Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/luy0MYIKuNKDpk1WZ1XHQQkWR7k.roa
File: luy0MYIKuNKDpk1WZ1XHQQkWR7k.roa (raw, json)
Hash identifier: lBmn2epkFh8DPV6pEvh42cRMRWXhmxzOWljOFNNI+zk=
Subject key identifier: 96:EC:B4:31:82:0A:B8:D2:83:A6:4D:56:67:55:C7:41:09:16:47:B9
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 01856C4A7007E493387536DFF0F455C9A139
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/luy0MYIKuNKDpk1WZ1XHQQkWR7k.roa
Signing time: Sun 01 Jan 2023 07:44:55 +0000
ROA not before: Sun 01 Jan 2023 07:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212460
IP address blocks: 212.126.115.0/24 maxlen: 24
212.126.113.0/24 maxlen: 24
212.126.114.0/24 maxlen: 24
2a04:2dc0:1d::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:70:07:e4:93:38:75:36:df:f0:f4:55:c9:a1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 1 07:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96ecb431820ab8d283a64d566755c741091647b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:69:51:2d:80:58:f2:49:5b:b9:d5:96:a2:
f6:1c:2a:e3:2a:ec:ba:42:f6:e7:05:57:ad:f9:cb:
c2:ef:05:a1:76:23:77:5f:28:f1:5a:4a:c8:bc:2f:
7d:4f:33:01:6c:7c:be:1c:e1:30:80:d8:21:cd:03:
0b:6a:79:6a:b0:10:d0:a5:e9:bb:e2:ff:c4:a1:53:
19:c2:a3:b0:f7:05:b7:ee:02:c6:e4:9e:02:aa:25:
cb:87:64:39:16:bc:f6:70:b9:4a:33:73:2f:c1:6b:
e4:bf:fd:c3:06:4f:2c:3d:23:f4:f8:7e:7c:bd:c9:
a3:c7:85:69:e1:74:60:74:8d:46:c2:75:a0:65:92:
f6:92:29:7b:42:b8:da:43:76:9f:15:b4:9c:8a:84:
88:5e:b5:de:3b:34:0b:02:89:77:cc:32:44:7e:30:
d4:f2:34:fb:62:e8:24:43:19:dd:1e:f0:4b:37:e2:
7c:06:79:d7:19:c7:97:ab:9e:66:2c:f7:6b:f4:a8:
ea:5e:e1:24:cf:f3:94:db:a0:eb:71:3a:56:aa:c5:
b5:9f:4c:c0:ad:9c:07:78:ed:35:e2:da:51:d4:1c:
10:87:74:1d:c2:6b:ee:cd:d7:08:b9:99:d8:d1:07:
c0:3e:3d:12:be:bb:99:c7:c2:f4:2e:27:68:fe:e3:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EC:B4:31:82:0A:B8:D2:83:A6:4D:56:67:55:C7:41:09:16:47:B9
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/luy0MYIKuNKDpk1WZ1XHQQkWR7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.113.0-212.126.115.255
IPv6:
2a04:2dc0:1d::/48
Signature Algorithm: sha256WithRSAEncryption
d4:d3:82:4f:f2:ef:9c:d3:a0:8f:95:3c:81:f6:ab:43:9c:60:
f3:25:7f:8b:a2:89:26:73:c0:57:be:e9:23:8f:86:ff:33:4c:
c0:be:13:54:19:4e:e1:de:f2:81:61:07:47:b5:69:53:e3:0c:
9b:c4:6e:7a:6d:4e:4a:a1:06:a8:e0:ca:57:b9:a2:97:49:ac:
4d:a1:1f:41:45:50:c3:74:cf:75:cd:5f:a6:23:13:3c:57:fe:
18:74:7c:79:2b:ab:78:90:70:95:0d:ad:56:4a:7f:94:d8:f6:
af:dc:8d:39:d6:8f:74:cc:01:b9:b2:23:c2:9a:00:c0:53:b6:
45:68:a6:c3:94:0c:8a:64:89:c9:f2:94:fb:87:88:6f:1b:f7:
f0:91:40:e0:c1:56:c0:f7:3b:de:be:2e:b0:cc:b6:2f:7c:45:
c0:30:b4:c6:d0:ce:f9:39:da:2f:22:f3:67:ea:f5:6e:24:be:
f4:d8:a3:8a:76:6d:2f:0a:2f:18:98:89:6a:01:ce:ee:bb:f8:
58:00:df:9e:ad:b1:13:c7:52:a6:ab:fc:de:17:23:b6:21:c2:
0a:45:88:e6:ad:ae:2c:fc:70:71:09:82:77:c1:fc:3b:0b:66:
cb:db:27:1e:d2:d1:0c:1c:0a:60:c7:18:36:1d:be:88:b8:dc:
4e:c8:82:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:31 2024 by rpki-client on console-fra.rpki-client.org