Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/3138352e3233342e3231322e302f32342d3234203d3e203531393238.roa
File: 3138352e3233342e3231322e302f32342d3234203d3e203531393238.roa (raw, json)
Hash identifier: jXlAZXihB9ghV5pqT35Vuw95KMzCo1cv8FKCCx+5w+Y=
Subject key identifier: AC:AA:9D:17:44:58:95:66:12:71:D4:8B:A3:A1:B1:1B:F6:AA:55:A6
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 741F71EAD95D4DFB1DF8EF669E559B00D4340483
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/3138352e3233342e3231322e302f32342d3234203d3e203531393238.roa
Signing time: Sun 03 Dec 2023 21:38:25 +0000
ROA not before: Sun 03 Dec 2023 21:33:25 +0000
ROA not after: Sun 01 Dec 2024 21:38:25 +0000
asID: 51928
IP address blocks: 185.234.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:1f:71:ea:d9:5d:4d:fb:1d:f8:ef:66:9e:55:9b:00:d4:34:04:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 3 21:33:25 2023 GMT
Not After : Dec 1 21:38:25 2024 GMT
Subject: CN=ACAA9D17445895661271D48BA3A1B11BF6AA55A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:29:ca:bd:45:1c:bf:40:37:82:e5:6b:d6:
30:df:8d:fc:0e:76:c8:97:a8:56:a2:06:fd:c9:13:
0e:30:41:cf:f6:31:db:23:42:5a:99:ed:e0:26:c1:
17:a3:e2:28:b2:26:d7:71:eb:fb:69:fa:e3:c1:e5:
a8:00:7b:18:7b:ee:04:1e:a1:e4:ea:8c:bc:d2:ba:
6b:63:07:64:0c:a7:c9:4f:2a:f1:5d:60:1e:11:de:
16:d7:01:9e:11:a1:31:72:b2:66:8e:4d:d5:e1:13:
83:93:14:6a:9e:cc:e4:2e:a3:db:24:90:a3:bd:d6:
2d:e9:9e:d1:b5:80:45:cd:82:d9:64:01:78:9d:78:
e5:29:ec:27:e8:87:25:98:fd:fb:b8:5f:8c:96:77:
a1:83:fd:5b:f0:cd:5c:18:bb:32:7d:a6:89:b8:88:
b2:b3:57:be:ed:5e:3c:f7:4c:75:19:fa:8b:03:7d:
b1:11:68:da:19:22:4b:7f:e9:72:8e:ef:41:ee:32:
0a:5c:33:c2:05:f2:e2:0b:12:a2:93:d9:80:6b:c6:
9e:f9:7e:e9:e6:0a:90:77:70:50:3e:81:0e:41:23:
72:81:11:be:3a:fa:b7:eb:4d:6f:38:98:27:6e:02:
b2:70:b5:ea:9d:05:db:63:fb:0e:65:d7:62:3f:76:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AA:9D:17:44:58:95:66:12:71:D4:8B:A3:A1:B1:1B:F6:AA:55:A6
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/3138352e3233342e3231322e302f32342d3234203d3e203531393238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.212.0/24
Signature Algorithm: sha256WithRSAEncryption
60:8a:dd:8c:32:16:b7:05:6a:bb:09:82:63:f6:e2:38:47:f8:
e4:da:0f:5f:4d:fa:e1:d3:17:a5:41:28:a4:e2:a2:b7:4a:9b:
8f:c3:00:62:66:23:60:0b:08:77:d1:d4:9f:c9:2c:96:74:e8:
55:c4:2a:04:8a:95:fa:4b:95:7b:0b:7a:63:e4:bb:5b:fe:9c:
4f:24:c8:b3:36:79:ee:37:5d:e4:d1:8d:c5:78:b7:33:7b:b5:
4a:36:c0:13:0d:7e:1e:4c:f2:26:ec:19:b3:40:23:6f:8a:01:
d7:67:5a:dc:b2:38:72:82:56:85:b0:98:30:9d:c4:be:e0:1a:
c3:5b:2a:6d:26:1f:c4:0f:82:0f:da:11:b3:78:b3:de:5d:03:
f9:95:93:84:61:e4:87:f1:96:91:e3:57:b0:8a:86:8b:22:43:
88:dd:90:22:50:2c:42:6d:2e:1f:3e:eb:4f:c9:df:37:18:69:
95:b7:70:38:4a:51:3c:af:ed:14:28:4e:2f:dc:bd:25:8a:5e:
a3:97:1c:cc:5f:32:e0:59:01:85:7c:a8:a6:1c:0b:fd:ab:33:
b3:91:d6:78:61:da:d4:0a:cf:46:2b:ce:b1:99:2b:94:4d:bc:
bb:d9:2e:5b:12:92:4f:87:87:9e:ec:65:fc:a4:1d:7a:1b:6e:
46:99:28:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 21:59:22 2023 by rpki-client on console-fra.rpki-client.org