Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/JBC-A2RLHFpZu51AW0uS7kMg4vk.roa
File: JBC-A2RLHFpZu51AW0uS7kMg4vk.roa (raw, json)
Hash identifier: FhLDtv5X9c2GodBMUobdfQwS2VWSkI10PWnB3wptk18=
Subject key identifier: 24:10:BE:03:64:4B:1C:5A:59:BB:9D:40:5B:4B:92:EE:43:20:E2:F9
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0193E507E4A01630A3565B9CFEB69727FF76
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/JBC-A2RLHFpZu51AW0uS7kMg4vk.roa
Signing time: Fri 20 Dec 2024 17:05:19 +0000
ROA not before: Fri 20 Dec 2024 17:05:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60742
IP address blocks: 2a14:6780:d::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e5:07:e4:a0:16:30:a3:56:5b:9c:fe:b6:97:27:ff:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Dec 20 17:05:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2410be03644b1c5a59bb9d405b4b92ee4320e2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:ee:50:7d:8e:85:c9:6b:15:01:58:5f:b3:
cf:e5:96:9b:1c:82:89:10:13:37:4d:5e:ca:dd:b3:
7f:10:b3:66:f3:2b:80:69:93:0e:44:84:bd:62:b2:
e9:76:04:1c:50:21:31:50:42:5c:c2:f0:ec:71:bd:
96:f1:ec:56:8f:a6:37:9c:5b:24:e7:e5:06:2d:2b:
cf:3a:a3:bd:b2:4b:ec:ad:cf:74:63:28:70:d3:92:
7f:c4:6a:62:21:b7:8d:83:ce:b6:de:81:0b:0b:d0:
e7:3f:9c:0c:d7:a9:7d:fb:f3:3b:60:02:74:bc:8c:
5f:1d:b0:12:2f:6c:09:c4:91:e3:76:29:8b:1c:3a:
0d:29:19:d9:9b:fd:0f:9d:be:4d:d9:40:2d:25:d9:
4a:06:35:e0:16:c9:60:17:c0:c6:e8:20:86:60:c0:
f2:c5:de:e8:3a:1b:c1:bc:db:dc:90:2b:97:34:a9:
54:4a:b2:ff:e1:cf:cd:f0:a3:6a:13:54:9a:0b:51:
e6:6d:8d:7f:1a:a3:4b:32:f8:62:d4:3b:f8:a2:3b:
5a:2e:80:67:af:3a:73:dc:eb:60:8c:e0:9a:94:39:
ca:92:69:98:a1:6b:76:95:53:8a:0d:8a:f2:1b:70:
02:67:d0:be:2d:74:82:19:80:88:e5:de:5c:41:b0:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:10:BE:03:64:4B:1C:5A:59:BB:9D:40:5B:4B:92:EE:43:20:E2:F9
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/JBC-A2RLHFpZu51AW0uS7kMg4vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6780:d::/48
Signature Algorithm: sha256WithRSAEncryption
72:19:cb:e7:e2:b5:b9:af:58:d7:e0:d3:92:80:12:f9:51:fd:
f3:8d:be:41:11:9e:da:c7:d9:39:6e:33:0a:bf:6e:fc:40:95:
5b:91:4c:3c:b5:9b:88:d8:f5:14:30:bd:f1:35:df:14:29:a3:
86:f4:3e:2a:06:1f:f9:24:d2:8c:78:91:74:aa:c0:7a:5e:6e:
39:28:de:3f:ef:fa:6e:07:2c:d0:d6:9c:0d:cc:36:1d:12:0a:
10:7d:1d:09:28:c1:6d:79:8e:82:16:d5:f1:1f:dc:b2:5a:bb:
fc:21:0f:1b:e9:d0:ad:9e:08:23:c4:77:6a:96:71:d7:b2:2b:
bc:d2:2e:79:b7:f5:86:ed:46:92:1c:94:93:a0:28:cc:6c:71:
55:d1:e9:b4:35:fb:25:7c:5e:2b:20:f4:16:84:b4:57:99:45:
9a:04:84:17:85:b0:d8:ca:48:f3:b2:f3:ed:14:87:52:9d:30:
b7:4b:eb:cc:4a:2b:a8:c8:e7:d5:03:ff:97:f8:0d:1f:b5:3e:
0e:2a:1c:af:55:9a:58:22:56:02:58:df:92:92:1b:6a:4c:cc:
34:ed:fa:36:56:d9:78:89:40:94:2b:d0:08:de:62:ce:57:30:
c5:23:c4:4c:c7:82:da:ec:d4:1c:4c:a0:cf:85:1e:b2:54:9b:
db:88:fb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:41:56 2025 by rpki-client