Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cb6995-d591-487d-a48e-bc7ce6d0ea97/1/hj_bia9sMW7x63-2dCjVqtXeThA.roa
File: hj_bia9sMW7x63-2dCjVqtXeThA.roa (raw, json)
Hash identifier: NZmfQwKh6DZZDddpBwRHe5nDalevyJbExhiwuEBMRzM=
Subject key identifier: 86:3F:DB:89:AF:6C:31:6E:F1:EB:7F:B6:74:28:D5:AA:D5:DE:4E:10
Certificate issuer: /CN=39bf0ff962f0400dfc34ed2aa519b247d56a5a2a
Certificate serial: 018571FA33063C922955CB09DD98291B9782
Authority key identifier: 39:BF:0F:F9:62:F0:40:0D:FC:34:ED:2A:A5:19:B2:47:D5:6A:5A:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ob8P-WLwQA38NO0qpRmyR9VqWio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cb6995-d591-487d-a48e-bc7ce6d0ea97/1/hj_bia9sMW7x63-2dCjVqtXeThA.roa
Signing time: Mon 02 Jan 2023 10:15:00 +0000
ROA not before: Mon 02 Jan 2023 10:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 95.130.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:33:06:3c:92:29:55:cb:09:dd:98:29:1b:97:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39bf0ff962f0400dfc34ed2aa519b247d56a5a2a
Validity
Not Before: Jan 2 10:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=863fdb89af6c316ef1eb7fb67428d5aad5de4e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:2b:db:2e:b0:e1:28:84:0b:fd:8f:80:15:
d1:2b:e2:01:29:a3:c2:9e:26:10:88:7f:c1:49:18:
92:a2:b4:b3:b2:04:24:88:92:8a:74:bc:d6:91:ea:
5c:b5:b8:96:de:c6:e4:b4:d0:91:08:31:7e:a7:6f:
cd:02:0b:f3:93:50:d0:36:66:46:23:ec:7f:f9:9e:
d2:d3:61:59:ed:01:ab:29:c7:d0:7a:7c:ab:92:32:
f6:6e:fa:ca:03:15:33:8d:9b:f2:0e:29:75:e5:a3:
ee:d1:08:fc:66:f8:0f:a8:f1:c6:63:08:56:75:91:
de:ae:53:92:79:38:8e:a3:ef:52:ea:bf:4d:45:7a:
78:60:be:06:43:f4:47:5f:32:f6:38:a2:23:e8:d4:
78:f5:18:b2:a4:4b:36:3b:5d:2e:9a:fc:e5:42:b4:
5a:c7:5d:30:ab:40:18:d5:5b:17:36:71:6a:0c:df:
cf:6d:b5:d9:86:22:bb:8b:1d:bb:af:8d:1a:0b:39:
53:ef:c2:60:94:51:38:bb:f8:3a:e3:94:d0:9c:5f:
47:c6:08:7b:43:84:2d:e9:f0:82:f0:4c:21:21:b0:
ff:a5:bc:a6:bd:06:52:5a:e2:67:3b:25:28:eb:2c:
f3:ba:a1:90:2f:21:a9:75:9b:28:6f:13:e6:02:b4:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3F:DB:89:AF:6C:31:6E:F1:EB:7F:B6:74:28:D5:AA:D5:DE:4E:10
X509v3 Authority Key Identifier:
keyid:39:BF:0F:F9:62:F0:40:0D:FC:34:ED:2A:A5:19:B2:47:D5:6A:5A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ob8P-WLwQA38NO0qpRmyR9VqWio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cb6995-d591-487d-a48e-bc7ce6d0ea97/1/hj_bia9sMW7x63-2dCjVqtXeThA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cb6995-d591-487d-a48e-bc7ce6d0ea97/1/Ob8P-WLwQA38NO0qpRmyR9VqWio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.228.0/24
Signature Algorithm: sha256WithRSAEncryption
93:67:50:cb:2c:22:d7:dc:f3:c9:83:5b:2a:99:bb:22:c9:70:
a1:00:58:e4:0c:66:1d:64:ab:79:c3:9a:d2:0e:55:32:09:f0:
34:e3:49:ab:23:45:ab:3f:c8:1d:6d:cc:f9:7c:40:d0:a6:64:
ef:84:8d:27:ec:40:de:f2:87:c1:64:8d:55:f7:07:db:cc:d1:
ca:75:71:ee:fc:4c:77:d0:be:ea:8a:60:66:80:0d:f6:26:5d:
ef:b1:d4:eb:ab:0d:67:eb:f8:b1:b5:8e:fc:f2:5d:01:ec:1f:
5b:fd:ca:e3:08:06:d0:5d:c6:35:7c:8a:36:4a:68:a9:58:42:
97:e6:54:21:12:fd:11:6e:0f:01:92:17:a8:10:17:c8:ba:ed:
7a:80:93:49:7b:ef:fe:0b:07:45:51:4c:a9:92:84:be:d5:be:
00:39:44:07:19:73:44:4d:a3:d8:23:b9:f1:7e:91:cb:e1:2c:
c6:1d:fe:95:72:c4:0f:57:37:ce:25:7f:60:dd:8c:26:23:6f:
ec:e7:01:60:96:fc:3a:08:07:90:8a:81:90:ad:ba:a0:02:5a:
9a:46:53:3a:e2:87:3a:98:7c:8b:8c:3a:72:3d:f5:bb:28:56:
8a:a9:ce:43:bf:b5:b9:a7:9d:f4:a5:73:8c:10:3c:45:47:a6:
dc:b1:a6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:51 2023 by rpki-client on console-fra.rpki-client.org