Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa
File: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (raw, json)
Hash identifier: 9o9sYCBvv89cZi/setzqWtCpYi4p2zeAk4HPlkj79To=
Subject key identifier: 5D:E6:6C:20:2D:CB:59:0D:61:53:6D:81:CB:3F:83:CA:CC:DF:34:6C
Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial: 46AFECAE09145032138C60FAA11841D7C4754036
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa
Signing time: Sun 03 Nov 2024 22:30:27 +0000
ROA not before: Sun 03 Nov 2024 22:25:27 +0000
ROA not after: Sun 02 Nov 2025 22:30:27 +0000
asID: 969
IP address blocks: 2407:b9c0:fb00::/44 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:af:ec:ae:09:14:50:32:13:8c:60:fa:a1:18:41:d7:c4:75:40:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121C330000
Validity
Not Before: Nov 3 22:25:27 2024 GMT
Not After : Nov 2 22:30:27 2025 GMT
Subject: CN=5DE66C202DCB590D61536D81CB3F83CACCDF346C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:02:07:4b:8c:a5:df:fc:91:34:ad:4c:55:
58:bc:45:08:f0:7a:40:81:29:6b:28:a2:8e:44:e3:
8a:09:de:13:95:dd:f3:bc:fb:06:0a:40:95:b4:bd:
b3:f7:f5:b5:b5:fe:62:01:cc:c5:59:b3:be:fc:e8:
cc:d5:9f:1b:2c:92:2b:66:10:0c:e4:04:37:03:bd:
81:05:3b:7f:a8:e8:9b:ca:b7:bc:d4:1c:b7:eb:e3:
8d:4b:4d:e1:57:b7:e4:e5:e1:e6:66:61:fc:84:c9:
4d:33:d0:52:d5:9c:d8:e4:3b:50:ac:0b:30:55:5b:
d0:a8:bd:60:5d:d7:90:0b:c2:9c:66:69:92:dc:e0:
f5:1a:cf:ff:2f:f1:1d:34:cd:b7:51:c4:dc:49:6b:
07:16:41:e2:5c:4e:24:e8:51:d7:0b:6d:54:4d:4d:
06:51:a1:3c:f5:3c:b6:af:1e:9d:89:b6:a6:24:ef:
cd:f4:17:72:17:6f:4c:20:e4:b5:a2:34:2d:30:af:
4a:da:f1:82:7d:84:04:f9:45:87:94:27:93:54:07:
e5:db:af:bb:44:21:f6:6b:72:65:f0:4f:01:7c:e8:
7f:f8:70:20:e1:62:7d:73:3e:a0:f7:91:3e:d8:10:
37:96:17:ec:a3:e3:ba:07:cf:ba:8f:de:56:8b:a9:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E6:6C:20:2D:CB:59:0D:61:53:6D:81:CB:3F:83:CA:CC:DF:34:6C
X509v3 Authority Key Identifier:
keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:b9c0:fb00::/44
Signature Algorithm: sha256WithRSAEncryption
77:a5:ad:b3:03:b9:96:d9:91:45:c2:4b:31:34:dd:36:f3:00:
c8:43:80:26:c0:d2:41:cc:39:2b:43:51:ed:ac:40:60:d2:ab:
a0:2e:ce:33:11:a4:c2:fd:c1:c1:f2:ec:d7:71:6f:a1:57:ba:
9d:98:7c:bb:93:f9:ed:3f:e4:2b:c1:cb:70:88:76:f6:e6:2f:
5e:8d:1b:10:da:65:f5:94:7e:ff:66:0b:55:7f:c0:f0:85:02:
c5:5d:0b:a5:6a:f4:7d:d7:45:8a:9d:b3:77:85:d5:34:ca:99:
f2:65:c4:d7:66:a1:fe:90:1c:90:b4:cf:f4:8e:84:87:26:67:
ff:61:c5:18:da:a6:f8:17:12:aa:b0:b8:1b:42:fb:e4:c9:84:
01:ba:78:e4:60:c4:49:3d:25:0e:82:47:a7:48:71:8a:58:33:
05:a6:7b:c5:3a:b2:6c:ff:3a:4c:1e:be:c9:fb:e4:6b:b5:24:
d1:78:11:e8:df:be:04:16:6d:5e:23:74:a7:28:5c:1a:e6:6b:
4d:8b:28:50:70:ea:8f:9c:eb:7e:a4:db:4c:20:b2:45:11:87:
e8:9b:24:dc:4d:af:2f:f5:e3:3e:6c:6d:5c:af:6f:5f:37:73:
4f:de:3a:b1:5b:a9:07:84:b8:14:3d:9c:8e:b5:1b:01:6d:dc:
97:2b:67:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:11 2025 by rpki-client