Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/sPZ0S8U5f7WDWsvBJ-NMaL7rpS4.roa
File: sPZ0S8U5f7WDWsvBJ-NMaL7rpS4.roa (raw, json)
Hash identifier: +iSMQg2hnoACHttEotTivjVfg0cTcp/usJg6z+G7feY=
Subject key identifier: B0:F6:74:4B:C5:39:7F:B5:83:5A:CB:C1:27:E3:4C:68:BE:EB:A5:2E
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 018C4384EFF569B7D5B8CFA89A3DE81508C8
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/sPZ0S8U5f7WDWsvBJ-NMaL7rpS4.roa
Signing time: Thu 07 Dec 2023 09:03:54 +0000
ROA not before: Thu 07 Dec 2023 09:03:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200178
IP address blocks: 212.126.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:84:ef:f5:69:b7:d5:b8:cf:a8:9a:3d:e8:15:08:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Dec 7 09:03:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0f6744bc5397fb5835acbc127e34c68beeba52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:cd:b1:c5:10:de:7b:3a:5b:dd:83:5a:2c:
f6:11:1c:87:78:f2:16:e2:0d:10:83:ac:44:d7:50:
41:3c:5f:e2:a9:d9:75:ba:05:ba:b7:73:9f:f4:33:
7a:30:02:82:11:52:9b:47:e5:85:9a:0e:10:2a:1b:
00:b0:f7:f7:f1:64:49:1b:1b:be:ad:6e:a1:bf:99:
43:a2:db:ba:7e:a9:6d:e5:4b:1a:3b:95:22:f9:a4:
c2:5d:32:f9:c0:cd:7d:12:6a:37:dd:f3:16:27:f6:
95:39:44:06:8d:43:36:e1:c3:5a:21:8f:4b:98:85:
25:73:71:7c:e3:38:69:a3:c7:f2:a8:20:5c:dc:61:
77:d3:6e:b7:01:ac:54:e6:6c:09:6e:97:c3:2a:a8:
cc:ff:fc:73:d0:a0:77:a5:e8:33:3d:dc:73:56:78:
a0:02:2b:ba:b3:3e:dc:56:fe:e9:80:e9:ac:77:1a:
40:13:3d:2e:5e:37:d2:2a:0b:22:26:ff:7a:45:fb:
9c:c2:8a:7b:e4:2d:ef:a2:57:de:1f:a2:4b:2b:6f:
3b:27:a9:41:29:92:ba:bd:4d:7f:f9:04:74:7c:93:
75:46:62:92:ac:c5:58:c7:fc:11:56:24:6f:bc:31:
f5:2f:0e:54:06:91:8e:fe:e0:28:57:cf:13:ad:e0:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F6:74:4B:C5:39:7F:B5:83:5A:CB:C1:27:E3:4C:68:BE:EB:A5:2E
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/sPZ0S8U5f7WDWsvBJ-NMaL7rpS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.112.0/24
Signature Algorithm: sha256WithRSAEncryption
67:71:7e:c5:ed:ee:4a:96:37:8d:57:eb:a1:5d:9a:06:21:8c:
5f:78:72:8d:22:fe:18:7b:2b:4e:76:d2:7a:fc:a6:76:a8:1d:
67:98:88:cf:d8:21:90:56:fc:48:a9:25:8a:44:38:d1:62:fb:
c1:ea:f7:f5:4a:3d:65:c1:e0:de:a1:a4:74:e9:17:25:9b:c3:
42:14:8b:e8:66:0e:3c:65:6f:66:2f:cf:6d:3e:59:3f:67:c6:
1a:fd:25:5d:88:a2:ae:90:b6:af:f1:7a:f4:48:49:5c:5d:d7:
7e:ff:7b:f3:51:46:ab:a4:73:b3:e4:df:34:87:f8:0c:c7:24:
26:65:da:2b:e1:b4:ea:75:25:3a:e7:58:d3:46:5d:b4:b8:7d:
f6:66:c1:52:5c:43:d0:1c:75:3b:0d:14:8c:7e:30:36:5b:64:
e2:c9:95:15:36:0a:e0:bc:26:f4:a6:3c:62:fb:63:16:59:de:
22:7d:c2:83:85:32:a4:15:b0:c5:43:8e:50:e8:df:b2:0e:6e:
54:48:f1:72:09:cc:43:b4:c8:c4:c8:7b:d0:9f:74:d2:90:56:
7f:5e:0d:12:3a:b3:39:ae:84:8d:38:e6:b9:78:b3:06:f5:bb:
b2:78:1a:70:1d:10:3e:63:a5:f8:08:db:6c:e6:e7:39:5d:68:
28:92:e8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:31 2024 by rpki-client on console-fra.rpki-client.org