Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/oP9Gk9ZLkujVPoTv6wC5Dx9ARdM.roa
File: oP9Gk9ZLkujVPoTv6wC5Dx9ARdM.roa (raw, json)
Hash identifier: pE7osb/jMR0dtv+bPVR1xj+IQxu74G938pa+ESARWQc=
Subject key identifier: A0:FF:46:93:D6:4B:92:E8:D5:3E:84:EF:EB:00:B9:0F:1F:40:45:D3
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 018B6B36A07876821C7E9D64B0C7EF19C189
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/oP9Gk9ZLkujVPoTv6wC5Dx9ARdM.roa
Signing time: Thu 26 Oct 2023 09:00:23 +0000
ROA not before: Thu 26 Oct 2023 09:00:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39216
IP address blocks: 212.126.98.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.96.0/22 maxlen: 22
212.126.96.0/21 maxlen: 21
212.126.96.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.104.0/22 maxlen: 22
212.126.104.0/24 maxlen: 24
212.126.104.0/21 maxlen: 21
212.126.104.0/23 maxlen: 23
212.126.103.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.100.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.108.0/24 maxlen: 24
212.126.108.0/23 maxlen: 23
212.126.107.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.115.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.124.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.123.0/24 maxlen: 24
212.126.122.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:18::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:1e::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:36:a0:78:76:82:1c:7e:9d:64:b0:c7:ef:19:c1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Oct 26 09:00:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0ff4693d64b92e8d53e84efeb00b90f1f4045d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:09:0a:e8:0d:9c:a6:aa:02:26:40:25:1b:74:
de:fb:15:6e:c8:3f:f3:b0:ed:36:ac:05:31:e5:ae:
b1:a4:a7:89:c8:a7:ae:d0:11:37:f0:ed:f4:6b:42:
ad:d1:b0:89:ce:45:dc:82:b5:74:e4:d6:9c:e1:1e:
39:e9:54:de:ec:92:5f:0a:b8:ff:90:58:dc:dd:11:
1a:b7:d6:27:bb:f7:73:0c:9d:8b:9e:98:8d:10:58:
a4:83:96:95:bc:a6:89:99:fd:f2:db:74:ce:fe:00:
bb:aa:80:71:7c:64:d3:05:57:cf:6d:ea:c4:8c:e6:
ad:f5:83:0f:89:24:46:ce:69:66:2b:c1:b4:03:88:
0a:0d:00:9d:ca:cf:2d:a9:9a:65:6c:23:21:dc:44:
b3:1b:2b:b5:aa:46:af:f4:42:ea:33:75:aa:ca:c0:
e6:52:b1:31:dd:03:7d:55:e5:5b:ff:5a:46:47:66:
4b:81:96:a3:18:9b:6d:26:d1:f9:ef:6b:7e:c7:61:
6a:ec:ca:64:0a:11:6b:bb:3d:6d:f7:5b:bf:7a:b6:
cb:d6:32:2b:9a:b6:03:96:f9:0e:0f:ad:f9:93:00:
69:e0:4f:78:1e:98:ac:76:cd:63:2c:d3:e0:70:55:
21:9f:4c:19:1b:c9:40:a7:d1:c5:2f:c5:8c:4b:f1:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FF:46:93:D6:4B:92:E8:D5:3E:84:EF:EB:00:B9:0F:1F:40:45:D3
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/oP9Gk9ZLkujVPoTv6wC5Dx9ARdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.96.0/20
212.126.115.0/24
212.126.117.0-212.126.127.255
IPv6:
2a04:2dc0::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::-2a04:2dc0:19:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:1e::/48
Signature Algorithm: sha256WithRSAEncryption
5e:c1:3f:f3:f6:dc:c0:6a:6d:a3:f1:aa:0c:c7:38:6d:32:a7:
4f:b3:76:dc:4e:59:2b:c6:2c:7f:0b:ee:57:32:19:16:fc:93:
af:7e:2a:94:02:7a:6c:12:21:10:b9:e6:36:29:ce:ab:b8:fd:
af:95:1b:49:25:24:d9:20:9e:1d:e4:6b:31:4b:aa:f5:ff:3d:
5d:12:dc:54:bf:96:e4:d6:38:8f:2a:2b:be:6e:20:e6:62:17:
4b:e0:0a:bb:1c:66:ec:dc:02:be:08:a2:e9:ba:c6:83:e0:1c:
07:eb:e0:60:26:7e:3f:d9:be:31:9a:bd:29:ad:0b:0e:80:ea:
8b:03:03:bf:9d:30:55:76:41:84:21:61:5b:4d:4a:44:84:fc:
29:4a:cc:54:19:76:7b:84:39:b3:43:7d:15:98:f8:de:08:b6:
f2:5c:61:ee:c1:07:f3:34:1e:d6:b3:9d:86:01:ef:7f:49:ac:
da:b1:bb:e3:5f:5f:ef:f9:ab:34:ba:4c:bf:ea:1a:97:95:b1:
29:5f:14:08:a5:09:e5:87:e7:f4:a8:07:dc:85:b3:b1:0d:f1:
ca:1f:0d:44:0d:fd:ea:6b:c8:1d:37:75:47:0d:16:64:2d:d8:
08:a7:f5:0f:72:dd:7e:fa:c5:a4:19:c1:83:12:31:6c:de:91:
a8:71:60:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:31 2024 by rpki-client on console-fra.rpki-client.org