Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/Ti44-2rze2v2G3dBVarUOVsSSaI.roa
File: Ti44-2rze2v2G3dBVarUOVsSSaI.roa (raw, json)
Hash identifier: oqUqj1o7/n3rr+oR7ZFxBDwaLgtMcjPqpt2Tfab729A=
Subject key identifier: 4E:2E:38:FB:6A:F3:7B:6B:F6:1B:77:41:55:AA:D4:39:5B:12:49:A2
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 018572FA94B10CDFF4AB269FB24062580970
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/Ti44-2rze2v2G3dBVarUOVsSSaI.roa
Signing time: Mon 02 Jan 2023 14:55:02 +0000
ROA not before: Mon 02 Jan 2023 14:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62229
IP address blocks: 178.22.78.0/24 maxlen: 24
178.22.77.0/24 maxlen: 24
178.22.79.0/24 maxlen: 24
45.157.245.0/24 maxlen: 24
45.157.244.0/24 maxlen: 24
45.157.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Jun 2023 15:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:94:b1:0c:df:f4:ab:26:9f:b2:40:62:58:09:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: Jan 2 14:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e2e38fb6af37b6bf61b774155aad4395b1249a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:16:0b:a7:3a:2d:c9:9e:a3:4a:2f:47:c2:
0a:77:13:ab:2a:bd:18:d0:74:68:bd:9c:6f:bb:46:
56:21:34:9e:d1:36:58:94:4b:b4:05:37:d9:08:70:
0f:9e:ef:59:9a:12:a0:59:d1:9d:6f:95:ba:b3:f0:
97:4e:01:04:22:50:26:6f:8a:38:5d:41:e4:19:46:
85:24:3f:03:10:6d:1b:f1:47:07:b1:7e:23:a7:32:
cf:a1:0e:87:5e:55:e2:ac:ac:c0:8f:40:37:ef:7b:
09:8d:66:98:ba:90:79:61:a3:8c:1b:50:d5:bd:57:
c3:7c:f2:d4:30:43:38:8b:10:c1:91:26:a5:1e:63:
15:5e:76:b5:11:f2:41:9a:9b:18:0c:0f:80:33:c5:
c9:5d:b7:7c:8a:fb:ef:d5:e8:bb:6d:5a:92:a1:3d:
b3:fb:cf:79:b7:30:f1:13:10:93:5a:20:a1:2e:1e:
3b:df:25:4f:d7:f7:2e:28:99:5e:77:13:aa:87:e5:
56:e8:f0:70:2a:57:0e:3d:28:a9:37:15:09:6e:85:
f2:d3:14:00:c9:14:06:b4:a7:33:e0:ec:a4:67:44:
89:ba:a8:29:b7:84:d4:7c:ef:cb:18:18:e3:07:8f:
21:67:33:f1:d0:d1:59:2e:92:4c:2b:e4:8f:ad:7e:
79:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2E:38:FB:6A:F3:7B:6B:F6:1B:77:41:55:AA:D4:39:5B:12:49:A2
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/Ti44-2rze2v2G3dBVarUOVsSSaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.244.0-45.157.246.255
178.22.77.0-178.22.79.255
Signature Algorithm: sha256WithRSAEncryption
39:fa:eb:f8:f5:53:d9:48:22:bc:27:ae:90:7f:bb:1b:dc:79:
89:c0:8f:21:14:58:26:2f:97:c0:4c:4c:1f:43:58:6e:25:88:
0b:00:96:de:10:52:4f:31:17:fd:2a:ed:99:6b:7e:24:6a:b6:
e6:f1:90:cc:90:e6:b2:b2:4b:d5:7c:df:82:34:be:81:20:bf:
da:7c:cf:5a:e5:c6:94:eb:c4:3d:9c:b9:32:2c:d2:4d:ac:2b:
f2:54:40:11:f3:51:c9:0e:d8:20:8b:d4:4b:f4:a7:4d:33:1e:
ef:46:ad:2a:4b:37:b9:bc:78:df:8a:ae:e2:f5:84:ff:61:29:
44:f9:14:18:a0:61:df:4d:22:4e:c5:c5:6d:86:6a:ee:53:da:
2f:74:aa:21:19:62:00:46:50:36:f3:44:04:f0:4c:27:cf:db:
b6:53:65:14:5c:a3:26:f1:c7:bb:a0:98:c6:a1:14:8c:53:cf:
c3:c3:d9:b3:0d:c2:3f:bd:0b:c0:51:d1:91:14:ac:a7:4f:7c:
5a:fa:5b:ed:ee:23:70:38:a8:ca:82:9f:b8:2b:b8:73:af:9a:
e6:8b:e1:31:07:11:ec:bd:b5:6a:71:4a:28:3e:7b:71:35:71:
2c:ab:19:00:b3:84:04:33:a5:96:1e:97:3e:f8:91:ca:21:1d:
90:3f:bf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:00 2024 by rpki-client on console-fra.rpki-client.org