AwQAWNi7AwQGWNiAMAwDBABY2MUDBABY2MYDBABY2NAwDAMEAFjY0wMEA1jY0AME
AFjY3AMEAFjY3wMEAljY5AMEAljY7DANBgkqhkiG9w0BAQsFAAOCAQEAlFzrk/Hi
I9BZE0EbMoBT5FeILwaX4THwZEMj7DetvVq78BewcHc4rnDpb8hgVwHJV56FhWfu
X4UB+ZwU2loVX3fvjRGIHKnk2iAcE4qCI5j3kmB+PZCwtIQbu2+NFI08hvHIyHcG
ez8mlvcbMhC5Tu2rbM+Fkpgj1Nai5kA8qpK4qNuY/VXpJq0LlRUywE1k+Bevrybv
3p0DOwWm6B8lGEGmG9zG22tY49JrJ1EH3o/8oftRZShoFFqZtR8dxM7a/fTSjAYZ
8hOiMaOoJqKiuwTWK8/Hib4d2h201ovPHNL1hoJJX7WPPZx5AqboAIodOIIwnHTI
BEUY9Bv8nHCh2w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:33 2024 by rpki-client on console-ams.rpki-client.org