Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/3138382e3234342e39372e302f32342d3234203d3e20323037313933.roa
File: 3138382e3234342e39372e302f32342d3234203d3e20323037313933.roa (raw, json)
Hash identifier: 7Y+5HC13F92lvYTquYLC7p/atd4c5HfjBEXwPsBw1xQ=
Subject key identifier: AA:B1:3B:30:E5:36:2C:4F:93:47:99:72:C6:88:E5:65:A5:52:24:CC
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 090222416A45E64B2D56CA4083C75CD10C6E7626
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/3138382e3234342e39372e302f32342d3234203d3e20323037313933.roa
Signing time: Sun 03 Dec 2023 21:38:20 +0000
ROA not before: Sun 03 Dec 2023 21:33:20 +0000
ROA not after: Sun 01 Dec 2024 21:38:20 +0000
asID: 207193
IP address blocks: 188.244.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:02:22:41:6a:45:e6:4b:2d:56:ca:40:83:c7:5c:d1:0c:6e:76:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 3 21:33:20 2023 GMT
Not After : Dec 1 21:38:20 2024 GMT
Subject: CN=AAB13B30E5362C4F93479972C688E565A55224CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:e5:27:0a:2b:d4:74:9f:66:b3:b5:0e:b7:
c6:8c:aa:84:e2:5a:f0:a8:f3:76:e9:5e:86:ca:d5:
b6:71:1a:40:80:09:b8:1c:ac:ed:d3:00:7c:01:a4:
69:21:c6:1a:7d:7e:d5:f6:12:2d:fb:f5:95:aa:b2:
72:59:67:08:10:82:fc:7f:be:59:11:08:a5:b7:e9:
82:38:4f:73:a7:c1:e4:0a:65:bf:f2:99:ec:7d:e6:
7f:98:31:f4:e3:a5:e4:ed:5f:f4:59:2a:a7:92:30:
f5:8f:b6:1d:d2:b9:3f:85:d7:b0:9d:1f:f4:71:da:
81:00:d7:94:17:1e:b7:8a:98:6f:74:b5:b4:e0:d4:
fd:d0:70:98:04:04:71:f9:68:23:ce:93:7a:c6:0e:
3b:b7:b8:b0:85:91:ff:4c:fe:74:76:7e:db:e2:9d:
ce:6c:29:5b:10:58:9e:ae:df:0b:a8:4e:7d:5a:72:
53:f0:fe:af:25:77:4f:2f:50:49:2f:fe:5f:e1:05:
3d:5b:2b:7a:85:5c:d8:20:1b:4f:c7:9b:a5:70:56:
e6:31:6e:b8:07:d5:d1:7b:6c:1d:62:04:4a:2d:53:
d4:5e:8f:d2:ea:70:9e:93:fc:b8:4d:40:32:7e:a6:
ba:66:fa:da:b7:a1:1d:61:b4:ca:96:91:2d:84:d3:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:3B:30:E5:36:2C:4F:93:47:99:72:C6:88:E5:65:A5:52:24:CC
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/3138382e3234342e39372e302f32342d3234203d3e20323037313933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.97.0/24
Signature Algorithm: sha256WithRSAEncryption
62:19:57:7e:21:e2:f4:85:47:03:6a:10:b8:92:1b:a3:e7:23:
90:64:03:bd:65:a2:3a:9f:4e:c7:da:5d:a3:b9:ef:d8:be:e1:
ea:a0:e7:ac:47:1f:9f:5b:34:ee:9e:93:7f:01:a1:6f:09:d6:
93:2f:d1:ca:ef:75:5c:ee:43:d3:54:55:08:83:74:b3:d9:b5:
cf:d4:0a:bb:9a:59:90:9f:62:b4:da:76:83:71:8b:c6:3c:c8:
c1:01:ff:b2:1b:bb:b0:3c:e4:1e:98:7a:a8:8d:18:fc:53:5b:
b8:1a:7f:0c:e5:f3:81:0a:b5:23:96:ca:3d:0d:ca:54:77:74:
e7:0e:b9:d4:69:45:4d:7e:5a:10:da:4a:c6:94:db:da:6e:fe:
05:21:70:2c:77:bd:dd:ba:df:26:a8:56:17:4f:77:6d:01:1f:
47:e6:47:15:aa:27:dd:fa:92:86:dd:b1:b4:c5:7a:bb:62:df:
bc:ea:4a:1c:a4:44:ed:61:92:e6:16:56:12:1e:0e:35:0e:76:
c9:57:77:f8:d7:93:83:26:32:f9:02:61:f0:33:a2:e6:5c:46:
e7:29:3f:df:34:e4:2d:b3:ca:dc:41:5c:f1:87:9e:da:00:08:
fe:19:d0:08:3d:01:78:b0:ab:2f:66:50:c4:80:0c:48:bd:39:
d7:c0:ee:85
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgIUCQIiQWpF5kstVspAg8dc0QxudiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMDMyMTMzMjBaFw0yNDEyMDEyMTM4MjBaMDMxMTAvBgNV
BAMTKEFBQjEzQjMwRTUzNjJDNEY5MzQ3OTk3MkM2ODhFNTY1QTU1MjI0Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAeUnCivUdJ9ms7UOt8aMqoTi
WvCo83bpXobK1bZxGkCACbgcrO3TAHwBpGkhxhp9ftX2Ei379ZWqsnJZZwgQgvx/
vlkRCKW36YI4T3OnweQKZb/ymex95n+YMfTjpeTtX/RZKqeSMPWPth3SuT+F17Cd
H/Rx2oEA15QXHreKmG90tbTg1P3QcJgEBHH5aCPOk3rGDju3uLCFkf9M/nR2ftvi
nc5sKVsQWJ6u3wuoTn1aclPw/q8ld08vUEkv/l/hBT1bK3qFXNggG0/Hm6VwVuYx
brgH1dF7bB1iBEotU9Rej9LqcJ6T/LhNQDJ+prpm+tq3oR1htMqWkS2E048dAgMB
AAGjggHWMIIB0jAdBgNVHQ4EFgQUqrE7MOU2LE+TR5lyxojlZaVSJMwwHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMHwGCCsGAQUFBwELBHAwbjBsBggrBgEFBQcwC4ZgcnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvMzEzODM4MmUzMjM0MzQyZTM5MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMTM5MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC89GEwDQYJ
KoZIhvcNAQELBQADggEBAGIZV34h4vSFRwNqELiSG6PnI5BkA71lojqfTsfaXaO5
79i+4eqg56xHH59bNO6ek38BoW8J1pMv0crvdVzuQ9NUVQiDdLPZtc/UCruaWZCf
YrTadoNxi8Y8yMEB/7Ibu7A85B6YeqiNGPxTW7gafwzl84EKtSOWyj0NylR3dOcO
udRpRU1+WhDaSsaU29pu/gUhcCx3vd263yaoVhdPd20BH0fmRxWqJ936kobdsbTF
erti37zqShykRO1hkuYWVhIeDjUOdslXd/jXk4MmMvkCYfAzouZcRucpP9805C2z
ytxBXPGHntoACP4Z0Ag9AXiwqy9mUMSADEi9OdfA7oU=
-----END CERTIFICATE-----
Generated at Wed Dec 20 21:59:22 2023 by rpki-client on console-fra.rpki-client.org