Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ewe6pqEoeYw8BrZ1YtLviOBmOQg.roa
File: Ewe6pqEoeYw8BrZ1YtLviOBmOQg.roa (raw, json)
Hash identifier: 14jxOuKsWZEMf6JCClVFNJ5KZGG6wwEAi0ttSUgCdL8=
Subject key identifier: 13:07:BA:A6:A1:28:79:8C:3C:06:B6:75:62:D2:EF:88:E0:66:39:08
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01912C82A4D25E6268561D346B3B11E012DD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ewe6pqEoeYw8BrZ1YtLviOBmOQg.roa
Signing time: Wed 07 Aug 2024 11:04:04 +0000
ROA not before: Wed 07 Aug 2024 11:04:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.58.95.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.8.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.246.223.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.31.222.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
195.178.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 14:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:82:a4:d2:5e:62:68:56:1d:34:6b:3b:11:e0:12:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 7 11:04:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1307baa6a128798c3c06b67562d2ef88e0663908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:b8:6a:10:e7:7f:8e:10:af:2f:9d:33:32:
e9:b5:8b:89:19:c1:66:a5:62:3a:01:2f:a8:2a:95:
df:f7:8b:88:9d:a4:84:1d:7a:7d:49:29:38:30:b1:
d8:dc:b5:d1:f0:ef:55:f7:59:70:9c:a3:cd:a5:17:
1d:b7:ee:f1:53:ba:ee:f1:2f:fa:d0:c0:11:3c:4a:
bb:64:5d:58:33:c3:85:a4:7f:5c:35:ad:5c:eb:6d:
fa:9d:66:54:13:97:02:5a:98:be:79:4f:7e:c3:99:
d4:ac:85:f9:df:59:23:be:6e:63:fd:ce:b0:9f:b1:
a9:ce:bf:10:3d:71:79:1c:d9:a7:31:da:bf:19:2a:
a6:3a:6c:e9:37:8a:26:56:21:fc:99:cd:a9:24:64:
bd:b5:f4:97:dd:8b:70:db:73:00:5e:ee:0f:76:96:
ae:e2:61:0d:fa:f1:1b:f9:f2:d3:d7:bb:65:49:b2:
61:a6:b2:ca:c6:71:33:8e:e4:8c:8a:5e:94:c0:dc:
e0:3f:c1:62:c5:56:f0:84:2e:c7:7a:af:bc:55:f0:
04:5a:6f:f8:76:8c:fe:c5:3e:c1:a3:82:df:2e:a9:
68:a3:e2:c2:5e:77:58:ae:a8:f3:da:fd:a2:ae:18:
38:0f:82:f8:8d:45:69:e1:ac:0d:19:54:60:76:2b:
89:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:07:BA:A6:A1:28:79:8C:3C:06:B6:75:62:D2:EF:88:E0:66:39:08
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ewe6pqEoeYw8BrZ1YtLviOBmOQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
45.8.92.0/24
45.88.90.0/24
45.128.96.0/24
45.128.232.0/24
45.144.154.0/24
45.151.89.0/24
80.76.51.0/24
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
84.54.51.0/24
85.31.47.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.58.0/24
87.121.69.0/24
87.121.221.0/24
92.119.196.0/23
93.123.39.0/24
94.103.124.0/23
94.154.160.0/22
94.156.8.0/24
94.156.10.0/23
94.156.79.0/24
109.206.237.0/24
141.98.1.0/24
141.98.4.0/24
147.78.102.0/23
171.22.72.0/22
178.215.224.0/24
185.216.70.0/24
185.216.84.0/22
185.218.84.0/22
185.246.223.0/24
193.35.18.0/24
193.37.41.0/24
193.37.44.0/24
193.222.96.0/24
194.31.222.0/24
194.48.251.0/24
194.55.224.0/24
195.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c0:5a:c5:01:4e:45:57:00:d3:99:ae:8d:b3:d8:41:08:7f:
82:3f:72:ea:96:f6:8e:b1:a7:e4:10:3e:b4:77:de:8f:7f:aa:
5e:e5:26:e3:51:86:bd:70:1f:51:11:eb:ea:23:62:dd:51:f3:
15:10:5c:bd:2c:d6:07:1a:2f:ed:4d:14:bf:f3:4b:fa:34:51:
2e:25:43:c3:fb:7e:29:b6:ef:4e:45:01:35:18:2d:ee:be:b5:
ed:66:c8:67:a2:7c:32:d7:08:2c:76:d3:56:70:66:63:93:b9:
48:4f:b8:ea:76:12:8c:f0:99:59:ab:a5:da:28:f2:d7:ce:83:
b9:22:8e:9a:30:af:cb:4e:23:a0:c7:1d:e4:b0:8a:61:99:36:
e1:4d:b8:a4:08:19:5b:a3:ae:30:1c:fc:bd:83:76:52:2e:0e:
48:13:96:28:32:12:2c:28:8a:7d:e4:b6:41:b7:53:94:e3:db:
ac:e4:07:5f:93:76:71:3a:8c:25:cc:d6:23:fe:3f:04:73:ef:
d0:b5:8f:2d:e5:a5:29:f8:e4:82:0a:4e:aa:17:af:de:14:29:
52:a1:08:7e:e0:45:90:cc:1b:99:fe:bf:fa:ad:72:64:f9:2e:
c8:d7:05:3e:d9:a9:2b:46:7a:6b:ae:fe:f0:b7:cc:7c:05:26:
2e:55:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 17:36:10 2024 by rpki-client on console-ams.rpki-client.org