Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1KnjBPDLtBk6PnIiA9tIF1dcYDI.roa
File: 1KnjBPDLtBk6PnIiA9tIF1dcYDI.roa (raw, json)
Hash identifier: Cg8S70+NIXUJo4XDws3YWibdUrU9JhaoK0GtDpZZkDo=
Subject key identifier: D4:A9:E3:04:F0:CB:B4:19:3A:3E:72:22:03:DB:48:17:57:5C:60:32
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0189F94D1F2A81E3D80A4B096A7B80AC6768
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1KnjBPDLtBk6PnIiA9tIF1dcYDI.roa
Signing time: Tue 15 Aug 2023 13:05:28 +0000
ROA not before: Tue 15 Aug 2023 13:05:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 185.68.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Nov 2023 13:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f9:4d:1f:2a:81:e3:d8:0a:4b:09:6a:7b:80:ac:67:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Aug 15 13:05:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4a9e304f0cbb4193a3e722203db4817575c6032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:82:0c:6f:69:1b:f2:65:23:cf:1b:b1:21:
d0:1c:ef:77:2b:4b:28:de:16:f6:fc:cb:79:f1:af:
93:47:5c:1c:cd:f8:e7:c8:21:90:39:37:b4:7c:c5:
51:0e:c8:20:37:8b:d2:ff:b9:c3:f6:76:89:bd:56:
67:14:22:05:57:40:b3:13:07:0d:d6:e3:d6:3b:18:
76:09:65:7b:73:f0:8d:ba:ac:99:9c:1f:19:55:d6:
fc:ff:67:1b:66:30:62:e4:1d:0b:8e:c5:53:cd:4b:
a0:b7:4f:43:2f:07:64:e7:0b:fe:b5:6d:32:f0:84:
1f:b6:46:07:41:b8:59:f8:0a:3c:3e:bc:fb:86:3b:
19:2a:78:ff:cf:36:5f:db:b3:ba:8e:3f:b9:35:43:
2a:db:ac:48:3d:42:84:64:c6:ff:60:db:b7:f9:23:
ff:cf:c6:14:55:e5:9f:54:49:3f:2a:cb:f9:5c:a3:
09:d3:1d:59:01:29:94:d2:19:d2:7a:d9:0b:84:0e:
9e:0e:cb:cd:e9:ed:43:1d:6b:e5:3e:41:4d:8a:9e:
9f:8f:af:a5:fc:e7:3f:57:37:f8:06:96:d5:e5:4f:
81:e3:64:26:21:47:3c:08:5c:d2:95:94:dd:3c:dc:
a2:9e:9a:8d:e8:ab:ba:e8:23:e9:86:0d:ce:4f:49:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A9:E3:04:F0:CB:B4:19:3A:3E:72:22:03:DB:48:17:57:5C:60:32
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1KnjBPDLtBk6PnIiA9tIF1dcYDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.22.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:6d:eb:4c:60:1d:f6:19:7d:0e:6b:8d:b0:fd:d1:a8:2a:e4:
c1:bc:82:5b:6d:12:26:55:b9:79:a1:6d:34:a1:f1:24:96:3a:
c4:22:f4:6f:7d:97:86:cf:fa:a1:7d:00:da:4c:b3:e4:fe:8f:
35:f7:d0:ad:ac:8a:4e:5a:50:4b:fe:be:cf:ce:be:ab:02:7a:
21:af:46:50:4f:a8:80:86:82:48:04:8f:38:c4:1a:28:88:e7:
b6:01:ff:81:fa:20:ed:2f:9d:66:2f:ff:ab:ba:9d:40:a3:7a:
70:ce:37:cc:0e:58:c8:9a:24:82:ca:ca:e1:8b:d7:ae:0c:de:
5a:8a:b9:80:31:43:b9:32:77:e3:f8:f3:99:65:dc:aa:2c:94:
21:7e:42:94:2d:8f:ae:87:3b:c6:1c:6c:44:84:2d:b2:56:e8:
9c:90:7b:a2:9e:50:8b:3b:e8:eb:f0:69:ee:66:83:dd:98:f9:
bd:44:b2:c0:88:58:db:04:04:25:3a:b6:6c:42:58:c4:8a:cb:
c3:7b:2b:dc:1e:e5:c4:83:c7:a7:74:c1:4c:71:34:28:04:09:
ab:7c:bd:c4:12:5f:db:16:20:da:9b:5f:ca:61:48:69:59:19:
d2:f2:b5:ba:33:16:29:df:e2:2f:d9:a7:57:af:ab:be:df:3a:
2d:e9:70:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org