Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-OIThzclYbM1W2LuHjlwhJGO5YA.roa
File: 1-OIThzclYbM1W2LuHjlwhJGO5YA.roa (raw, json)
Hash identifier: hPEFzuCmkSNwKMZSVxi+P+jIP3jeF+dfXJl/OYDPQgY=
Subject key identifier: F8:E2:13:87:37:25:61:B3:35:5B:62:EE:1E:39:70:84:91:8E:E5:80
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 01856C4A6AA84D1694C249B3790138048F44
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-OIThzclYbM1W2LuHjlwhJGO5YA.roa
Signing time: Sun 01 Jan 2023 07:44:54 +0000
ROA not before: Sun 01 Jan 2023 07:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 212.126.96.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.98.0/24 maxlen: 24
46.21.251.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.104.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.104.0/22 maxlen: 22
212.126.104.0/23 maxlen: 23
212.126.100.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.107.0/24 maxlen: 24
212.126.108.0/24 maxlen: 24
212.126.116.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.113.0/24 maxlen: 24
212.126.115.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.123.0/24 maxlen: 24
212.126.124.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.122.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:6a:a8:4d:16:94:c2:49:b3:79:01:38:04:8f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 1 07:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8e21387372561b3355b62ee1e397084918ee580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:96:37:0b:29:82:bd:c6:cb:43:48:82:fa:ce:
44:83:c3:6c:cb:37:f8:ac:56:b6:ee:82:2c:b6:35:
10:6a:fb:0a:60:73:d2:49:4b:5c:ff:c1:de:25:17:
02:11:1f:e0:df:20:56:46:c9:97:2f:4c:1a:49:eb:
ff:c0:a1:8c:35:a2:72:bb:35:61:f7:69:e1:01:53:
86:4c:a3:31:4a:ff:8f:8b:f5:92:5d:ba:a4:d5:e9:
52:cc:52:b5:08:83:d8:93:98:25:c3:51:3b:30:ed:
bb:f8:4f:69:e5:fe:c7:6b:ad:3e:39:a3:67:13:58:
42:9d:f2:8a:0f:d2:d1:4d:25:86:a9:bf:8a:46:15:
da:09:90:02:13:cb:db:ef:4c:e1:ec:98:63:88:28:
24:bf:e0:68:4c:ff:ec:15:ed:d0:c0:67:77:b4:ba:
a5:44:28:6c:c8:bb:e1:35:ec:5a:81:79:f6:ce:81:
41:54:9f:5d:f4:64:71:0f:8f:3a:6d:ad:a8:6d:6d:
3b:4a:8b:a3:9f:c0:d7:35:e2:bc:8e:5b:00:a4:dc:
48:b3:ee:cf:3e:8d:aa:ad:23:23:90:9f:2d:69:42:
05:75:1d:19:5d:80:28:9b:79:d7:da:f5:db:69:15:
3a:c1:1e:33:ea:30:77:7d:94:72:35:8f:0b:b9:5c:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E2:13:87:37:25:61:B3:35:5B:62:EE:1E:39:70:84:91:8E:E5:80
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-OIThzclYbM1W2LuHjlwhJGO5YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.251.0/24
212.126.96.0-212.126.98.255
212.126.100.0-212.126.102.255
212.126.104.0/21
212.126.113.0/24
212.126.115.0-212.126.127.255
IPv6:
2a04:2dc0::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::/48
2a04:2dc0:19::/48
Signature Algorithm: sha256WithRSAEncryption
47:44:f5:0b:9a:67:d8:f0:38:d6:f7:a3:f1:b3:8f:74:ec:18:
15:b9:4d:08:65:2b:2f:61:38:f0:5a:22:33:ca:49:03:26:13:
55:19:77:a3:54:48:e6:93:b9:80:77:c4:79:09:2a:3b:1c:8f:
48:80:8e:62:e7:da:7e:3d:a6:6f:7d:e4:85:3d:4d:78:72:a7:
33:19:16:f2:0f:b7:19:27:3f:de:ca:5c:a6:cf:f6:52:35:be:
c7:b2:30:fc:0a:1e:64:84:f0:05:18:15:85:43:40:be:bf:19:
47:1e:f4:cc:0e:68:ba:9c:ef:76:d9:ff:bd:b5:16:cc:4f:64:
9f:57:28:88:c1:4b:2e:19:60:2c:48:05:28:67:51:44:1a:83:
d5:dd:3f:59:8d:45:b0:a4:41:8e:85:f7:ef:73:cd:25:59:de:
a1:a2:e2:b1:b7:94:2a:32:d4:44:cd:37:ac:e3:d3:fe:61:85:
01:20:58:f1:f7:65:39:4d:57:7d:61:f6:15:0e:69:d4:77:09:
3a:5b:0a:e4:f0:ac:11:41:92:0e:3d:9f:a0:17:63:88:66:05:
72:ae:90:b9:99:52:d1:e0:42:40:9c:03:5c:bb:72:f4:a3:0e:
e6:dd:a9:02:14:c1:c3:2a:91:ed:45:fe:5e:a5:e3:fc:93:f1:
17:9f:fb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:15 2024 by rpki-client on console-ams.rpki-client.org