Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Owklom8prSb0GMhMWr2x4sTQkhk.roa
File: Owklom8prSb0GMhMWr2x4sTQkhk.roa (raw, json)
Hash identifier: RTe8GHucINbY2mTwt0F6cOSruIHULlAoEBB7fspeK14=
Subject key identifier: 3B:09:25:A2:6F:29:AD:26:F4:18:C8:4C:5A:BD:B1:E2:C4:D0:92:19
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018C71FE64B0FB538B0DC949319AAC71938D
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Owklom8prSb0GMhMWr2x4sTQkhk.roa
Signing time: Sat 16 Dec 2023 09:39:06 +0000
ROA not before: Sat 16 Dec 2023 09:39:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205647
IP address blocks: 151.242.0.0/21 maxlen: 21
151.242.8.0/22 maxlen: 22
31.56.116.0/24 maxlen: 24
151.241.224.0/21 maxlen: 21
151.247.216.0/21 maxlen: 21
151.247.214.0/23 maxlen: 23
151.247.224.0/22 maxlen: 22
151.244.132.0/22 maxlen: 22
151.244.128.0/22 maxlen: 22
151.247.232.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.244.136.0/22 maxlen: 22
151.244.140.0/22 maxlen: 22
151.244.144.0/22 maxlen: 22
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.236.0/24 maxlen: 24
151.244.152.0/22 maxlen: 22
151.244.148.0/22 maxlen: 22
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
151.244.156.0/22 maxlen: 22
31.58.240.0/20 maxlen: 20
151.244.56.0/21 maxlen: 21
151.244.52.0/22 maxlen: 22
85.15.49.0/24 maxlen: 24
85.15.48.0/24 maxlen: 24
151.244.64.0/21 maxlen: 21
151.244.76.0/22 maxlen: 22
151.244.72.0/22 maxlen: 22
151.244.80.0/21 maxlen: 21
151.240.240.0/21 maxlen: 21
31.59.12.0/22 maxlen: 22
151.244.88.0/21 maxlen: 21
94.183.192.0/18 maxlen: 18
31.56.64.0/19 maxlen: 19
31.56.96.0/20 maxlen: 20
151.244.160.0/22 maxlen: 22
151.244.164.0/22 maxlen: 22
31.56.0.0/18 maxlen: 18
151.244.172.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
151.244.180.0/22 maxlen: 22
151.244.184.0/22 maxlen: 22
151.244.188.0/22 maxlen: 22
151.244.192.0/22 maxlen: 22
151.244.196.0/22 maxlen: 22
151.244.200.0/22 maxlen: 22
151.244.204.0/22 maxlen: 22
151.244.208.0/22 maxlen: 22
151.244.212.0/22 maxlen: 22
94.182.244.0/23 maxlen: 23
94.182.248.0/23 maxlen: 23
94.183.0.0/18 maxlen: 18
151.240.80.0/21 maxlen: 21
94.182.192.0/18 maxlen: 18
94.182.206.0/24 maxlen: 24
94.182.204.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.205.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.226.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.232.0/23 maxlen: 23
94.182.228.0/22 maxlen: 22
94.182.240.0/23 maxlen: 23
94.182.234.0/23 maxlen: 23
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
94.183.128.0/18 maxlen: 18
31.58.236.0/22 maxlen: 22
151.244.48.0/22 maxlen: 22
94.183.64.0/18 maxlen: 18
94.182.41.0/24 maxlen: 24
94.182.56.0/22 maxlen: 22
94.182.60.0/22 maxlen: 22
94.182.64.0/18 maxlen: 18
94.182.72.0/21 maxlen: 21
94.182.97.192/28 maxlen: 28
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.82.0/24 maxlen: 24
94.182.116.0/22 maxlen: 22
94.182.114.0/23 maxlen: 23
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:71:fe:64:b0:fb:53:8b:0d:c9:49:31:9a:ac:71:93:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Dec 16 09:39:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b0925a26f29ad26f418c84c5abdb1e2c4d09219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:71:c3:53:b3:59:7d:ed:67:69:29:0b:c3:
1a:54:5a:ca:f5:6f:2f:77:de:0f:44:37:3d:34:aa:
38:3f:0e:49:73:c1:da:ec:c2:d2:4e:9a:a2:0c:c1:
70:9d:a7:ab:e8:9a:c2:5f:8f:b4:f5:e1:07:d6:91:
04:a8:11:ac:2b:d2:ce:0f:70:64:59:77:51:1d:65:
b3:11:f2:22:73:54:01:57:c9:20:20:a3:d6:16:98:
bd:05:c9:6b:23:4b:be:43:61:13:a4:8f:a8:25:a8:
a3:e4:45:e4:33:37:0c:1e:db:97:4d:e4:14:d3:41:
94:96:d1:63:be:66:0c:85:a4:79:6e:35:a8:db:82:
08:e2:23:3b:1c:56:14:ae:5a:1d:94:e8:b9:cc:d5:
d2:55:ad:65:8d:46:2d:56:12:03:d8:98:b6:71:7c:
8e:dc:c7:98:ef:7d:0a:6c:3b:ac:54:d2:a5:1f:2e:
d2:b9:91:88:aa:78:f4:f4:4d:a1:80:65:62:ef:09:
0e:17:ee:bb:4e:17:ea:ee:28:be:3b:27:25:df:b3:
cc:2c:fb:0d:ba:f1:7c:17:ea:01:e8:aa:51:b4:a1:
12:23:c8:a6:a6:50:ab:f7:de:51:c3:e9:12:b6:30:
5f:51:05:42:00:73:dd:64:ab:05:b6:e2:c5:bd:51:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:09:25:A2:6F:29:AD:26:F4:18:C8:4C:5A:BD:B1:E2:C4:D0:92:19
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Owklom8prSb0GMhMWr2x4sTQkhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0-31.56.111.255
31.56.116.0/24
31.58.236.0-31.58.255.255
31.59.12.0/22
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.224.0/21
151.242.0.0-151.242.11.255
151.244.48.0-151.244.95.255
151.244.128.0-151.244.215.255
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:15:84:c8:e0:3b:d8:69:f5:3f:72:38:a7:87:ee:3a:c7:46:
f4:03:aa:33:56:bc:cc:5e:04:f6:a0:9f:eb:6f:05:6a:c4:02:
55:99:c1:f5:2e:cb:30:2b:ea:7e:c9:3b:37:d7:43:0b:a1:f4:
9f:09:28:ff:2f:b8:e0:07:eb:37:dd:20:65:c5:81:43:1e:a3:
b3:77:26:f0:f5:af:17:2a:a8:92:c3:1a:9d:86:da:c3:2b:0f:
4c:c0:b0:0f:87:32:6f:c5:71:77:b7:2b:b1:9f:d0:5f:de:f8:
ee:7d:d8:1b:29:7e:3f:66:61:23:1e:04:39:d1:60:3d:48:39:
79:f9:7e:fe:f0:9c:76:15:d9:76:c3:0e:f4:1f:15:c7:dd:33:
97:cc:38:62:d3:af:04:d3:84:a5:1b:14:ca:49:15:85:e5:93:
a9:49:d1:38:1a:83:96:7a:dd:39:96:b2:40:de:3e:b2:50:36:
60:9b:6e:2b:9f:39:d4:bf:8d:1f:43:ea:47:0d:85:0a:aa:08:
60:1b:5c:9b:ca:96:73:85:65:cc:ee:af:78:c8:0d:e9:91:74:
a3:b4:55:62:dc:50:79:a2:85:57:8d:e7:4a:f5:1c:7c:8b:5b:
c0:26:86:b9:5e:0d:4b:8a:fe:e8:8b:82:fe:3c:76:c9:d3:34:
cb:dc:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 09:59:53 2023 by rpki-client on console-fra.rpki-client.org