Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/rNaCDSH6K-SLVt3IOsIU-wUTSMM.roa
File: rNaCDSH6K-SLVt3IOsIU-wUTSMM.roa (raw, json)
Hash identifier: RCVvxGRHWRe9zrwI6t/OSBcWsSXTy5jqeeQIeuxjWxU=
Subject key identifier: AC:D6:82:0D:21:FA:2B:E4:8B:56:DD:C8:3A:C2:14:FB:05:13:48:C3
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 0185DD039431B2549BB88D7A34C4E0D55172
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/rNaCDSH6K-SLVt3IOsIU-wUTSMM.roa
Signing time: Mon 23 Jan 2023 05:04:37 +0000
ROA not before: Mon 23 Jan 2023 05:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205473
IP address blocks: 212.126.116.0/24 maxlen: 24
212.126.113.0/24 maxlen: 24
212.126.114.0/24 maxlen: 24
212.126.115.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:03:94:31:b2:54:9b:b8:8d:7a:34:c4:e0:d5:51:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 23 05:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acd6820d21fa2be48b56ddc83ac214fb051348c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:b4:3a:b0:f3:cd:88:ef:35:aa:da:51:e4:
45:97:c0:d9:0b:a7:74:6e:cf:06:a0:60:34:4b:e9:
8a:81:10:e0:33:57:47:26:c7:a5:03:d1:67:e9:9a:
18:6e:31:c7:8c:6b:90:d5:be:29:98:45:c2:4b:1a:
69:12:12:9d:9f:8e:ab:0f:8b:fb:0f:85:90:1a:1a:
7f:40:f0:48:5d:a6:16:9d:cd:c7:84:a3:7f:7d:bc:
68:e4:ec:2f:85:00:c2:99:07:fc:a1:fb:99:ab:47:
a0:8f:07:8d:01:68:9f:b5:e9:98:7b:36:58:5b:c6:
07:19:58:5f:65:6e:f1:fd:68:0f:3d:51:73:2b:7b:
f7:eb:01:be:70:5a:bd:6d:0c:47:83:29:7a:9c:2f:
f9:e1:04:ce:77:85:86:74:06:23:eb:e2:7f:a4:4d:
6b:c9:b4:0b:a6:ac:63:bb:5d:68:86:16:69:10:3b:
28:66:12:55:e8:ce:18:76:cf:46:ce:8a:5e:fa:3e:
52:b6:2b:60:ee:0a:f2:a3:cf:7b:52:23:09:cf:a2:
39:75:6a:eb:cc:fb:9e:77:7a:aa:9a:8f:69:05:e3:
f3:c9:9c:fe:8a:97:f8:ce:24:03:03:26:e1:8f:78:
eb:2a:83:99:3d:43:b8:f3:55:1b:fc:eb:28:e1:5b:
be:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D6:82:0D:21:FA:2B:E4:8B:56:DD:C8:3A:C2:14:FB:05:13:48:C3
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/rNaCDSH6K-SLVt3IOsIU-wUTSMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.113.0-212.126.116.255
212.126.126.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ac:3a:8d:10:d4:76:19:c2:5a:4c:a5:0f:2d:12:7e:51:58:
88:ad:68:fb:7d:28:a5:4c:04:e8:7d:cb:2b:3d:fd:3f:db:b0:
4e:ae:22:a7:a8:7b:88:9b:37:cd:16:5d:35:5f:e8:fc:c5:14:
13:5e:7c:14:ee:c8:ef:6e:36:c4:23:3e:a7:ee:90:19:5d:0c:
f6:af:2c:44:56:1f:0d:5a:e7:96:f9:b4:be:d2:a8:b1:d4:e8:
2d:50:a7:ce:3e:08:e5:b1:3e:48:ee:85:1d:d0:59:54:92:e3:
aa:f3:c8:7d:40:4a:c8:4c:0d:bd:b9:7b:73:2e:57:c9:9f:33:
44:e5:dc:bd:e7:2f:52:24:3f:86:32:65:ac:1c:41:3b:64:6c:
75:6d:22:0b:b1:e2:d9:97:6c:16:9e:e9:70:21:b1:39:ec:28:
61:e6:a3:19:8b:f0:78:5c:4d:c3:18:1b:71:bc:a8:99:1b:87:
b6:8e:55:99:a7:de:32:f3:b1:c2:4f:8d:f7:2a:e2:54:c7:52:
25:95:37:2c:16:2a:46:6b:f4:9c:5d:03:d4:ed:89:1f:ad:8e:
08:b7:bc:30:0e:b7:5d:53:cd:fd:f1:17:f8:6f:14:8b:60:53:
f3:fd:84:d7:c1:0d:c9:fc:21:91:34:11:75:08:63:88:c5:6f:
4d:94:ee:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:28 2023 by rpki-client on console-fra.rpki-client.org