Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/JMmi074Nmj1iEEtTCLq2v_2j7D8.roa
File: JMmi074Nmj1iEEtTCLq2v_2j7D8.roa (raw, json)
Hash identifier: ItorHeYJk34BIM9/5mzkRj4Xd9RbsBvnx52fQ+bR3js=
Subject key identifier: 24:C9:A2:D3:BE:0D:9A:3D:62:10:4B:53:08:BA:B6:BF:FD:A3:EC:3F
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019426D98CE94186070FE3F04F01F2E3FFF9
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/JMmi074Nmj1iEEtTCLq2v_2j7D8.roa
Signing time: Thu 02 Jan 2025 11:49:38 +0000
ROA not before: Thu 02 Jan 2025 11:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51202
IP address blocks: 212.232.18.0/24 maxlen: 24
2a14:6781::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Feb 2025 01:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8c:e9:41:86:07:0f:e3:f0:4f:01:f2:e3:ff:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24c9a2d3be0d9a3d62104b5308bab6bffda3ec3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:2c:12:b5:52:f1:3e:74:94:85:9d:a9:ac:
af:12:62:0e:cc:be:ab:d5:70:63:fc:04:61:73:88:
92:59:cd:49:4e:a8:17:0b:d7:69:84:12:7c:85:d9:
45:7c:85:12:09:67:4c:32:d9:e0:8e:86:c2:9b:88:
63:a7:ef:52:c5:f9:60:14:30:f6:ff:6f:34:c5:46:
dc:52:ab:b5:99:d7:fc:a9:64:fc:04:09:02:7c:aa:
aa:dc:87:05:5e:b6:26:5d:4b:c5:65:67:a8:4a:c0:
42:c5:f7:8b:8f:9e:11:8e:00:00:4d:e3:ef:ef:ee:
e8:71:b3:26:f2:55:17:7b:8c:4f:92:e3:ab:2b:4a:
02:89:ae:67:38:62:8f:2e:ef:66:d2:77:a1:c9:fd:
4d:0f:8b:b2:a2:0d:75:8f:f8:8b:35:d5:27:e1:ae:
4d:ac:e3:bd:19:c7:a6:53:17:50:05:64:86:f9:90:
2c:b7:29:48:dc:70:2b:9f:dd:fe:75:80:48:90:8e:
1c:93:05:fb:02:8c:a7:a8:ed:55:5a:01:25:56:20:
fd:13:f7:c8:39:53:f1:bb:fa:2e:c7:64:47:96:16:
cd:8e:19:cb:ac:a5:f6:82:d8:f2:58:9c:fa:fc:1f:
31:16:97:4e:d7:ae:da:94:0f:73:3f:3b:e1:ba:b3:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C9:A2:D3:BE:0D:9A:3D:62:10:4B:53:08:BA:B6:BF:FD:A3:EC:3F
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/JMmi074Nmj1iEEtTCLq2v_2j7D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.232.18.0/24
IPv6:
2a14:6781::/32
Signature Algorithm: sha256WithRSAEncryption
77:18:16:0e:96:34:e9:6e:60:de:32:4d:ff:f3:88:3d:e5:1e:
cb:62:39:2b:6a:97:30:96:9c:03:55:92:5f:83:84:3a:96:55:
40:85:f5:f0:23:02:55:e4:e6:91:eb:de:b6:52:2a:b5:60:35:
72:07:81:1f:eb:0d:eb:c1:19:e5:2f:e0:d8:65:22:d8:99:5b:
ac:a2:b2:61:bd:51:25:7c:88:52:54:6a:d5:7e:dc:02:57:93:
82:95:cd:5b:ee:bb:d6:16:8a:3a:86:d9:aa:2d:b7:ff:8c:31:
4a:4e:ea:55:f5:e6:54:bf:5d:a8:ad:c4:72:da:e8:56:09:09:
16:ca:aa:fb:1e:10:7b:43:bd:2b:54:0b:72:97:d9:9b:66:2f:
cf:eb:55:30:86:4c:e9:26:a7:8b:90:e1:fd:9b:09:f4:18:4b:
ce:cc:35:18:f1:d6:09:c0:7a:b0:53:4e:df:3e:5c:b6:a1:7b:
35:9a:75:ef:b1:6a:c5:97:47:5d:64:6c:5c:c4:73:f6:5e:0b:
f2:a3:72:6f:1b:37:66:b7:73:7c:91:85:e1:b1:ab:45:c3:76:
01:06:6f:60:f3:0f:a2:78:df:94:c6:0c:47:06:ee:96:12:ba:
6b:9f:69:6c:cc:18:b8:dc:6e:de:31:cd:12:ee:d2:ca:ac:41:
5a:1b:5b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:42:02 2025 by rpki-client