Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/A_KV8iAgWdE050tb4fDlxgl2Fvo.roa
File: A_KV8iAgWdE050tb4fDlxgl2Fvo.roa (raw, json)
Hash identifier: StzUNIVTdLInawd50o/aSjNz0Od/jvRXRRvljUvXUtY=
Subject key identifier: 03:F2:95:F2:20:20:59:D1:34:E7:4B:5B:E1:F0:E5:C6:09:76:16:FA
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 0190F0B70651321B7C460C0940E676E3A83B
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/A_KV8iAgWdE050tb4fDlxgl2Fvo.roa
Signing time: Fri 26 Jul 2024 20:24:04 +0000
ROA not before: Fri 26 Jul 2024 20:24:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39216
IP address blocks: 212.126.96.0/21 maxlen: 21
212.126.96.0/22 maxlen: 22
212.126.96.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.98.0/24 maxlen: 24
212.126.100.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.103.0/24 maxlen: 24
212.126.104.0/21 maxlen: 21
212.126.104.0/22 maxlen: 22
212.126.104.0/23 maxlen: 23
212.126.104.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.107.0/24 maxlen: 24
212.126.108.0/23 maxlen: 23
212.126.108.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.115.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.122.0/24 maxlen: 24
212.126.123.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.124.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
2a04:2dc0::/48 maxlen: 48
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:18::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:1e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Aug 2024 05:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f0:b7:06:51:32:1b:7c:46:0c:09:40:e6:76:e3:a8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jul 26 20:24:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03f295f2202059d134e74b5be1f0e5c6097616fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:86:8b:1b:0f:96:48:fd:fc:8c:99:bd:e7:
53:59:ba:91:43:a5:a6:2b:21:8f:52:a8:c9:ea:ed:
f2:45:51:09:3b:ab:58:9a:b3:81:97:28:cd:a0:fa:
50:c9:eb:de:1e:71:f5:a6:e1:b5:75:11:7f:7e:eb:
cc:e3:86:7d:ac:52:88:bc:0c:bb:88:7c:fe:26:3b:
84:42:36:1c:05:0b:8c:7d:e6:5a:e8:07:39:41:ab:
10:f5:bb:99:63:62:d8:6e:a9:e4:58:48:92:71:6b:
92:be:07:60:96:72:54:98:58:13:84:aa:19:0a:72:
bd:3b:a7:cb:6c:d9:dc:05:bb:ea:51:5c:98:14:3f:
69:70:33:e3:ff:47:87:aa:8c:cd:bd:16:9f:a0:14:
0d:18:19:4e:e3:2f:ae:70:f6:d9:95:0d:1a:18:84:
f6:38:89:8d:1f:e8:f1:f8:58:ff:39:35:b3:fc:aa:
94:52:41:72:94:f7:24:87:03:58:7c:ca:68:9c:39:
2c:28:1a:a0:a1:d7:61:ac:b4:4c:e3:7c:76:5c:38:
ee:4e:a4:fa:2e:ea:0e:b8:e9:62:b9:b7:e1:db:31:
b5:80:4a:70:36:b6:79:6c:c5:e9:a2:4c:dc:c8:89:
af:4b:ae:43:30:90:2a:a2:98:a4:ba:48:73:87:3c:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F2:95:F2:20:20:59:D1:34:E7:4B:5B:E1:F0:E5:C6:09:76:16:FA
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/A_KV8iAgWdE050tb4fDlxgl2Fvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.96.0/20
212.126.115.0/24
212.126.117.0-212.126.127.255
IPv6:
2a04:2dc0::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::-2a04:2dc0:19:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:1e::/48
Signature Algorithm: sha256WithRSAEncryption
27:e4:50:f5:83:d3:70:06:13:0d:eb:65:f7:94:ae:da:a5:f1:
7b:ff:fa:1b:6e:c5:29:d3:11:9f:7b:39:d9:8b:4b:63:fa:f4:
0d:98:76:c5:a2:58:cd:33:5e:45:ab:3c:11:70:b7:ab:32:db:
26:79:aa:9b:91:0b:61:f5:91:ac:cb:8b:df:92:91:a4:7e:99:
4f:c8:98:65:6c:1d:9f:e4:42:62:d2:d4:2c:19:6b:6a:f9:35:
ee:77:d5:96:95:b8:35:60:ce:d7:81:37:99:b2:08:d1:ef:ca:
95:ee:8e:b8:19:3e:a9:c7:57:14:21:44:e3:b1:d5:3b:8a:ff:
40:91:24:27:44:8f:82:37:1e:c7:8f:5b:70:76:45:99:5e:9c:
e4:14:35:52:74:87:26:61:bd:38:5c:78:6c:19:c9:7f:c0:2c:
b9:ae:7d:62:81:2d:61:e2:c0:80:5f:68:e9:51:0d:21:f0:67:
18:ef:c2:0d:71:0a:01:b2:fd:7a:b2:f7:53:ef:24:7d:5a:14:
17:80:b5:e8:ff:eb:a7:38:8e:33:c9:c7:36:ef:6e:c1:58:0d:
a6:92:85:84:d3:a8:3b:00:ca:d0:1b:46:ce:9f:cd:14:3b:6e:
05:02:93:06:0d:02:8c:e6:86:33:29:fb:f9:ca:8c:d4:4d:0b:
86:45:35:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:09 2025 by rpki-client