Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/3138352e3233342e3231332e302f32342d3234203d3e203537363935.roa
File: 3138352e3233342e3231332e302f32342d3234203d3e203537363935.roa (raw, json)
Hash identifier: L8VujdOCsmbo6UFVrckH2x7RxD5W1AUZQdQtEJnlPSE=
Subject key identifier: 5D:60:1A:85:4F:7D:D6:EE:AE:4B:F2:A4:07:F9:42:F7:F6:72:EF:D4
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 04E82F89EBA40ACD5B5A2928E0F3767937298B3B
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/3138352e3233342e3231332e302f32342d3234203d3e203537363935.roa
Signing time: Sun 03 Dec 2023 21:38:27 +0000
ROA not before: Sun 03 Dec 2023 21:33:27 +0000
ROA not after: Sun 01 Dec 2024 21:38:27 +0000
asID: 57695
IP address blocks: 185.234.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e8:2f:89:eb:a4:0a:cd:5b:5a:29:28:e0:f3:76:79:37:29:8b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 3 21:33:27 2023 GMT
Not After : Dec 1 21:38:27 2024 GMT
Subject: CN=5D601A854F7DD6EEAE4BF2A407F942F7F672EFD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5e:55:b3:27:b8:79:35:a8:52:b7:67:e3:27:
36:93:32:19:46:2b:74:15:2c:a1:49:d0:2a:6d:29:
5d:46:3b:04:33:e4:52:92:d4:d5:80:45:56:3a:13:
26:57:94:73:de:b4:f1:68:45:3d:4f:5e:ae:22:ba:
8e:30:f2:bc:7e:2d:92:1a:9d:99:62:e1:15:71:04:
e3:5a:a5:9e:5d:a0:cd:24:ec:c6:4d:46:89:73:b7:
01:29:1e:88:72:12:d4:22:9e:67:90:0f:51:62:50:
ce:29:df:59:cc:11:e3:e3:2c:7a:04:38:16:82:91:
53:8b:7f:e6:26:d4:0d:20:b9:ff:95:dc:c2:fa:85:
7d:d7:e3:f0:72:6d:5b:dc:88:b8:26:c6:9c:44:a0:
e4:f2:ba:e3:16:13:1a:af:a9:a7:09:82:52:04:77:
3f:7b:62:6a:63:b4:8b:44:8a:f8:34:fc:26:b5:c6:
56:a9:58:9d:77:e1:3c:73:e2:37:6d:8b:d0:6f:fd:
67:c3:da:45:ca:6a:26:1d:dc:70:26:e4:1b:30:e3:
cd:dd:da:65:d4:1d:55:a3:d6:d0:dc:c0:7a:12:62:
ea:39:d7:2f:7e:ed:92:79:93:42:f8:95:eb:5f:57:
8a:01:94:5d:31:80:03:2a:31:2b:dd:96:74:96:3b:
c5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:60:1A:85:4F:7D:D6:EE:AE:4B:F2:A4:07:F9:42:F7:F6:72:EF:D4
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/3138352e3233342e3231332e302f32342d3234203d3e203537363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.213.0/24
Signature Algorithm: sha256WithRSAEncryption
39:08:85:94:6c:6c:44:64:5f:1e:30:b5:a6:2a:0c:22:d1:c6:
a9:cb:79:68:18:00:c7:60:a1:62:97:ea:3f:a4:1c:ba:b5:f7:
3d:ab:52:d7:1f:18:41:33:2f:39:55:58:b4:b0:15:1a:9b:b3:
86:e4:c5:c7:95:f8:c8:e7:06:da:ad:5a:fa:57:04:f2:db:7b:
21:46:5a:1b:b9:76:7b:6b:1e:6b:28:3f:0a:93:36:cd:ad:e3:
a9:f5:1d:64:ad:c1:a7:88:63:16:83:bd:4d:24:a9:3e:0b:8b:
b6:67:72:f4:69:ff:44:71:e7:55:27:55:35:85:bf:04:c8:0d:
a3:23:fb:f3:1f:74:d9:17:75:2c:ae:72:d2:68:55:f2:76:7e:
88:8f:6c:1b:bd:a3:ba:80:a5:c2:92:81:20:24:03:c4:08:8b:
41:fc:e7:59:2c:01:e6:18:37:38:ab:24:97:03:db:f9:3d:15:
58:4d:f3:17:32:2b:93:6c:e8:70:07:8f:00:26:dd:ee:69:c6:
a7:8a:57:8f:32:f4:50:61:d7:d6:a8:76:31:38:3c:95:e1:1a:
8b:61:b5:5b:00:10:7c:e1:29:d4:03:63:d4:ef:db:5e:6f:f8:
f0:9a:b2:fc:62:d9:35:85:20:e4:0b:da:d7:1a:e7:bf:de:a7:
9e:38:2a:77
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgIUBOgvieukCs1bWiko4PN2eTcpizswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMDMyMTMzMjdaFw0yNDEyMDEyMTM4MjdaMDMxMTAvBgNV
BAMTKDVENjAxQTg1NEY3REQ2RUVBRTRCRjJBNDA3Rjk0MkY3RjY3MkVGRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwXlWzJ7h5NahSt2fjJzaTMhlG
K3QVLKFJ0CptKV1GOwQz5FKS1NWARVY6EyZXlHPetPFoRT1PXq4iuo4w8rx+LZIa
nZli4RVxBONapZ5doM0k7MZNRolztwEpHohyEtQinmeQD1FiUM4p31nMEePjLHoE
OBaCkVOLf+Ym1A0guf+V3ML6hX3X4/BybVvciLgmxpxEoOTyuuMWExqvqacJglIE
dz97YmpjtItEivg0/Ca1xlapWJ134Txz4jdti9Bv/WfD2kXKaiYd3HAm5Bsw483d
2mXUHVWj1tDcwHoSYuo51y9+7ZJ5k0L4letfV4oBlF0xgAMqMSvdlnSWO8VVAgMB
AAGjggHWMIIB0jAdBgNVHQ4EFgQUXWAahU991u6uS/KkB/lC9/Zy79QwHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMHwGCCsGAQUFBwELBHAwbjBsBggrBgEFBQcwC4ZgcnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvMzEzODM1MmUzMjMzMzQyZTMyMzEzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzczNjM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC56tUwDQYJ
KoZIhvcNAQELBQADggEBADkIhZRsbERkXx4wtaYqDCLRxqnLeWgYAMdgoWKX6j+k
HLq19z2rUtcfGEEzLzlVWLSwFRqbs4bkxceV+MjnBtqtWvpXBPLbeyFGWhu5dntr
HmsoPwqTNs2t46n1HWStwaeIYxaDvU0kqT4Li7ZncvRp/0Rx51UnVTWFvwTIDaMj
+/MfdNkXdSyuctJoVfJ2foiPbBu9o7qApcKSgSAkA8QIi0H851ksAeYYNzirJJcD
2/k9FVhN8xcyK5Ns6HAHjwAm3e5pxqeKV48y9FBh19aodjE4PJXhGothtVsAEHzh
KdQDY9Tv215v+PCasvxi2TWFIOQL2tca57/ep544Knc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org