Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/ogdAjl_VXsE5JHD70g61EeOJSCg.roa
File: ogdAjl_VXsE5JHD70g61EeOJSCg.roa (raw, json)
Hash identifier: tJVaZb2CuMfVW03HEVsZmTYk4HGIdA3apz7LJ64LdFY=
Subject key identifier: A2:07:40:8E:5F:D5:5E:C1:39:24:70:FB:D2:0E:B5:11:E3:89:48:28
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 0191736A28DC438DA821466CDD536333F567
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/ogdAjl_VXsE5JHD70g61EeOJSCg.roa
Signing time: Wed 21 Aug 2024 05:30:22 +0000
ROA not before: Wed 21 Aug 2024 05:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39216
IP address blocks: 212.126.96.0/21 maxlen: 21
212.126.96.0/22 maxlen: 22
212.126.96.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.98.0/24 maxlen: 24
212.126.100.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.103.0/24 maxlen: 24
212.126.104.0/21 maxlen: 21
212.126.104.0/22 maxlen: 22
212.126.104.0/23 maxlen: 23
212.126.104.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.107.0/24 maxlen: 24
212.126.108.0/23 maxlen: 23
212.126.108.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.122.0/24 maxlen: 24
212.126.123.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.124.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
2a04:2dc0::/48 maxlen: 48
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:18::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:1e::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 10 Sep 2024 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:73:6a:28:dc:43:8d:a8:21:46:6c:dd:53:63:33:f5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Aug 21 05:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a207408e5fd55ec1392470fbd20eb511e3894828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:b6:17:33:96:73:ec:19:04:61:3e:f9:ac:
e0:b9:15:54:35:fb:54:f0:37:5b:26:c2:e5:f2:3b:
b0:b6:48:3f:57:85:38:ac:fe:02:58:1c:1b:87:4d:
e1:e9:98:a9:44:b2:61:42:77:1a:0a:f8:45:8b:7a:
7b:20:29:06:16:fc:1c:00:d8:14:3f:c6:bf:d3:04:
fd:e6:c3:ba:4a:66:e3:e3:76:40:39:45:43:6c:2b:
9c:94:ca:ae:34:e1:94:84:23:be:38:e0:26:f1:49:
d4:a1:e5:35:cb:27:cc:a3:61:24:b1:50:87:15:55:
a1:e4:1e:6c:86:b3:45:88:fd:7a:27:d2:d2:1d:53:
30:4b:b8:c9:15:04:45:ce:e9:a0:7c:62:e0:65:28:
1d:b9:91:bd:76:e2:d0:94:d2:c2:dc:0c:0a:68:6d:
4a:0b:bd:2e:68:dc:ed:03:c1:e4:eb:f2:b5:01:09:
3a:24:bc:5f:a0:61:33:06:42:0c:7e:bb:f7:66:f9:
6a:cc:ce:b2:41:3e:cf:45:20:04:60:ea:5f:d4:1e:
2f:1c:48:6b:ab:1f:d2:c4:09:5d:d5:5d:9e:57:04:
4c:6a:84:30:02:29:d6:47:e3:9f:5f:2b:08:91:07:
4e:5d:f0:99:f0:ba:57:84:67:47:a0:4a:e4:ad:17:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:07:40:8E:5F:D5:5E:C1:39:24:70:FB:D2:0E:B5:11:E3:89:48:28
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/ogdAjl_VXsE5JHD70g61EeOJSCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.96.0/20
212.126.117.0-212.126.127.255
IPv6:
2a04:2dc0::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::-2a04:2dc0:19:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:1e::/48
Signature Algorithm: sha256WithRSAEncryption
45:e0:3c:9f:46:85:81:40:0b:40:ff:ab:49:cf:c2:99:79:44:
c6:d9:96:ac:8d:5e:6c:44:fa:12:bc:47:1e:16:1e:44:3b:0e:
80:fc:48:59:3d:31:9f:7a:ca:27:d3:9b:d3:57:30:cb:90:b5:
eb:c0:a3:bd:db:05:ad:80:e7:82:4e:f3:6d:b4:33:6d:ad:21:
71:ff:83:a9:6a:06:55:30:1d:f2:d0:36:1a:d5:07:c9:d9:17:
26:f9:56:3c:3b:59:33:d6:f7:01:39:d6:a5:b8:0c:d8:8c:85:
b3:f6:2a:f2:ee:76:a0:7d:1f:42:8d:57:0d:d7:24:dc:d4:97:
d6:dd:67:53:f5:c5:54:2c:d8:f5:b6:23:0e:e3:53:bf:f1:f6:
28:ef:6b:91:13:00:7e:c3:f1:c4:2f:21:30:18:a1:bc:36:2f:
69:f1:97:cc:e4:fb:08:4c:e7:04:84:d2:ed:b9:9b:07:38:f5:
fd:a4:6c:97:53:1f:39:16:7d:15:23:f1:26:a6:fa:7d:05:3e:
fe:37:4b:98:24:8f:6f:9a:77:74:cf:25:d5:55:95:b9:dc:d2:
7f:21:cc:50:8f:4f:0a:11:36:a7:ae:8c:44:26:8d:bd:f9:4a:
7a:2a:17:3c:cf:e2:43:ea:b9:d0:05:e1:b1:19:3c:3b:59:ff:
94:45:f8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:10 2025 by rpki-client