Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JMKKuNal_SFFg50ptYEWSSW7BJI.roa
File: JMKKuNal_SFFg50ptYEWSSW7BJI.roa (raw, json)
Hash identifier: PmviSFEzoxzj4hXjfdsEHb8OPAEkQYxJTEDKYUmzWNI=
Subject key identifier: 24:C2:8A:B8:D6:A5:FD:21:45:83:9D:29:B5:81:16:49:25:BB:04:92
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193AB55BBE8D151D78304A5A4E659C017F9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JMKKuNal_SFFg50ptYEWSSW7BJI.roa
Signing time: Mon 09 Dec 2024 12:12:22 +0000
ROA not before: Mon 09 Dec 2024 12:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214979
IP address blocks: 31.56.3.0/24 maxlen: 24
31.56.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:55:bb:e8:d1:51:d7:83:04:a5:a4:e6:59:c0:17:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 9 12:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24c28ab8d6a5fd2145839d29b581164925bb0492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f8:da:91:00:d5:da:4d:c4:88:c4:31:7c:98:
41:09:d1:22:e7:55:82:8b:b2:72:9a:12:dc:e9:c2:
18:19:7d:8d:52:fd:e6:1f:ae:c3:16:2f:5c:c9:e7:
3a:5b:aa:f4:03:fc:c5:c0:25:94:de:25:04:5c:ab:
b6:97:a8:cc:ee:0d:73:57:66:2f:55:26:3d:22:89:
7c:6f:69:18:1f:5c:82:5f:40:1d:d2:a2:5d:5e:a8:
7d:a9:6a:7b:2e:33:50:3f:4b:ef:5e:cc:db:9e:df:
92:85:e8:3f:62:c0:38:4e:d4:90:5a:1f:50:ff:84:
47:0a:51:cf:83:b8:80:51:68:c2:4c:4d:c1:34:88:
04:bf:2f:a1:0e:dc:d1:ff:c0:94:3c:4c:e6:85:82:
e1:03:45:c8:e6:2c:1b:49:bc:06:63:11:e1:a3:22:
77:59:34:f7:50:9d:26:54:e7:f3:a8:e6:4b:ee:e3:
92:96:01:ca:d0:92:06:94:2d:a8:93:49:db:13:80:
c8:32:b3:4a:d2:1b:65:7b:91:8d:8a:0c:d1:48:e5:
e7:8a:b1:41:37:fe:29:c3:5a:11:95:8c:db:c8:3e:
70:8e:d8:da:cb:1e:43:68:f8:df:d8:74:53:97:8d:
fc:c4:9e:10:c8:15:3d:8d:07:ac:b8:b4:a8:5f:cb:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C2:8A:B8:D6:A5:FD:21:45:83:9D:29:B5:81:16:49:25:BB:04:92
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JMKKuNal_SFFg50ptYEWSSW7BJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.3.0/24
31.56.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:4f:3f:65:90:1e:64:c0:c7:5b:ba:03:25:c5:9f:cb:97:30:
ba:b4:6f:0f:c4:23:2d:2a:b4:e5:79:1a:12:2d:cc:ed:a5:3b:
cc:96:9e:60:af:c3:b8:e3:ae:70:1c:4f:a0:71:97:2e:52:a6:
2f:49:59:0e:c0:06:b7:e6:43:50:e8:a4:17:a1:0b:d8:be:d6:
b3:0b:9b:2a:ed:4b:44:31:d3:95:a1:e9:28:54:0f:e9:6c:d9:
cb:07:ff:99:59:76:1d:30:9c:16:de:bb:2f:5d:95:30:c0:cc:
15:6a:5e:85:48:45:19:d5:60:93:aa:37:c7:e9:0d:44:ef:ab:
2a:b1:dc:5d:1c:68:7f:10:d5:1b:e9:df:e5:cc:58:52:81:ee:
16:d8:84:75:4e:0f:ab:a7:b2:1b:c2:bc:64:b9:29:99:91:15:
63:f7:21:a9:9b:8c:1f:50:a6:66:34:32:64:94:dd:c5:6c:3b:
41:1c:52:ef:7f:ef:e2:95:70:bf:d3:e1:ef:34:04:f3:8b:90:
81:45:28:c8:1c:b4:39:77:22:84:1f:29:ca:22:96:95:8d:74:
00:db:6d:9f:9b:75:a5:72:02:86:08:0d:ad:68:6e:e0:82:c5:
71:d3:9f:e7:94:da:28:a2:70:91:08:b0:6b:03:63:4d:a1:9d:
46:1f:ef:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:41 2025 by rpki-client