Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OWBQ_2Tf3vXwFZ3G6DitTW9c_As.roa
File: OWBQ_2Tf3vXwFZ3G6DitTW9c_As.roa (raw, json)
Hash identifier: 6581EppMAdAGBNZe2us/mbgqmpqKcOQVr8OGWvmyPRo=
Subject key identifier: 39:60:50:FF:64:DF:DE:F5:F0:15:9D:C6:E8:38:AD:4D:6F:5C:FC:0B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A5772061E2D9C12500192498F2241F4F6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OWBQ_2Tf3vXwFZ3G6DitTW9c_As.roa
Signing time: Sat 02 Sep 2023 19:50:05 +0000
ROA not before: Sat 02 Sep 2023 19:50:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 2.59.254.0/24 maxlen: 24
94.156.6.0/24 maxlen: 24
45.81.243.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
194.180.48.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
185.225.75.0/24 maxlen: 24
185.225.74.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
37.139.129.0/24 maxlen: 24
87.121.3.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
212.87.204.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
85.217.144.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
94.156.253.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
94.156.161.0/24 maxlen: 24
193.42.33.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
185.252.178.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
185.216.68.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
79.110.48.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
93.123.118.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:57:72:06:1e:2d:9c:12:50:01:92:49:8f:22:41:f4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 2 19:50:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=396050ff64dfdef5f0159dc6e838ad4d6f5cfc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bd:e2:4f:6b:25:8d:30:dd:08:19:d9:bb:45:
7d:6f:6c:a7:4c:99:8b:fd:df:47:60:51:ca:79:36:
79:c4:5b:0c:d5:4e:c0:70:ff:27:30:88:8d:1e:5c:
22:1a:d3:0e:c6:2f:1b:11:a6:3e:8a:6d:b9:ea:30:
38:5b:a8:1c:46:b9:e7:da:2e:18:d9:27:85:d3:4a:
52:86:65:cd:50:fe:0a:3e:dc:da:94:a4:de:4f:0e:
d2:b7:fa:d6:ec:8a:be:a6:59:0c:a5:a7:03:e2:ea:
41:22:3a:e9:b1:fb:74:5f:cb:7a:70:25:df:06:de:
d5:27:3b:bc:14:18:9f:73:a9:25:be:64:e5:9b:5a:
ab:20:f4:de:dc:a9:d9:37:32:ab:2d:6f:56:ae:d4:
19:3d:84:64:c3:b1:62:44:c7:df:57:71:76:5f:06:
90:0a:37:88:e9:67:f6:68:76:48:65:5f:00:2a:ac:
1c:79:20:78:7d:e0:54:ae:ed:78:ae:8f:3a:63:dd:
74:66:a8:5f:3f:aa:cb:6d:43:ed:ab:3d:96:5a:76:
61:3e:59:32:0c:ad:b3:3d:d1:ad:69:ef:fc:f7:88:
d3:58:87:5e:a1:85:9d:fe:ff:73:95:1c:76:4e:31:
c4:7b:fb:9a:5b:27:76:4e:68:4f:cc:96:7b:52:1a:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:60:50:FF:64:DF:DE:F5:F0:15:9D:C6:E8:38:AD:4D:6F:5C:FC:0B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OWBQ_2Tf3vXwFZ3G6DitTW9c_As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.254.0/24
37.139.128.0/23
45.12.253.0/24
45.66.230.0/24
45.81.39.0/24
45.81.243.0/24
45.88.67.0/24
79.110.48.0/24
79.110.62.0/23
80.76.51.0/24
84.21.172.0/24
84.54.50.0/24
85.31.44.0-85.31.46.255
85.217.144.0/24
87.121.3.0/24
87.121.221.0/24
93.123.118.0/24
94.156.6.0/24
94.156.102.0/24
94.156.161.0/24
94.156.253.0/24
95.214.27.0/24
109.206.240.0/23
109.206.243.0/24
185.216.68.0/24
185.216.71.0/24
185.225.73.0-185.225.75.255
185.246.220.0/23
185.252.178.0/24
185.254.37.0/24
193.42.32.0/23
193.47.61.0/24
194.55.186.0/24
194.55.224.0/24
194.180.48.0/23
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:66:6b:1b:0f:68:9b:e0:26:76:f7:b8:06:58:b7:9c:6e:4c:
46:36:f8:95:33:b2:3f:2f:c9:a2:91:10:b5:ea:f4:ac:fe:6d:
04:a7:94:3b:4a:46:0a:ab:f9:31:c4:6c:14:ab:a1:87:fa:2f:
f7:3f:1e:13:e4:75:45:d0:fe:87:2a:0c:23:71:4f:13:3a:3a:
27:52:81:e3:f9:8b:00:9d:3d:2e:b1:81:be:3d:34:83:b4:dd:
98:29:17:0d:49:25:38:98:b5:db:ff:c7:32:24:7f:48:54:3a:
9b:a8:f3:4c:d4:d4:f6:87:c6:d7:7c:8b:99:0c:f4:8a:79:df:
33:e1:bc:0b:a7:27:3a:9a:10:6f:8f:87:0d:8c:56:ac:08:f0:
42:45:82:e6:e8:9f:1f:b2:51:df:48:1a:10:39:c4:e7:aa:61:
55:49:0f:83:a9:17:4e:be:c6:f5:43:da:08:ba:17:c5:91:c6:
2f:f5:d4:12:a4:0b:25:51:1e:55:7f:04:3b:f9:95:79:93:44:
92:d8:f7:9c:e6:fe:c5:a4:e3:83:1f:71:9a:7d:17:2b:b2:9b:
04:75:ec:de:7e:17:ae:d7:d1:3a:01:1a:27:ed:a0:15:bb:a3:
bc:75:7d:ac:8b:82:63:00:fa:d9:61:45:d7:1c:8d:ae:96:2a:
30:b9:01:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 16:10:20 2023 by rpki-client on console-ams.rpki-client.org