Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ed8jd_emsCTSLivPfWDPt3GFtPQ.roa
File: ed8jd_emsCTSLivPfWDPt3GFtPQ.roa (raw, json)
Hash identifier: ImQ+dYcDEWnVWTupfOIkj5f3nkOLtZr8v8nKyPYPr/I=
Subject key identifier: 79:DF:23:77:F7:A6:B0:24:D2:2E:2B:CF:7D:60:CF:B7:71:85:B4:F4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190E8A4AECA460AEEC61955EE0756320C47
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ed8jd_emsCTSLivPfWDPt3GFtPQ.roa
Signing time: Thu 25 Jul 2024 06:47:05 +0000
ROA not before: Thu 25 Jul 2024 06:47:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.58.95.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
45.84.222.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.35.18.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.42.32.0/23 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 09:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:a4:ae:ca:46:0a:ee:c6:19:55:ee:07:56:32:0c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 25 06:47:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79df2377f7a6b024d22e2bcf7d60cfb77185b4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:2b:68:8a:10:b2:6e:ff:86:0e:2a:91:db:
f3:11:e7:81:8f:5e:61:80:27:be:6c:c9:63:09:a4:
9d:f5:8a:ea:6f:d5:c9:41:3e:30:66:5a:f0:a6:aa:
8e:c1:52:df:f8:22:1d:1e:37:70:27:65:9f:1d:68:
08:e0:36:e7:7f:b8:a7:10:95:ec:21:e2:6c:08:03:
7c:96:53:b4:49:a6:5b:15:2a:8b:fd:53:80:d6:27:
f6:5e:b3:ec:82:77:25:1a:3e:1f:3a:bf:e5:12:b8:
9f:c5:f3:eb:c2:4b:59:2f:f1:8d:ff:8f:d1:34:5d:
be:ee:a9:df:7f:4f:86:4b:78:b6:e5:9c:90:dc:0d:
1b:c0:e5:49:fd:8e:bd:cb:bf:8d:b9:c8:ba:8f:ca:
7d:99:02:1f:87:6c:65:e5:7a:41:de:47:8d:1a:68:
09:48:7e:44:66:e4:96:43:e0:33:20:81:80:9f:e6:
c9:f6:5f:d6:01:4a:c2:e2:61:da:bc:d1:93:ae:22:
78:02:f0:b0:83:f9:3c:39:d3:cb:8d:a8:7a:01:08:
95:8a:3b:9f:9b:dc:50:48:3f:17:ec:81:e3:cc:09:
35:5e:b0:4a:32:09:98:03:5e:6b:bd:27:32:6a:6a:
a2:58:7e:c2:f9:1f:95:ac:a5:b5:f9:41:e4:51:56:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DF:23:77:F7:A6:B0:24:D2:2E:2B:CF:7D:60:CF:B7:71:85:B4:F4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ed8jd_emsCTSLivPfWDPt3GFtPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
45.8.92.0/24
45.84.222.0/24
45.88.90.0/24
45.128.96.0/24
45.128.232.0/24
45.144.154.0/24
45.151.89.0/24
80.76.51.0/24
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
84.54.51.0/24
85.31.47.0/24
87.120.87.0/24
87.121.38.0/24
87.121.45.0/24
87.121.58.0/24
87.121.69.0/24
87.121.221.0/24
91.92.16.0/24
92.119.196.0/23
93.123.24.0/24
93.123.39.0/24
94.103.124.0/24
94.154.160.0/22
94.156.2.0/24
94.156.8.0/24
94.156.10.0/23
94.156.79.0/24
141.98.1.0/24
141.98.4.0/24
147.78.102.0/23
171.22.72.0/22
178.215.224.0/24
185.216.70.0/24
185.216.84.0/22
185.218.84.0/22
193.35.18.0/24
193.37.41.0/24
193.37.44.0/24
193.42.32.0/23
193.222.96.0/24
194.48.251.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ea:9c:df:2b:26:ef:84:c5:e5:d1:c2:2d:61:ec:41:b6:df:
c4:a7:56:90:e1:4f:29:3b:f5:39:d0:43:89:ea:f7:45:a2:fb:
7f:ec:12:e2:91:84:8c:50:23:64:a2:17:dc:04:ba:40:dc:16:
f5:72:5b:60:e2:06:42:09:cc:df:f5:52:ea:e5:71:6a:e9:d5:
f1:3b:4a:5c:e0:5e:f1:b5:1e:44:7b:b0:f1:a3:c0:1a:4e:fd:
af:07:15:30:0e:0f:7e:4d:23:18:ee:2a:2d:fc:03:06:c9:5d:
c5:b4:73:03:8d:3f:55:ff:e1:61:98:9b:1c:53:2e:f6:ea:f4:
f7:d7:05:9d:8e:dd:bf:98:7b:db:80:16:58:c1:b9:c5:ba:bc:
cc:db:4c:36:ed:e3:6a:da:07:b1:d3:e6:a5:c8:2b:70:2b:4c:
e4:f6:d0:8e:86:0f:90:92:f8:3d:e3:2a:83:8a:14:cb:e8:5d:
49:78:85:4b:e8:c1:e6:9d:a3:20:de:32:d6:d0:50:14:d9:b5:
98:97:55:ca:70:a9:67:b8:42:ca:b5:f6:3d:d0:d0:f7:62:fb:
a6:7c:87:21:53:43:d5:4c:cb:26:d4:0e:88:33:ae:60:39:74:
6b:96:1f:e6:08:0e:30:a3:b2:ab:0e:eb:e3:78:2b:f4:2e:70:
dd:9f:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 12:39:08 2024 by rpki-client on console-fra.rpki-client.org