Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/Am_K81Rw4jBq0NBemk6juzGdmW8.roa
File: Am_K81Rw4jBq0NBemk6juzGdmW8.roa (raw, json)
Hash identifier: dOMhVLJt/2awoB20aGpmXfybgvlbSEgqLVGau0SROF0=
Subject key identifier: 02:6F:CA:F3:54:70:E2:30:6A:D0:D0:5E:9A:4E:A3:BB:31:9D:99:6F
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 01856C4A6B3E646AEC20AF6F31E606AFEC25
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/Am_K81Rw4jBq0NBemk6juzGdmW8.roa
Signing time: Sun 01 Jan 2023 07:44:54 +0000
ROA not before: Sun 01 Jan 2023 07:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39216
IP address blocks: 212.126.98.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.96.0/22 maxlen: 22
212.126.96.0/21 maxlen: 21
212.126.96.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.104.0/22 maxlen: 22
212.126.104.0/24 maxlen: 24
212.126.104.0/21 maxlen: 21
212.126.104.0/23 maxlen: 23
212.126.103.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.100.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.108.0/24 maxlen: 24
212.126.108.0/23 maxlen: 23
212.126.107.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.124.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.123.0/24 maxlen: 24
212.126.122.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:1e::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:6b:3e:64:6a:ec:20:af:6f:31:e6:06:af:ec:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 1 07:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=026fcaf35470e2306ad0d05e9a4ea3bb319d996f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7c:dc:64:d3:5b:30:82:09:42:ed:0f:b0:e3:
b3:20:40:da:4b:55:7f:42:0b:e7:2b:7b:be:39:6c:
ce:8f:71:ee:e6:6d:03:bd:0f:7d:b9:4f:fa:23:f8:
68:31:b9:00:80:79:f4:5b:11:2f:d0:c6:2a:f4:3f:
ad:5b:3b:66:3f:d3:8a:71:4b:90:68:0d:fe:95:83:
8a:ab:17:ad:35:76:a0:e7:73:dd:07:e0:f5:ff:05:
3b:8f:f6:5d:3f:67:3c:c8:bb:ab:3a:5c:1f:be:2a:
03:91:9b:3f:21:1e:71:55:9d:0b:26:6c:9e:52:c2:
48:2a:c2:1d:eb:fe:9a:8e:62:c9:55:58:c2:fb:3b:
ad:48:a2:9c:7e:09:3a:fb:a8:67:fd:c7:f3:93:18:
c1:5c:35:42:f5:37:f3:b4:cc:1d:64:01:f3:37:e2:
ab:fc:39:0a:12:93:55:2f:70:d9:8c:1f:de:b8:66:
1e:63:21:20:38:60:34:66:91:1c:e7:93:86:f6:37:
70:72:9c:f9:c7:7c:32:fb:b3:d1:fe:f9:e8:23:7f:
66:b7:66:cb:e8:d9:de:a7:c7:6e:b8:1c:31:07:3e:
58:5b:82:c6:13:59:97:37:89:82:7d:55:7d:ce:55:
16:b7:3f:cd:f8:43:46:53:eb:f1:b9:ea:79:67:e7:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6F:CA:F3:54:70:E2:30:6A:D0:D0:5E:9A:4E:A3:BB:31:9D:99:6F
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/Am_K81Rw4jBq0NBemk6juzGdmW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.96.0/20
212.126.117.0-212.126.127.255
IPv6:
2a04:2dc0::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::/48
2a04:2dc0:19::/48
2a04:2dc0:1e::/48
Signature Algorithm: sha256WithRSAEncryption
b4:d1:87:4e:da:e8:5e:99:a6:ee:3c:2e:69:73:ab:25:08:08:
f0:36:aa:98:42:68:fa:ad:71:58:2d:61:06:d6:7f:ab:ee:d8:
b9:4a:a8:78:7a:36:b5:b2:6c:86:64:d3:22:f7:9b:6f:9e:c1:
8a:71:80:51:aa:5e:67:e4:f1:8e:65:f0:62:19:3f:c4:ad:64:
0e:20:3a:61:3f:d1:5d:a7:ec:36:4a:6b:d5:a2:d8:58:cd:bd:
b6:b9:ee:f1:97:b7:55:bf:15:fb:1a:40:de:18:9b:98:1f:4f:
2f:3f:28:54:42:d9:5a:d6:ae:5c:2a:e8:33:ad:84:0e:54:29:
aa:b4:4c:46:b0:29:4a:47:0b:9e:43:b9:72:d6:86:c9:45:c5:
ca:bd:c4:25:07:6e:dd:1e:e0:8c:31:78:0d:a7:51:aa:33:0a:
41:31:37:67:a3:43:b2:4c:24:6b:86:3c:bc:35:e4:7c:be:9a:
9c:fa:df:2d:9d:19:4b:a7:c5:bd:36:be:73:75:e5:b3:0d:d9:
2c:b0:82:8a:0f:32:e2:ab:20:b1:a3:a2:8f:18:4e:39:b9:70:
78:b7:af:a8:0c:4c:1f:e4:52:fd:bc:e6:2e:64:36:dd:33:0b:
5d:c6:40:7c:88:58:56:2a:1f:25:e8:b8:b9:fa:6c:3d:73:dd:
b7:b3:4a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 06:25:19 2023 by rpki-client on console-ams.rpki-client.org