Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/t2cWlIHadBgVmEEDy0wK3wOSVoM.roa
File: t2cWlIHadBgVmEEDy0wK3wOSVoM.roa (raw, json)
Hash identifier: JFy1mXQCXXwdet+tlw9BRsMym6BCceK8YYvlMoK7B+0=
Subject key identifier: B7:67:16:94:81:DA:74:18:15:98:41:03:CB:4C:0A:DF:03:92:56:83
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0193AD52C34972FAE58EC4FE4092AD793D23
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/t2cWlIHadBgVmEEDy0wK3wOSVoM.roa
Signing time: Mon 09 Dec 2024 21:28:22 +0000
ROA not before: Mon 09 Dec 2024 21:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51202
IP address blocks: 212.232.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 15:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ad:52:c3:49:72:fa:e5:8e:c4:fe:40:92:ad:79:3d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Dec 9 21:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b767169481da741815984103cb4c0adf03925683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:51:01:1e:92:50:4d:8f:47:70:8f:0f:24:
3d:29:61:c1:a9:3b:f1:06:20:a8:78:e4:f0:f3:a1:
cc:9f:56:4b:8f:16:56:9c:ea:e2:74:3b:c4:54:89:
6c:32:d8:17:f8:89:06:e4:d2:63:3b:06:37:78:93:
6f:20:fe:be:ee:62:b8:7c:5a:c1:3e:f5:ef:55:03:
45:13:f7:d4:5e:98:24:ea:60:75:72:b1:4b:c3:61:
bc:e6:40:c7:95:e0:d8:15:c8:a1:c0:f7:6f:95:74:
18:3d:9f:11:95:71:c8:7a:fb:bf:4e:42:a3:b9:f3:
d6:46:de:1a:ec:67:c1:63:51:5d:70:4d:ed:6e:a7:
1d:05:b4:04:be:3e:95:91:e8:ba:e8:22:2d:c3:d0:
0a:4d:4d:9c:6e:34:27:a3:d6:0e:2c:1f:99:e9:92:
8d:5c:24:b3:bf:41:d8:75:87:0a:40:eb:46:3f:a8:
3c:2c:e0:1b:d7:92:ba:d8:72:bd:72:56:dd:5c:bf:
a2:bf:f9:b3:5a:2d:a7:0f:4f:e5:1c:03:78:4a:0d:
38:91:cd:f1:c3:ae:41:2b:0d:e9:bc:b6:71:fe:31:
67:a6:0e:e8:8f:3d:aa:cd:d3:bb:f3:6a:1f:d8:2f:
0d:a9:d6:3a:5d:08:46:1d:91:56:a2:1f:98:89:ff:
4a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:67:16:94:81:DA:74:18:15:98:41:03:CB:4C:0A:DF:03:92:56:83
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/t2cWlIHadBgVmEEDy0wK3wOSVoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.232.18.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e9:19:2d:a1:5e:54:22:03:9b:92:9f:0d:27:a4:3d:24:3c:
f7:5a:df:30:fd:24:97:32:8f:ec:0c:69:70:c4:9a:ed:75:d0:
ab:31:7d:af:d1:35:f1:89:ba:85:fa:46:a8:3a:a1:3e:09:93:
7d:dd:85:da:1a:1c:8a:2d:09:f4:39:ad:e5:be:92:35:b7:48:
6b:42:55:46:22:0a:95:e2:f5:ad:0b:19:36:96:1c:c5:49:34:
2e:70:26:c6:80:93:c3:0c:c5:4d:89:fb:3e:d2:52:d9:cc:16:
83:70:f4:3c:ad:cc:19:90:3c:cf:70:30:9d:4d:1c:2c:81:b5:
3c:b3:8e:8b:29:55:67:e2:1c:34:3d:9a:18:66:56:a7:58:97:
df:93:74:59:d0:65:4c:1a:d2:6e:b2:b7:7d:eb:16:3e:fe:6e:
c4:2f:41:4d:76:f2:24:20:0c:61:23:b8:4a:d9:25:f3:7f:3f:
2c:d6:aa:a3:f6:12:f7:28:05:d9:a3:c8:95:7e:5b:01:7a:bd:
24:75:49:ea:a9:70:8d:3f:04:f1:f3:52:d3:31:14:b3:08:8d:
d8:86:70:6b:0e:7e:97:d5:59:eb:ed:d2:11:cf:df:b7:bc:8b:
a4:1f:bd:e7:69:bd:30:bb:fd:fc:2d:71:d8:80:cc:fd:64:fa:
46:09:12:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:29:02 2025 by rpki-client