Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JBKGNFzA7-jFbL9oBycoycOolf4.roa
File: JBKGNFzA7-jFbL9oBycoycOolf4.roa (raw, json)
Hash identifier: 6HYbOOi/M3h8yo9MjeRuKxg4uGZy4viIbAehb5QX7L0=
Subject key identifier: 24:12:86:34:5C:C0:EF:E8:C5:6C:BF:68:07:27:28:C9:C3:A8:95:FE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019296091AD1E3D7AFC40BCDC51B80683186
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JBKGNFzA7-jFbL9oBycoycOolf4.roa
Signing time: Wed 16 Oct 2024 15:53:52 +0000
ROA not before: Wed 16 Oct 2024 15:53:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215304
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.120.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 15:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:96:09:1a:d1:e3:d7:af:c4:0b:cd:c5:1b:80:68:31:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 16 15:53:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=241286345cc0efe8c56cbf68072728c9c3a895fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:0b:72:f5:3a:24:38:67:05:92:d9:1c:e6:
5c:6e:16:2c:cd:45:73:cb:f6:fb:25:2e:f4:9a:6f:
ee:60:88:e7:32:4d:26:f1:f1:f2:59:7b:2a:c3:7d:
42:9f:b1:98:0c:cc:74:de:60:7f:c9:e6:cf:c1:11:
c5:6f:1b:82:dc:66:3f:ef:38:9c:28:81:ae:cb:a5:
4f:10:ad:b0:6f:b7:2d:53:71:d8:36:f4:a3:c7:61:
6a:2c:79:3e:f9:b3:8e:4a:04:27:3d:fb:37:c3:c0:
9d:5c:65:39:5e:0f:a0:84:9f:93:60:5f:64:60:5a:
34:b5:fd:92:8d:af:12:90:03:02:8b:a3:d7:c4:01:
fc:31:50:c3:cc:3f:f7:bf:50:14:97:bf:ca:31:f8:
78:91:1e:91:25:ef:55:88:b9:99:38:5f:55:01:d8:
41:d8:dd:cb:c0:a8:00:dd:47:82:91:33:f7:8b:03:
06:9a:c3:39:b8:de:56:41:54:50:24:70:bd:b2:19:
5f:e6:3f:d1:73:6a:d7:1a:0c:40:31:58:b0:88:68:
a0:14:b3:69:4b:60:2c:74:1c:8d:c8:d0:a5:d8:79:
74:c4:13:e1:59:45:9e:89:df:01:7d:80:44:09:a5:
fc:6b:44:bd:01:29:d4:28:4f:16:8b:0d:f1:2c:01:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:12:86:34:5C:C0:EF:E8:C5:6C:BF:68:07:27:28:C9:C3:A8:95:FE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JBKGNFzA7-jFbL9oBycoycOolf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.88.0/24
31.56.120.0/22
31.56.126.0/24
31.57.104.0/21
31.57.132.0/23
Signature Algorithm: sha256WithRSAEncryption
61:36:06:c2:2a:e5:ec:c6:4d:67:75:e7:2f:42:3a:8a:0a:19:
2f:89:e9:84:a1:69:b5:0a:69:99:cb:d1:0a:ac:5a:0d:93:9d:
85:8f:38:1a:25:8d:02:d5:e7:20:3c:f2:21:4b:46:e9:ef:b0:
1f:45:f3:eb:85:da:80:1a:81:6b:01:ca:97:c7:a5:62:6e:d5:
7d:97:2d:b8:6c:fd:1a:d0:24:67:8e:bb:91:43:30:5f:da:8d:
df:cb:ed:8d:fc:47:a2:1a:bd:e8:94:b8:91:ae:3b:74:b8:a4:
f8:8c:57:5e:75:a7:66:08:d9:00:27:2b:fb:79:51:6a:b6:ea:
36:ac:d0:17:66:47:6f:b5:38:c1:c2:e1:fa:18:bd:cb:d3:a0:
c6:03:e9:41:1a:db:27:1c:d9:ec:06:49:30:fc:d1:78:c0:43:
ff:f9:4d:e0:06:cb:18:db:89:e8:7f:b8:00:75:c6:71:b5:bf:
fc:fa:22:6f:74:23:42:1a:7e:e5:dd:4a:99:d5:19:95:22:01:
ef:91:35:d4:bb:39:99:05:ba:e3:d6:a7:9b:35:e8:9d:5e:ca:
82:4c:2b:6a:aa:bb:ba:b6:c0:eb:75:96:68:d4:a4:f2:1a:61:
1b:d6:9e:17:68:4c:9d:bb:a7:93:f4:89:8c:ea:78:e7:53:cb:
35:e2:29:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 19:11:59 2024 by rpki-client on console-ams.rpki-client.org