Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/JRto1SpfOuQj6CKvlY4uvGJlmII.roa
File: JRto1SpfOuQj6CKvlY4uvGJlmII.roa (raw, json)
Hash identifier: hdeALEo8DdHiI5yTOpRIUivE+ZNA7VdIwMV1gQZxJP0=
Subject key identifier: 25:1B:68:D5:2A:5F:3A:E4:23:E8:22:AF:95:8E:2E:BC:62:65:98:82
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 018FC8817629BF89BD78EF1065221B6D950F
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/JRto1SpfOuQj6CKvlY4uvGJlmII.roa
Signing time: Thu 30 May 2024 07:57:58 +0000
ROA not before: Thu 30 May 2024 07:57:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44843
IP address blocks: 31.207.64.0/20 maxlen: 20
31.207.66.0/24 maxlen: 24
31.207.67.0/24 maxlen: 24
31.207.70.0/24 maxlen: 24
152.89.134.0/24 maxlen: 24
178.236.128.0/21 maxlen: 21
178.236.128.0/24 maxlen: 24
178.236.129.0/24 maxlen: 24
178.236.130.0/24 maxlen: 24
178.236.131.0/24 maxlen: 24
178.236.132.0/24 maxlen: 24
178.236.133.0/24 maxlen: 24
178.236.134.0/24 maxlen: 24
178.236.135.0/24 maxlen: 24
2a02:1710:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Nov 2024 09:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c8:81:76:29:bf:89:bd:78:ef:10:65:22:1b:6d:95:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: May 30 07:57:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=251b68d52a5f3ae423e822af958e2ebc62659882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:57:1b:27:95:24:66:2b:92:b0:8f:f8:e0:
6a:b1:1b:ab:76:ab:c8:8a:80:95:22:39:bf:e3:8c:
06:7c:a2:b1:71:bc:d3:50:b0:d9:d2:9b:56:b7:3e:
be:8f:92:d5:7f:2a:f5:05:26:e0:55:3e:54:ce:00:
f7:cd:b2:4e:61:9c:51:f4:68:71:83:61:27:2a:a5:
4d:c9:fd:44:12:fa:7d:01:fa:be:0b:b9:1f:a8:f0:
38:ee:ac:f5:2d:b6:75:c9:97:1e:0a:51:68:e4:f5:
a8:81:d1:7b:11:ca:6d:dc:83:35:c1:65:09:50:d2:
86:c3:23:73:7b:59:0b:f9:3b:e3:b9:ba:7f:85:af:
14:df:d1:7a:48:ea:c6:16:74:5c:6b:93:5c:19:9c:
0c:1d:1c:86:02:7c:ce:2b:52:97:48:d0:9c:60:0f:
3a:82:ca:6e:3f:65:4c:fa:d5:63:e1:87:2d:ae:33:
56:c7:f1:e1:08:c3:13:92:9b:03:9d:66:0f:93:a9:
1d:92:e2:1c:0f:de:0e:78:2d:f6:c4:fb:2c:24:ab:
c4:05:57:fb:3b:ee:b6:e6:e6:4d:e3:7e:1e:12:d7:
7d:e5:fc:16:17:e9:44:3f:4a:52:36:9a:f9:27:c1:
e3:c7:a2:84:64:3e:a9:96:8c:77:c6:45:6c:a7:4a:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1B:68:D5:2A:5F:3A:E4:23:E8:22:AF:95:8E:2E:BC:62:65:98:82
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/JRto1SpfOuQj6CKvlY4uvGJlmII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.64.0/20
152.89.134.0/24
178.236.128.0/21
IPv6:
2a02:1710:4::/48
Signature Algorithm: sha256WithRSAEncryption
71:e1:19:4c:29:cd:89:7d:00:25:8c:4d:1e:9b:3d:59:f2:b5:
d1:4d:d5:05:f6:3b:8a:ba:93:d2:b2:14:1a:b4:67:ea:3c:19:
1d:5c:6e:e0:e6:63:64:46:fb:5a:bf:82:cc:37:ef:cb:e1:a4:
7e:2a:e4:87:20:61:64:84:71:bc:89:83:b2:71:9b:fb:2d:5d:
22:d7:7c:5e:34:ac:32:dd:8c:f6:fb:a5:21:ea:2a:9c:d0:a0:
a1:78:89:87:cf:32:cf:11:a2:b8:35:1f:c0:61:e8:17:39:a0:
17:5d:59:99:11:25:eb:df:18:e2:6c:0a:64:3f:9a:38:12:8f:
e5:27:76:48:87:10:7f:27:0a:f5:c5:68:22:68:84:4d:b3:f6:
c0:27:3e:5b:c0:69:11:e8:3d:ae:de:46:de:4e:55:e0:cc:e4:
f6:5b:3b:e1:fd:1e:fa:63:37:41:ba:4f:5e:4d:d1:aa:50:8b:
d2:6c:9b:bb:a3:4f:7e:1e:98:fc:f9:fc:2f:68:7d:f9:4d:68:
81:82:a5:77:be:2b:2a:03:5e:ac:8b:53:7f:62:17:06:2c:6d:
a5:3c:b9:c3:27:03:39:7f:36:5e:8f:bf:c5:ef:90:0a:d1:48:
a2:23:be:94:07:f9:76:7c:29:10:50:42:bb:42:e9:0d:7e:01:
17:8c:a2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:00:51 2024 by rpki-client on console-fra.rpki-client.org