Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/hja_RkMI1QYLtejaYpsuCTiYImI.roa
File: hja_RkMI1QYLtejaYpsuCTiYImI.roa (raw, json)
Hash identifier: NwlRgkedKzct+TB8Ohw+HmFHYSRGLWOPxU1RUYNWNEY=
Subject key identifier: 86:36:BF:46:43:08:D5:06:0B:B5:E8:DA:62:9B:2E:09:38:98:22:62
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01896F4BE9597DF791A8406F1A1B94B9C923
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/hja_RkMI1QYLtejaYpsuCTiYImI.roa
Signing time: Wed 19 Jul 2023 17:56:33 +0000
ROA not before: Wed 19 Jul 2023 17:56:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147291
IP address blocks: 95.214.172.0/24 maxlen: 24
95.214.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 01:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:4b:e9:59:7d:f7:91:a8:40:6f:1a:1b:94:b9:c9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jul 19 17:56:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8636bf464308d5060bb5e8da629b2e0938982262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:78:c5:e6:fd:4f:df:e9:d6:a6:33:26:d0:
33:0f:00:34:77:63:4f:be:65:46:c4:2c:82:5d:df:
95:3e:f5:cf:d9:2d:7d:16:6c:c4:23:e8:10:2e:ec:
61:88:d4:af:c0:59:ce:d8:aa:31:33:e3:b8:8e:a7:
d8:7c:2d:88:38:91:d9:38:21:3a:e0:d3:cd:81:85:
89:3e:54:fb:fb:b6:45:01:17:56:5d:77:3c:a6:54:
0f:d8:7d:c5:66:51:72:26:7d:43:68:fd:b2:e3:e5:
4c:34:52:a0:fe:18:aa:c2:6c:fd:e5:a6:12:a5:35:
8e:d4:16:8b:24:6d:78:47:dc:33:71:59:1d:25:7b:
9e:a4:28:64:f8:b5:ef:85:6c:bd:dd:9e:42:74:a1:
8e:e8:62:99:40:ec:d0:db:1e:e3:12:2a:de:50:bd:
25:29:af:91:ec:89:37:3a:4e:79:df:f8:c1:a1:e8:
51:f4:70:74:87:44:88:35:7d:78:0a:f9:a0:3e:b8:
ec:b2:77:0c:1a:bb:b5:47:a2:18:37:56:3e:bf:d5:
97:46:b3:b5:05:21:41:ae:1c:23:cc:4e:4b:ab:e3:
16:9a:1b:c0:38:f7:ac:fa:67:17:72:89:d9:71:e5:
62:fc:4d:56:22:dd:f2:34:df:83:5a:26:b1:a6:70:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:36:BF:46:43:08:D5:06:0B:B5:E8:DA:62:9B:2E:09:38:98:22:62
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/hja_RkMI1QYLtejaYpsuCTiYImI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.172.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:2a:d8:0b:80:71:39:c0:cd:b9:a4:c4:51:3f:d4:88:b7:4a:
4e:60:a3:92:ec:71:75:1a:d7:b4:7f:69:ef:f4:8b:bd:13:af:
d1:e8:5a:59:f4:40:d4:ef:34:c2:90:ac:b9:e7:4c:02:42:09:
5f:5b:15:17:44:e4:ee:3b:ba:3e:91:3a:81:14:62:09:e8:98:
40:a4:9d:e4:ff:fb:09:fb:11:ab:88:fd:46:c6:d9:3b:57:51:
58:ae:1f:42:b4:28:21:ef:e4:b3:bb:7a:a4:60:fd:76:a6:a1:
1d:c4:60:8b:04:16:4c:19:d5:95:0b:99:df:b9:77:41:c7:73:
18:e9:03:37:9d:20:47:ab:be:35:97:54:13:cc:2a:7d:c8:66:
45:3a:86:b4:5d:88:27:49:ec:46:82:f0:48:c0:d5:da:fb:01:
90:c0:45:79:00:5b:28:40:f5:ea:74:81:20:b3:4b:28:c8:63:
84:c2:65:3c:00:ec:f7:be:6d:0d:e0:c1:87:f6:d8:e0:cb:26:
c0:df:1f:92:b1:0b:93:b3:73:b0:60:38:86:03:88:6b:6c:bb:
b9:bd:a0:19:15:1f:5f:88:03:12:4d:c4:c5:2d:56:8e:df:97:
34:23:fe:84:20:ee:02:2a:83:d2:4b:1e:d9:a8:c5:b4:e9:f6:
b2:ae:bb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:46 2024 by rpki-client on console-fra.rpki-client.org