Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/ScdBcpppL3NohAvQCQAuWyecdYo.roa
File: ScdBcpppL3NohAvQCQAuWyecdYo.roa (raw, json)
Hash identifier: 4MbMwjZ2+ZLdi0TsS/I3Uw3BUz+ElYkae5Ng2CllM2w=
Subject key identifier: 49:C7:41:72:9A:69:2F:73:68:84:0B:D0:09:00:2E:5B:27:9C:75:8A
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 018CC49371CDD857F85C6FF0E5394225F512
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/ScdBcpppL3NohAvQCQAuWyecdYo.roa
Signing time: Mon 01 Jan 2024 10:30:46 +0000
ROA not before: Mon 01 Jan 2024 10:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206481
IP address blocks: 185.218.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:71:cd:d8:57:f8:5c:6f:f0:e5:39:42:25:f5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Jan 1 10:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49c741729a692f7368840bd009002e5b279c758a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:46:4d:cd:df:2f:80:62:f0:93:21:1c:0f:
34:7f:63:e3:ca:4c:43:8c:c1:05:17:fd:a6:5d:be:
3f:f8:6b:f5:8c:56:10:8a:8d:fb:e2:13:b5:a9:fa:
b7:15:23:df:00:02:2f:e0:99:68:3f:a5:27:94:b5:
54:5e:33:d8:44:29:28:a8:27:52:5d:09:3e:c3:e3:
eb:9f:97:b3:3c:c7:b1:77:fd:f3:43:8b:3b:10:41:
b9:c9:9e:87:65:04:38:73:da:67:36:d4:77:2d:52:
13:f1:27:a9:08:b9:9b:e1:c1:99:47:f2:d7:63:31:
2f:07:15:50:da:b7:64:44:15:7a:40:33:13:4b:72:
a9:e1:80:f8:d3:34:fd:83:58:6f:de:3c:dc:0f:ee:
04:52:95:35:16:91:6d:74:22:9f:ee:dd:3f:70:82:
2f:2a:16:94:18:e5:fd:3b:41:87:3e:1d:85:eb:ab:
a8:a5:c4:71:39:a9:7f:7b:1c:e4:7e:71:17:e7:7f:
87:0e:4b:db:b9:f3:1f:c0:46:df:ac:5f:d7:2b:d7:
ba:c0:56:9e:e8:b6:4a:af:be:e1:3e:c1:67:ac:71:
c3:a3:d9:89:c2:99:68:d6:b0:91:2f:29:d7:11:9f:
30:95:2f:24:5e:c9:af:02:2b:14:6c:a1:d8:b1:8a:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C7:41:72:9A:69:2F:73:68:84:0B:D0:09:00:2E:5B:27:9C:75:8A
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/ScdBcpppL3NohAvQCQAuWyecdYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:69:7a:23:c1:14:48:54:52:29:53:cf:fd:b7:a8:36:7b:2c:
04:0f:e5:2b:a7:41:8c:1c:c0:cd:40:96:5e:e2:f5:21:f1:8d:
4b:9e:17:29:c2:76:ac:03:dc:5a:30:12:d1:14:9a:84:3e:63:
d3:c8:af:15:a8:25:8a:16:32:d4:75:34:cf:0e:96:14:e0:12:
74:02:06:73:56:ae:ba:8b:55:ad:68:26:b5:69:a7:10:97:47:
c7:55:fc:2a:78:8c:1c:1d:6e:40:d9:8f:32:ee:88:25:eb:0a:
b4:c1:75:26:5d:55:cc:cd:15:d0:c8:69:4f:1a:5f:2c:6b:a5:
94:cf:73:9b:cb:f1:e5:6d:05:9e:7f:1d:de:15:a6:9a:83:3c:
1b:4a:30:f9:21:53:2f:bd:a4:f3:6c:04:a9:5b:98:7f:da:5b:
83:a5:cf:1b:32:4a:8b:fb:1f:26:fb:30:87:a7:8d:f8:c9:c1:
b0:ed:0d:12:c1:34:fc:f1:c2:f1:0c:32:e7:72:44:a3:aa:1a:
c0:d0:38:ea:91:1a:ea:6a:b9:47:7b:ba:a9:5c:3e:19:4d:3b:
fa:3f:04:1c:1d:f4:1b:2a:37:f7:78:d6:a4:0c:1b:c5:38:1d:
59:29:37:75:35:2b:f9:05:3f:21:de:16:27:55:77:d2:de:7b:
b2:86:4c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:12 2025 by rpki-client