Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e203233393631.roa
File: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (raw, json)
Hash identifier: uEYjBirJT+i0hlQMTypSSmmJ9f6MpXLy/c4beoodP6A=
Subject key identifier: 80:1A:F3:DE:0F:51:FC:3C:6F:CC:AC:F7:A1:28:C3:C7:C2:9D:83:C5
Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial: 78A7DF878A4B75A6C4E550AE8ABE8A4A431F7816
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e203233393631.roa
Signing time: Sun 03 Nov 2024 22:30:25 +0000
ROA not before: Sun 03 Nov 2024 22:25:25 +0000
ROA not after: Sun 02 Nov 2025 22:30:25 +0000
asID: 23961
IP address blocks: 2407:b9c0::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a7:df:87:8a:4b:75:a6:c4:e5:50:ae:8a:be:8a:4a:43:1f:78:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121C330000
Validity
Not Before: Nov 3 22:25:25 2024 GMT
Not After : Nov 2 22:30:25 2025 GMT
Subject: CN=801AF3DE0F51FC3C6FCCACF7A128C3C7C29D83C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:2e:ab:98:f1:99:b8:42:6e:3a:85:ab:2c:
e4:02:5b:1c:08:6d:ff:22:5a:ae:fd:6d:7e:94:fc:
7d:76:81:d9:cf:b1:b2:f4:57:fb:44:45:d1:8a:ba:
b4:f4:18:a6:2f:af:89:bb:16:ab:1a:a4:cc:b4:d7:
de:66:5e:02:16:ee:f4:e4:8a:9a:58:29:90:01:f8:
24:ea:2d:1d:82:4a:c4:28:66:dd:5e:71:83:3d:0f:
0e:31:3d:79:3a:37:73:33:aa:35:6c:e7:37:a2:a6:
6a:79:c4:6c:cb:4b:be:af:ca:db:36:cd:62:95:7b:
97:29:81:00:d0:24:53:be:84:7d:b0:7a:f7:ef:87:
85:45:e8:b1:f7:b1:f5:4e:9c:3e:86:aa:0a:ce:e9:
33:5b:74:72:23:bc:cd:ad:31:9c:e3:04:5e:bc:db:
b1:b9:22:41:43:ab:ad:6e:ea:6d:5e:53:16:bb:62:
be:2d:4f:96:04:13:27:ed:94:b7:d6:25:21:b9:e8:
f0:a9:86:53:9f:29:ec:eb:4f:9d:0a:00:d1:35:31:
42:66:e7:5b:74:2c:62:e1:62:fc:d1:14:97:38:f7:
aa:e5:a8:54:a5:d5:33:e8:78:1f:55:a2:af:ae:80:
65:35:cb:9e:19:cd:83:5c:66:6c:94:02:8a:25:33:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1A:F3:DE:0F:51:FC:3C:6F:CC:AC:F7:A1:28:C3:C7:C2:9D:83:C5
X509v3 Authority Key Identifier:
keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e203233393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:b9c0::/32
Signature Algorithm: sha256WithRSAEncryption
7a:36:f8:40:11:92:a7:23:ac:5e:ac:c1:22:61:2b:5c:84:e2:
4e:2f:1f:43:8a:0a:dd:f0:98:d1:c7:09:63:60:54:6b:c4:0a:
1a:34:11:b8:9d:e6:b6:74:89:b2:94:e8:d4:e2:e8:0e:37:b0:
70:87:99:29:37:be:06:23:2f:41:a6:a8:5d:28:44:a1:af:ce:
17:31:6f:49:5f:41:33:fb:91:8b:df:95:17:b4:c5:a3:26:cf:
0e:40:ce:5f:20:18:d8:a8:fe:f9:fd:b2:7d:07:36:b3:db:b7:
aa:54:80:40:7d:d0:d2:8a:92:88:d9:59:d1:b1:2e:bf:0f:5d:
bd:f3:34:60:23:fc:c1:22:ef:20:26:74:19:10:8f:90:53:d9:
a7:bb:ef:8e:a2:3d:1d:a4:8a:69:ed:11:51:cb:eb:9f:d2:52:
03:d6:ab:0c:1a:ac:35:41:7e:08:67:06:84:eb:ff:34:61:25:
30:ae:df:1a:a3:7b:f9:e6:1d:0e:79:7f:53:78:6e:7a:72:19:
0f:4a:ee:fe:ce:df:52:b2:84:60:d0:6b:aa:94:c6:58:55:b9:
3c:2d:db:ae:f2:d2:8a:ae:66:3b:48:2a:75:42:28:bc:52:3c:
07:ba:b5:15:64:8b:40:9d:9e:7d:ab:01:b9:a3:ab:b4:d5:f7:
3f:b8:e6:17
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIUeKffh4pLdabE5VCuir6KSkMfeBYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0
RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTI0MTEwMzIyMjUyNVoX
DTI1MTEwMjIyMzAyNVowMzExMC8GA1UEAxMoODAxQUYzREUwRjUxRkMzQzZGQ0NB
Q0Y3QTEyOEMzQzdDMjlEODNDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJphLquY8Zm4Qm46hass5AJbHAht/yJarv1tfpT8fXaB2c+xsvRX+0RF0Yq6
tPQYpi+vibsWqxqkzLTX3mZeAhbu9OSKmlgpkAH4JOotHYJKxChm3V5xgz0PDjE9
eTo3czOqNWznN6KmannEbMtLvq/K2zbNYpV7lymBANAkU76EfbB69++HhUXosfex
9U6cPoaqCs7pM1t0ciO8za0xnOMEXrzbsbkiQUOrrW7qbV5TFrtivi1PlgQTJ+2U
t9YlIbno8KmGU58p7OtPnQoA0TUxQmbnW3QsYuFi/NEUlzj3quWoVKXVM+h4H1Wi
r66AZTXLnhnNg1xmbJQCiiUzqJkCAwEAAaOCAe0wggHpMB0GA1UdDgQWBBSAGvPe
D1H8PG/MrPehKMPHwp2DxTAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT
7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu
Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG
NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2
MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13
LmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJzeW5jOi8vcnN5bmMu
cnAua2kvcmVwby9taXNha2Fpby8wLzMyMzQzMDM3M2E2MjM5NjMzMDNhM2EyZjMz
MzIyZDM0MzgyMDNkM2UyMDMyMzMzOTM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB7nAMA0GCSqG
SIb3DQEBCwUAA4IBAQB6NvhAEZKnI6xerMEiYStchOJOLx9Digrd8JjRxwljYFRr
xAoaNBG4nea2dImylOjU4ugON7Bwh5kpN74GIy9BpqhdKEShr84XMW9JX0Ez+5GL
35UXtMWjJs8OQM5fIBjYqP75/bJ9Bzaz27eqVIBAfdDSipKI2VnRsS6/D1298zRg
I/zBIu8gJnQZEI+QU9mnu++Ooj0dpIpp7RFRy+uf0lID1qsMGqw1QX4IZwaE6/80
YSUwrt8ao3v55h0OeX9TeG56chkPSu7+zt9SsoRg0GuqlMZYVbk8Lduu8tKKrmY7
SCp1Qii8UjwHurUVZItAnZ59qwG5o6u01fc/uOYX
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:11 2025 by rpki-client