Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/6EYJ7Y2SxLTRWjHh06moiVnLono.roa
File: 6EYJ7Y2SxLTRWjHh06moiVnLono.roa (raw, json)
Hash identifier: db9jaAVKJnUPWcIFdz6C0Qa3pPX7Iu50xYZ/o8M8Yb4=
Subject key identifier: E8:46:09:ED:8D:92:C4:B4:D1:5A:31:E1:D3:A9:A8:89:59:CB:A2:7A
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 0186063871A8D693549B4A35551A44944378
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/6EYJ7Y2SxLTRWjHh06moiVnLono.roa
Signing time: Tue 31 Jan 2023 05:06:47 +0000
ROA not before: Tue 31 Jan 2023 05:06:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205473
IP address blocks: 212.126.116.0/24 maxlen: 24
212.126.113.0/24 maxlen: 24
212.126.114.0/24 maxlen: 24
212.126.115.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
2a04:2dc0:1d::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:06:38:71:a8:d6:93:54:9b:4a:35:55:1a:44:94:43:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 31 05:06:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e84609ed8d92c4b4d15a31e1d3a9a88959cba27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e9:c1:f7:51:e9:28:a5:c2:da:28:ca:72:45:
d4:da:5d:b1:a0:79:f2:aa:64:da:89:60:b4:14:92:
9c:c7:e4:4c:ef:5f:fd:cc:9b:4c:10:00:18:0e:e5:
95:4f:b0:8f:0f:8e:f7:f9:7b:3d:3e:2e:dc:72:16:
e5:7a:95:2e:66:f6:42:2e:34:af:81:33:81:73:82:
84:00:ca:c8:93:51:eb:86:a8:d9:d1:36:4f:a1:8d:
e7:51:bb:02:34:20:8d:70:53:c3:40:89:61:35:5f:
1d:fc:32:12:f1:2b:ef:99:13:ae:ac:56:b8:8b:97:
75:ee:cb:74:f5:fc:75:9b:a0:d0:6b:81:5e:e8:f8:
e4:d1:96:1b:21:15:9f:89:2c:6c:5e:e0:08:fc:48:
68:89:22:6b:e7:ae:20:08:e5:1b:53:ee:8f:0a:79:
9f:99:59:5a:6c:43:4b:27:20:18:d7:78:2a:3e:62:
9d:66:98:a0:37:83:b3:9a:1b:fa:bb:f3:c8:50:ab:
e4:4a:3c:3e:03:f7:72:53:9e:44:ae:b7:ee:e8:ec:
37:fd:8a:d5:09:9a:f7:3d:ca:f0:8f:28:35:de:cc:
dd:02:3c:73:70:c8:14:06:94:4f:6d:a1:03:ae:ea:
47:d2:0e:2f:6b:1a:56:69:e2:08:66:dc:95:c2:42:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:46:09:ED:8D:92:C4:B4:D1:5A:31:E1:D3:A9:A8:89:59:CB:A2:7A
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/6EYJ7Y2SxLTRWjHh06moiVnLono.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.113.0-212.126.116.255
212.126.126.0/24
IPv6:
2a04:2dc0:1d::/48
Signature Algorithm: sha256WithRSAEncryption
08:32:fd:31:9d:11:b4:4e:b2:a3:79:df:d5:10:1a:07:83:0a:
d1:01:16:a3:0c:dd:a0:92:f9:18:ce:42:f1:11:cc:21:3d:a7:
0b:8c:c5:44:cd:76:0a:36:6f:4e:55:10:1c:5e:0b:f3:e2:b8:
66:9e:d0:15:2b:87:c0:75:96:33:ed:21:23:75:0c:5e:0b:0f:
a2:50:a7:8a:59:de:a2:c3:93:be:52:7e:14:42:b7:e8:da:c2:
18:8c:4d:66:f5:1c:40:0f:52:1a:a0:ee:22:7c:d4:66:f5:23:
a9:1f:d9:47:eb:b2:49:10:b6:9a:ae:9f:50:5a:c2:0a:ad:9e:
3b:2a:86:2a:7b:a6:31:80:27:d6:3f:cd:c0:f9:88:00:78:21:
4f:06:d5:6d:8f:56:a6:05:2c:4e:93:29:03:e7:96:99:7a:fa:
96:b0:f1:26:7f:bf:d1:12:68:8a:64:1e:a8:9f:f4:d8:ce:32:
19:0a:f2:25:8f:e5:44:e3:9e:d7:54:2b:10:f9:73:c5:b7:f8:
f8:34:a3:9b:36:ec:9b:c9:de:b5:ee:88:2d:da:ad:58:01:a3:
8c:c4:43:ca:63:18:d9:55:7a:33:39:5c:4f:3e:e5:e4:e3:7c:
22:fd:b9:de:78:ca:9d:19:d1:1f:25:2f:f7:c4:4d:47:49:99:
84:51:5b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:15 2024 by rpki-client on console-ams.rpki-client.org