Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/JL_1gCK6fPUd84U8QQ4Bwaw6lIQ.roa
File: JL_1gCK6fPUd84U8QQ4Bwaw6lIQ.roa (raw, json)
Hash identifier: znYCDz3YuUXL36ikVrrog+9DmohpKfdyUgsZiKs/Ybs=
Subject key identifier: 24:BF:F5:80:22:BA:7C:F5:1D:F3:85:3C:41:0E:01:C1:AC:3A:94:84
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 019035AF3B391C56D77E8BDE597EBB559F97
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/JL_1gCK6fPUd84U8QQ4Bwaw6lIQ.roa
Signing time: Thu 20 Jun 2024 12:46:34 +0000
ROA not before: Thu 20 Jun 2024 12:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.42.131.0/24 maxlen: 24
31.42.144.0/24 maxlen: 24
31.42.145.0/24 maxlen: 24
31.42.153.0/24 maxlen: 24
185.206.56.0/24 maxlen: 24
185.206.57.0/24 maxlen: 24
185.206.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:af:3b:39:1c:56:d7:7e:8b:de:59:7e:bb:55:9f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Jun 20 12:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24bff58022ba7cf51df3853c410e01c1ac3a9484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:a7:d1:d3:70:92:8d:91:24:c9:20:42:c6:
86:87:36:d1:18:40:fe:56:a3:00:9f:28:08:0b:fb:
c1:0d:9c:ae:35:ae:41:73:c4:85:8e:92:2c:ff:71:
83:0b:aa:b9:2d:09:34:d3:72:fc:c0:c6:a5:d6:b7:
3d:7c:bd:bb:0d:e9:ce:7b:4d:47:cf:4e:6c:2b:bd:
c9:94:ed:61:f4:e6:b3:5a:14:7c:9a:8b:05:ba:b7:
22:c6:fa:76:81:44:cc:57:9c:80:c4:34:6a:60:e0:
39:16:ee:27:ed:2a:34:a1:7b:86:00:23:3a:f0:58:
56:d1:74:de:f8:6d:70:c1:73:05:33:99:0c:43:d3:
85:94:89:ff:77:88:c8:78:db:40:ab:69:92:db:bf:
ee:46:b1:6e:59:c9:bb:5a:a3:eb:df:3d:59:e6:42:
a7:32:b0:46:26:5a:51:8c:b3:29:2f:2e:d7:1e:33:
db:3e:25:7f:3a:e0:f3:07:51:d0:f5:ba:e2:33:88:
29:2e:94:2b:52:04:39:74:ef:f0:9a:f3:8c:82:eb:
eb:4e:c8:f6:20:e4:4c:5c:cd:fd:ea:cd:f3:f2:41:
b8:dc:69:d1:76:36:15:f7:7e:4a:e9:bc:62:88:20:
09:7f:8b:d2:27:cf:9a:01:92:fd:b7:f7:a6:41:e5:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BF:F5:80:22:BA:7C:F5:1D:F3:85:3C:41:0E:01:C1:AC:3A:94:84
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/JL_1gCK6fPUd84U8QQ4Bwaw6lIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.131.0/24
31.42.144.0/23
31.42.153.0/24
185.206.56.0/23
185.206.59.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c6:bd:7d:2d:66:15:c7:91:60:8d:b2:d2:14:3b:00:b2:7c:
58:65:a2:f4:83:88:21:f8:fb:96:a2:56:2c:a1:cc:dc:ca:54:
49:db:f4:12:8f:f7:5c:8e:77:ef:d9:ae:41:f9:c5:8d:9d:0e:
33:8e:5f:91:99:24:4a:9b:fc:28:70:1f:cf:63:a9:2d:b9:e8:
ae:63:31:e4:2f:85:92:99:ca:4d:fe:76:44:2c:1d:cc:f8:1f:
e5:25:9c:25:fd:95:a7:29:4c:2c:5c:b1:5d:41:e0:04:8b:64:
e7:6d:4f:37:0a:d4:56:c5:c0:f3:84:e9:b3:83:b9:ce:6d:9e:
2f:04:b8:0d:40:5c:dc:20:4d:f7:3b:62:46:61:d7:3d:43:e1:
f5:fd:34:a6:d0:cd:65:85:6c:77:a5:13:21:c2:1a:04:b6:00:
c4:08:89:3c:8c:03:a1:3e:b7:a7:25:6f:d5:67:0c:69:64:92:
3b:16:3a:d5:d1:fa:30:13:43:4f:4b:8a:09:fa:ff:cd:55:90:
55:87:73:b2:b4:74:12:94:32:1b:c0:05:5c:41:45:b5:c3:ca:
e0:9c:fb:77:4f:ef:39:ae:f1:d1:4b:61:57:da:bd:77:9f:8e:
d6:00:48:76:35:ff:d3:b0:1b:a4:6a:54:48:d2:40:78:4e:78:
a2:ee:ea:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 12:35:04 2024 by rpki-client on console-ams.rpki-client.org