Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/hhxyQU__fAlrXklmRcUF5nLLzNA.roa
File: hhxyQU__fAlrXklmRcUF5nLLzNA.roa (raw, json)
Hash identifier: cPAy3rRz6DuUknV5hryfbE1M81fLUAcoc3GV5Jrunyo=
Subject key identifier: 86:1C:72:41:4F:FF:7C:09:6B:5E:49:66:45:C5:05:E6:72:CB:CC:D0
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 0191DAFD25F3C8FA2CB382655D602F56D4A8
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/hhxyQU__fAlrXklmRcUF5nLLzNA.roa
Signing time: Tue 10 Sep 2024 08:11:49 +0000
ROA not before: Tue 10 Sep 2024 08:11:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211970
IP address blocks: 212.126.113.0/24 maxlen: 24
2a04:2dc0:18::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:fd:25:f3:c8:fa:2c:b3:82:65:5d:60:2f:56:d4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Sep 10 08:11:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=861c72414fff7c096b5e496645c505e672cbccd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:69:f3:e7:37:89:64:31:7a:13:25:f8:02:
e7:85:86:52:12:18:e8:6a:e0:90:9d:46:cc:1d:c4:
1d:73:5f:9d:43:4b:75:98:54:8b:25:55:79:dd:cd:
6b:44:d0:c4:ca:79:22:76:86:fe:c9:d3:d1:25:e7:
c3:99:d7:9c:72:17:4d:f5:21:c8:51:ba:9c:02:91:
1c:70:d2:c2:48:3c:60:dc:9e:67:ed:4f:52:68:93:
01:31:2b:ae:f1:24:46:2a:2a:07:46:8f:60:eb:21:
e3:9c:bc:2d:d0:0b:08:3b:05:3f:22:f7:88:77:c7:
a3:c2:8c:0d:d9:67:a8:14:85:4d:a1:3e:b1:db:5d:
85:f3:ad:f7:0a:fd:a9:5c:c1:bc:f4:83:b4:56:b3:
fa:21:a9:78:e4:33:ad:fd:23:15:65:d8:9f:49:64:
8b:b6:b8:72:8f:9b:2a:ae:63:8f:0d:27:b4:00:3b:
e7:8b:6a:1f:a1:95:c1:1d:29:98:03:ab:e9:3c:c5:
df:1b:c4:e0:91:1d:b0:9d:d1:c9:bb:ed:79:f4:9e:
c0:9f:e7:01:3b:e6:6b:29:30:06:95:3c:84:6d:a8:
97:d3:02:80:c5:ca:80:7c:0a:0f:15:a8:5d:1e:ab:
40:25:10:48:cc:05:0d:3b:fd:99:4a:28:82:1f:f0:
7a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1C:72:41:4F:FF:7C:09:6B:5E:49:66:45:C5:05:E6:72:CB:CC:D0
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/hhxyQU__fAlrXklmRcUF5nLLzNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.113.0/24
IPv6:
2a04:2dc0:18::/48
Signature Algorithm: sha256WithRSAEncryption
ce:e8:c7:f0:91:bf:66:83:4a:6d:9f:12:07:5f:25:4e:ab:fa:
5e:2c:cc:ab:7c:d6:81:f8:e4:2a:39:43:a7:c3:2b:56:d5:05:
5c:3d:15:ba:b0:f6:79:9e:0a:5d:52:05:92:29:f0:bd:a3:ba:
ad:d9:3b:71:e7:27:7c:42:7c:f4:92:b1:e1:5c:68:00:7a:ee:
9e:63:35:55:a7:90:7f:d5:98:07:fc:2f:25:cd:9e:86:d0:47:
a4:d0:8f:7d:33:3a:c5:84:bb:ca:6e:7f:73:a4:bc:01:b9:55:
4b:5c:2b:38:48:ac:78:66:f3:81:74:31:8e:6f:cc:c0:38:3f:
e5:5d:95:d5:09:0d:16:90:f7:69:8a:50:25:5d:60:3f:6f:c0:
3d:c9:02:59:31:49:3d:10:a2:30:1e:32:28:00:1c:9d:bf:ed:
7f:0d:a7:5d:8b:c0:e7:a4:e8:b2:0d:98:0e:bc:ea:f2:81:b4:
99:c2:16:28:24:f8:e8:24:59:29:c3:2c:71:bb:0e:e5:71:3d:
e7:57:0a:04:42:6b:eb:a7:e1:15:c9:a9:ad:48:2f:92:76:f9:
4a:0d:54:ab:3c:a2:91:f3:de:51:c5:f7:db:8c:91:0f:39:9e:
83:d3:a1:ed:8d:70:b9:f4:12:bf:7c:b6:bc:91:dd:98:8d:aa:
12:3e:66:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:04 2025 by rpki-client