Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/z_Jpca__MD43Hvf8vfIt25oCyfw.roa
File: z_Jpca__MD43Hvf8vfIt25oCyfw.roa (raw, json)
Hash identifier: urkpWFOR3bAno6OP8/VYOUkSrfo9qxOGS+ovegDxMtQ=
Subject key identifier: CF:F2:69:71:AF:FF:30:3E:37:1E:F7:FC:BD:F2:2D:DB:9A:02:C9:FC
Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial: 01856F54754A6500ADBF9BBA4C018A4679E4
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/z_Jpca__MD43Hvf8vfIt25oCyfw.roa
Signing time: Sun 01 Jan 2023 21:54:44 +0000
ROA not before: Sun 01 Jan 2023 21:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196881
IP address blocks: 185.135.36.0/24 maxlen: 24
185.135.36.0/22 maxlen: 22
185.135.37.0/24 maxlen: 24
185.135.38.0/24 maxlen: 24
93.190.112.0/24 maxlen: 24
93.190.113.0/24 maxlen: 24
93.190.114.0/24 maxlen: 24
93.190.115.0/24 maxlen: 24
93.190.116.0/24 maxlen: 24
93.190.117.0/24 maxlen: 24
93.190.118.0/24 maxlen: 24
93.190.112.0/21 maxlen: 21
93.190.119.0/24 maxlen: 24
185.135.39.0/24 maxlen: 24
2a05:5b00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:75:4a:65:00:ad:bf:9b:ba:4c:01:8a:46:79:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Validity
Not Before: Jan 1 21:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cff26971afff303e371ef7fcbdf22ddb9a02c9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:90:87:be:4b:cd:11:ce:81:c8:18:a1:b1:
b6:4b:3b:09:7f:e2:f3:e6:c9:76:3f:3b:9e:e5:24:
14:5f:28:91:98:7b:b7:81:d8:3c:1b:56:ae:fe:01:
e3:00:1a:64:19:5b:a6:bd:17:40:5a:6b:97:26:6e:
d1:62:9a:e5:a5:a4:8d:65:92:16:5b:f6:d0:f8:f3:
06:43:ae:5a:09:2a:30:bd:89:bd:46:be:71:8d:e9:
0c:5a:c7:4d:10:06:55:ac:ee:9d:2c:c3:58:d9:74:
e9:8e:bc:47:89:b6:40:46:43:d3:ce:fb:ce:02:44:
8b:97:cf:fa:c9:73:07:ec:8c:bd:ba:ee:3e:38:03:
d9:9b:af:62:37:ec:44:00:04:fd:d7:31:67:2a:3b:
45:41:e0:ff:d3:cb:e5:06:f7:06:78:55:79:d3:8e:
13:e3:1f:5e:2b:3b:42:55:6b:1d:38:34:c9:69:f1:
d4:8e:94:48:cd:2d:7e:15:62:fc:33:ac:17:fb:c6:
6a:70:83:eb:92:61:4b:31:47:6b:d4:fd:ce:27:1a:
1f:77:00:cd:5c:3a:10:22:62:2c:a2:bf:51:6f:4e:
9f:67:b4:2a:29:e2:4e:09:ab:d2:9c:44:21:17:23:
88:40:e7:63:a8:bf:5a:12:83:19:5d:cb:78:40:89:
af:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F2:69:71:AF:FF:30:3E:37:1E:F7:FC:BD:F2:2D:DB:9A:02:C9:FC
X509v3 Authority Key Identifier:
keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/z_Jpca__MD43Hvf8vfIt25oCyfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.112.0/21
185.135.36.0/22
IPv6:
2a05:5b00::/29
Signature Algorithm: sha256WithRSAEncryption
06:3a:8e:85:11:3a:0a:4b:ea:cd:63:cd:a0:c0:5e:60:29:ec:
d1:08:c3:35:82:b0:97:da:db:4b:86:1c:4e:b8:02:f3:c0:81:
a4:dd:7c:84:15:a0:3e:85:17:74:95:43:9f:f5:ed:a8:74:55:
a1:77:0f:dd:01:bd:96:13:05:12:aa:09:f0:aa:ff:14:a1:0e:
27:3d:a0:1a:70:a8:6f:da:b8:95:23:a7:26:8a:12:df:9f:f6:
a0:9d:88:d5:62:85:ae:46:ae:d8:87:f9:a5:c8:af:30:3f:da:
a3:b9:56:ec:c2:20:7d:39:50:98:9a:88:10:7e:4d:60:67:5e:
36:8a:ca:07:c8:23:7c:eb:75:76:f9:12:64:c9:a3:26:b6:23:
bb:d9:91:7e:ef:0c:93:27:11:43:e7:bf:27:2f:44:8d:a5:ad:
97:57:fb:2c:47:d4:61:65:49:95:6c:90:51:56:a5:09:64:f8:
42:b5:bd:cb:e9:02:6a:64:54:fd:6d:ca:f0:d9:bb:f5:de:ef:
3e:2e:5a:1d:4a:f8:3a:e9:e8:3a:39:cf:25:0b:b9:f5:dd:a1:
98:92:71:50:6d:82:5e:f9:f5:67:13:ec:55:54:7e:07:49:d4:
dc:f3:35:a1:dc:38:dd:0e:25:a3:18:2a:f0:f7:07:65:95:a3:
4b:a1:b8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:01 2024 by rpki-client on console-fra.rpki-client.org