Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/SCVVx8r8OIdbG9KDqyddzxhlMZI.roa
File: SCVVx8r8OIdbG9KDqyddzxhlMZI.roa (raw, json)
Hash identifier: YevL444uJRQcKCXkc+doG5/S4QJ8TKCpLtYGIFNXtLE=
Subject key identifier: 48:25:55:C7:CA:FC:38:87:5B:1B:D2:83:AB:27:5D:CF:18:65:31:92
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 01856F4B7D045CE17B9C4B8911211521B7F9
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/SCVVx8r8OIdbG9KDqyddzxhlMZI.roa
Signing time: Sun 01 Jan 2023 21:44:56 +0000
ROA not before: Sun 01 Jan 2023 21:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16030
IP address blocks: 185.184.148.0/24 maxlen: 24
185.184.151.0/24 maxlen: 24
185.184.150.0/24 maxlen: 24
185.184.149.0/24 maxlen: 24
77.75.176.0/24 maxlen: 24
77.75.179.0/24 maxlen: 24
77.75.178.0/24 maxlen: 24
77.75.177.0/24 maxlen: 24
77.75.183.0/24 maxlen: 24
77.75.182.0/24 maxlen: 24
77.75.181.0/24 maxlen: 24
77.75.180.0/24 maxlen: 24
212.121.229.0/24 maxlen: 24
213.148.218.0/24 maxlen: 24
212.121.232.0/24 maxlen: 24
213.148.219.0/24 maxlen: 24
213.148.217.0/24 maxlen: 24
212.121.231.0/24 maxlen: 24
213.148.216.0/24 maxlen: 24
213.148.214.0/24 maxlen: 24
213.148.215.0/24 maxlen: 24
212.121.230.0/24 maxlen: 24
212.121.233.0/24 maxlen: 24
212.121.228.0/24 maxlen: 24
212.121.227.0/24 maxlen: 24
212.121.235.0/24 maxlen: 24
212.121.239.0/24 maxlen: 24
212.121.238.0/24 maxlen: 24
213.148.223.0/24 maxlen: 24
212.121.237.0/24 maxlen: 24
212.121.240.0/24 maxlen: 24
213.148.222.0/24 maxlen: 24
212.121.236.0/24 maxlen: 24
213.148.221.0/24 maxlen: 24
213.148.220.0/24 maxlen: 24
212.121.234.0/24 maxlen: 24
212.121.246.0/24 maxlen: 24
212.121.245.0/24 maxlen: 24
212.121.244.0/24 maxlen: 24
212.121.243.0/24 maxlen: 24
212.121.242.0/24 maxlen: 24
212.121.241.0/24 maxlen: 24
212.121.250.0/24 maxlen: 24
212.121.249.0/24 maxlen: 24
212.121.248.0/24 maxlen: 24
212.121.247.0/24 maxlen: 24
212.121.253.0/24 maxlen: 24
212.121.252.0/24 maxlen: 24
212.121.251.0/24 maxlen: 24
212.121.255.0/24 maxlen: 24
212.121.254.0/24 maxlen: 24
213.148.192.0/24 maxlen: 24
213.148.198.0/24 maxlen: 24
213.148.197.0/24 maxlen: 24
213.148.196.0/24 maxlen: 24
213.148.199.0/24 maxlen: 24
213.148.195.0/24 maxlen: 24
213.148.194.0/24 maxlen: 24
213.148.193.0/24 maxlen: 24
213.148.205.0/24 maxlen: 24
213.148.204.0/24 maxlen: 24
213.148.203.0/24 maxlen: 24
213.148.202.0/24 maxlen: 24
213.148.206.0/24 maxlen: 24
213.148.201.0/24 maxlen: 24
213.148.200.0/24 maxlen: 24
213.148.208.0/24 maxlen: 24
213.148.207.0/24 maxlen: 24
213.148.212.0/24 maxlen: 24
213.148.211.0/24 maxlen: 24
212.121.225.0/24 maxlen: 24
213.148.210.0/24 maxlen: 24
213.148.213.0/24 maxlen: 24
212.121.224.0/24 maxlen: 24
213.148.209.0/24 maxlen: 24
212.121.226.0/24 maxlen: 24
2001:4d10::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 18 Sep 2023 08:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:7d:04:5c:e1:7b:9c:4b:89:11:21:15:21:b7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Jan 1 21:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=482555c7cafc38875b1bd283ab275dcf18653192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:b0:33:2b:e7:c8:f4:e6:93:c6:a5:85:bf:
b1:c3:c5:40:e0:53:7a:72:0b:7b:b8:7e:07:f1:7a:
6e:bf:71:e8:4e:de:ca:07:a6:2f:4d:8e:2f:46:f7:
37:ab:b8:6a:ad:d5:3f:c9:00:6c:07:fa:e8:90:45:
5c:90:bd:57:d7:9b:46:d5:54:91:58:c6:b0:e7:3b:
d0:b3:02:50:25:f2:eb:cd:f1:ce:c6:ef:70:8f:9f:
d4:e3:cd:57:70:10:a2:38:9d:54:d8:8a:94:94:5c:
27:f1:af:bd:bf:89:fb:ca:ca:b2:25:08:72:d2:ea:
4b:b1:c5:a0:1f:47:1b:db:34:38:4e:8f:e0:ff:6c:
f1:46:e0:7f:a5:01:26:15:c1:e8:95:97:5e:14:44:
5a:c0:a3:8b:cd:13:84:96:a0:b9:26:af:a7:31:5d:
e5:53:c3:4a:4e:e1:2c:b4:e2:6a:cf:22:80:89:af:
a8:54:a0:b3:6f:6e:a1:dc:75:ed:a5:74:04:53:33:
29:1e:04:92:3c:cd:13:ef:0f:85:06:a5:6f:ba:e7:
e2:42:21:b8:46:c3:9e:01:cd:d4:48:05:6c:fa:ae:
94:19:74:93:49:0a:78:81:64:4b:04:ec:87:8b:ed:
18:4b:12:27:f3:7f:44:52:e9:7a:c6:5c:31:42:ea:
93:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:25:55:C7:CA:FC:38:87:5B:1B:D2:83:AB:27:5D:CF:18:65:31:92
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/SCVVx8r8OIdbG9KDqyddzxhlMZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.176.0/21
185.184.148.0/22
212.121.224.0/19
213.148.192.0/19
IPv6:
2001:4d10::/32
Signature Algorithm: sha256WithRSAEncryption
b6:a7:ca:f4:be:56:a0:79:b7:1f:49:26:4e:25:50:da:bd:48:
fc:64:33:84:0a:2c:78:3a:f0:71:30:47:61:40:8c:82:a6:dc:
74:09:12:35:ed:b4:eb:a5:49:ca:27:4b:8a:bd:a0:02:0f:4f:
0b:1a:d3:aa:82:98:d0:39:dc:ff:ae:34:29:16:1f:6e:84:76:
23:42:7d:82:fb:10:37:b7:af:45:a7:a0:6c:42:b1:48:a7:65:
c4:9c:31:af:d6:d8:be:7b:4b:c7:d3:48:48:2d:71:c5:90:d3:
6a:32:cb:40:a8:d7:c3:d8:dc:40:d5:f8:f9:f6:8e:c8:3c:ca:
0c:2e:ac:d9:e1:fe:76:dd:db:6a:61:5a:11:e5:dd:39:37:ff:
fc:de:56:0c:4c:00:97:0b:b1:2b:9a:14:b2:f4:61:8f:6a:be:
00:77:57:ec:c0:89:fe:cd:d6:dd:90:18:aa:9b:65:01:eb:67:
c7:ce:34:c6:8c:3c:db:a9:e1:7a:ac:9a:89:06:86:52:10:04:
19:ac:bc:d8:a7:52:1c:5c:c5:85:71:32:c4:8e:fb:7b:b9:99:
9c:a0:ee:8d:0c:bc:cb:d1:13:1c:08:ca:8b:39:38:d7:06:b8:
b9:f8:b0:c5:24:19:9f:0b:dc:a8:22:78:61:60:47:88:50:ef:
56:56:61:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:19 2024 by rpki-client on console-fra.rpki-client.org