Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ScdmjQJ0xFx_ffZISKTsbWn8TUw.roa
File: ScdmjQJ0xFx_ffZISKTsbWn8TUw.roa (raw, json)
Hash identifier: nSoqj5NmUHkSMZrwGxcysQ+zra4CrxZSCT2wdfG2LHY=
Subject key identifier: 49:C7:66:8D:02:74:C4:5C:7F:7D:F6:48:48:A4:EC:6D:69:FC:4D:4C
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0185A07C4FC1DC76B9770C598477B0113792
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ScdmjQJ0xFx_ffZISKTsbWn8TUw.roa
Signing time: Wed 11 Jan 2023 10:59:39 +0000
ROA not before: Wed 11 Jan 2023 10:59:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 45.149.90.0/23 maxlen: 23
45.149.88.0/23 maxlen: 23
45.141.206.0/23 maxlen: 23
45.141.204.0/23 maxlen: 23
195.88.190.0/23 maxlen: 24
195.88.210.0/23 maxlen: 24
45.148.64.0/23 maxlen: 23
45.148.66.0/23 maxlen: 23
45.152.58.0/23 maxlen: 23
45.152.56.0/23 maxlen: 23
45.148.51.0/24 maxlen: 24
45.152.8.0/23 maxlen: 23
45.152.36.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 08 Jun 2023 08:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:7c:4f:c1:dc:76:b9:77:0c:59:84:77:b0:11:37:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 11 10:59:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49c7668d0274c45c7f7df64848a4ec6d69fc4d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:71:b2:9a:8a:48:2d:ea:95:74:be:93:6f:
c5:30:ef:7c:7a:d5:85:6d:4d:5b:07:b3:fb:77:ae:
f6:64:1b:16:c9:af:a5:1f:33:dc:0c:e7:ea:1a:6b:
72:2d:bb:9d:ac:fd:15:8b:61:23:f1:26:44:7e:0c:
84:59:f0:db:9c:e2:cd:d4:bf:db:ce:4e:36:b2:07:
c4:22:34:81:6e:7b:f4:27:6d:bb:0e:ad:42:8c:27:
90:5d:b3:e1:bc:a5:19:b6:82:fc:39:32:53:0d:d8:
96:0f:70:2b:e2:be:2a:37:dd:f2:a8:24:42:e2:5a:
6a:df:25:41:7c:d7:fe:72:84:d0:fd:4e:64:b4:36:
5d:a8:8f:46:5c:3c:ca:62:67:c5:f1:d0:8b:15:f6:
54:49:fa:f2:e8:b5:c1:49:2f:e5:3d:29:40:c3:1d:
1f:b5:43:74:1e:27:b6:77:38:fa:d9:93:11:9f:50:
8c:50:01:59:0d:9a:a6:d3:e1:d8:a4:ad:cd:38:b7:
e2:13:f1:44:52:d6:93:94:63:49:17:0d:a2:70:9c:
b1:dd:94:5c:ad:c0:25:66:ca:00:3d:69:28:b9:68:
a4:d5:5f:5b:d7:db:55:bf:d2:af:ac:19:65:3d:46:
c8:e9:4e:d8:36:f9:c1:fd:7c:40:79:c4:73:be:e4:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C7:66:8D:02:74:C4:5C:7F:7D:F6:48:48:A4:EC:6D:69:FC:4D:4C
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ScdmjQJ0xFx_ffZISKTsbWn8TUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.204.0/22
45.148.51.0/24
45.148.64.0/22
45.149.88.0/22
45.152.8.0/23
45.152.36.0/23
45.152.56.0/22
195.88.190.0/23
195.88.210.0/23
Signature Algorithm: sha256WithRSAEncryption
81:c5:87:a2:7f:7a:d7:16:bb:fe:a4:5a:8b:c6:4a:a4:4d:ff:
6d:e1:e2:a7:8e:f5:65:5e:36:d0:ff:2c:11:ab:9e:c9:52:05:
5d:db:fe:92:8d:40:c5:68:ad:5e:eb:e6:f5:b5:1c:de:c8:f4:
c7:29:01:13:0f:81:8e:b0:3c:b7:73:8c:7e:a5:0f:ed:f9:48:
d5:84:bc:f4:cd:e1:a1:e2:e9:ea:99:40:d4:b2:dd:6d:1b:9b:
36:87:00:df:5c:7e:d7:d9:e3:fd:a9:12:f1:b8:fa:ca:ed:7c:
63:d4:c9:6e:c4:ad:68:90:9d:2a:ba:ff:d9:a5:5e:2b:32:fb:
ab:77:2e:b4:fa:c3:75:38:7c:26:cd:39:4d:15:92:f1:c6:37:
9e:49:24:f4:e7:66:14:01:5b:8b:f3:86:c9:ab:fd:6e:bf:e9:
21:af:a1:be:d2:be:7d:99:9f:2a:e5:43:23:b7:c1:6d:4e:0f:
8d:8c:8f:5b:b1:56:c2:8f:33:1a:c1:91:da:5b:1b:ba:5a:83:
26:25:69:7e:61:14:18:16:94:00:6e:b5:76:a2:cf:17:79:3b:
15:85:40:c3:89:fc:5c:78:82:98:7b:41:8f:5e:63:59:de:2e:
c4:52:41:d3:c6:90:71:c4:28:3f:50:64:4a:01:0f:31:d1:eb:
64:9d:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org