Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/3139342e34352e3130312e302f32342d3234203d3e20393137.roa
File: 3139342e34352e3130312e302f32342d3234203d3e20393137.roa (raw, json)
Hash identifier: AoRAgh+WQPd00U04hcibThEqVAs+jQNSjzEhOTE3+O0=
Subject key identifier: D0:41:CE:34:63:D2:46:33:A1:F7:3D:5E:F6:67:DC:35:D8:AE:DA:D4
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 54D818AF924A316E7903670FCEBA1DE605023517
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/3139342e34352e3130312e302f32342d3234203d3e20393137.roa
Signing time: Thu 14 Dec 2023 19:58:18 +0000
ROA not before: Thu 14 Dec 2023 19:53:18 +0000
ROA not after: Thu 12 Dec 2024 19:58:18 +0000
asID: 917
IP address blocks: 194.45.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d8:18:af:92:4a:31:6e:79:03:67:0f:ce:ba:1d:e6:05:02:35:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 14 19:53:18 2023 GMT
Not After : Dec 12 19:58:18 2024 GMT
Subject: CN=D041CE3463D24633A1F73D5EF667DC35D8AEDAD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:83:13:5c:81:07:6d:07:53:d0:83:c5:6a:
f3:c0:a9:c0:d2:37:75:c8:e3:ac:04:8a:dd:de:ac:
f9:04:cb:c3:22:f2:90:c5:53:f0:30:6f:fb:ac:07:
79:e7:4d:2c:10:14:1e:72:72:28:9d:67:89:bb:be:
fd:42:bb:82:3f:a9:47:5d:8d:50:07:3a:f6:91:24:
cf:e6:57:01:29:90:0d:3a:84:0f:4b:da:1a:7e:9e:
4b:e3:bf:5a:d3:2a:c4:93:00:0a:e4:ae:bb:14:19:
01:25:d9:c6:10:38:e6:9f:d9:e7:0a:d1:34:fc:06:
0a:7c:a7:54:65:61:b8:2c:8b:d6:dd:99:82:d0:9f:
a4:1b:17:83:85:fd:0f:53:06:33:bb:96:c5:bf:80:
80:12:09:38:a1:7b:13:f9:8d:e6:c6:80:3c:bc:59:
b0:12:0b:a4:82:5e:95:e6:2d:87:8e:af:44:89:ed:
6b:46:af:bc:51:8c:29:8f:49:8f:3f:6f:ed:cc:8a:
c6:3b:5a:ea:25:61:5d:26:c2:41:c9:d8:62:02:5e:
3b:81:99:68:f3:07:f7:ab:f4:34:52:df:42:68:65:
21:74:5a:cb:90:7d:14:86:3c:08:da:d9:f1:be:a3:
2e:ee:c2:e6:03:d8:28:0e:4d:30:42:cb:3a:f4:67:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:41:CE:34:63:D2:46:33:A1:F7:3D:5E:F6:67:DC:35:D8:AE:DA:D4
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/3139342e34352e3130312e302f32342d3234203d3e20393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.101.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ee:a9:40:79:18:f9:09:19:80:17:52:bb:af:88:1f:7b:a1:
f8:65:e2:6d:c9:4c:1a:fd:c9:57:d6:f3:a1:f1:79:c5:32:50:
b9:0f:71:27:96:52:b8:d3:ae:96:88:9a:3d:62:66:39:f3:e8:
23:eb:0a:85:25:a3:e4:27:aa:88:f7:da:af:eb:ed:8f:af:fe:
1a:80:35:8a:8d:fa:e4:e5:c6:b5:e1:e0:13:57:e3:5b:ba:73:
69:ca:db:b6:3c:d9:46:3e:82:50:14:2c:66:bd:8c:31:be:b3:
d0:26:e7:47:96:c1:ec:c3:50:54:62:e2:ff:b0:b7:06:17:9c:
c2:f8:d8:06:95:80:ad:dc:0a:69:c8:c1:61:b5:97:62:22:2b:
fa:78:2a:d3:97:4a:bf:68:da:7c:34:fb:2b:2c:73:6d:3f:19:
fc:e4:a6:cd:dd:71:ef:e0:d7:cb:7d:8f:e5:f9:2e:5a:18:2d:
8a:d3:c2:d4:40:61:ec:34:87:1e:f1:7d:54:37:11:7a:e9:e8:
dc:ca:96:8c:7a:f6:84:a6:2e:ea:76:65:df:09:68:57:48:38:
5f:95:aa:d6:fd:78:07:b1:1b:d1:59:06:54:82:fe:33:59:80:
7e:a2:e5:30:76:bd:63:3b:c8:be:da:d0:aa:8b:05:0b:f3:fe:
67:ed:b2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org