Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/3139342e3135362e3135342e302f32342d3234203d3e20323037313933.roa
File: 3139342e3135362e3135342e302f32342d3234203d3e20323037313933.roa (raw, json)
Hash identifier: e4SJDganGylsvM3ty/z+1FzeZwj/YuVUw/jhwxVQtQ8=
Subject key identifier: 6E:4F:B3:DF:FF:96:F0:A4:44:FF:A0:83:06:C6:02:DB:C2:27:AC:46
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 510AD1E2CACB1B6CF56CF390A57C14D441A9ADDF
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/3139342e3135362e3135342e302f32342d3234203d3e20323037313933.roa
Signing time: Sun 03 Dec 2023 21:38:24 +0000
ROA not before: Sun 03 Dec 2023 21:33:24 +0000
ROA not after: Sun 01 Dec 2024 21:38:24 +0000
asID: 207193
IP address blocks: 194.156.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:0a:d1:e2:ca:cb:1b:6c:f5:6c:f3:90:a5:7c:14:d4:41:a9:ad:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 3 21:33:24 2023 GMT
Not After : Dec 1 21:38:24 2024 GMT
Subject: CN=6E4FB3DFFF96F0A444FFA08306C602DBC227AC46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:a5:29:e4:3c:b4:c3:c3:65:ec:fe:84:de:
f3:72:7a:b1:5a:2f:56:b8:88:66:dd:cc:82:1b:6e:
5b:b5:61:80:ed:0f:34:1e:25:11:9b:03:85:e4:5a:
da:10:17:9c:aa:95:d6:13:42:ca:0d:70:2b:31:46:
97:f2:0b:60:f0:71:35:db:d6:24:12:0a:fc:b6:8f:
f5:16:11:59:32:0e:22:d0:48:4b:86:fb:85:d1:08:
e7:8b:c5:91:b1:1e:94:be:9b:40:0d:69:d0:09:29:
c8:de:fc:ed:62:62:6b:3d:62:62:73:77:6c:8d:91:
46:0e:11:0a:9f:db:7c:d1:62:69:d7:00:3e:62:84:
a9:88:e8:c9:5e:3d:bc:ec:90:7d:dc:76:1e:cc:e7:
be:7f:cb:ca:3a:0e:d0:81:cf:21:5f:2a:78:de:ab:
8b:84:59:8f:c7:16:22:10:94:bc:e2:3f:3c:4a:da:
37:ca:8a:8b:60:42:f0:95:6e:9d:69:6e:9a:d0:c3:
e9:72:43:60:45:39:8f:a7:2c:a4:04:c1:26:2f:82:
fd:f9:80:95:49:12:ba:b1:97:74:64:4e:87:b5:5e:
12:66:cb:c7:5a:60:51:f3:55:76:8e:be:37:37:e8:
aa:dd:f1:6e:11:57:9f:a4:d9:3a:01:fd:dd:c0:90:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4F:B3:DF:FF:96:F0:A4:44:FF:A0:83:06:C6:02:DB:C2:27:AC:46
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/3139342e3135362e3135342e302f32342d3234203d3e20323037313933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:99:cb:68:09:84:44:bc:f1:f7:a7:e4:0f:42:5b:8f:84:1b:
32:69:31:ed:c0:20:a7:26:24:ee:fe:59:bc:ff:e3:b7:51:a8:
e6:a7:79:51:c8:dc:aa:f1:5f:3c:6a:e3:60:f1:27:20:86:56:
5f:8c:40:ba:95:c1:3b:86:bb:c9:7b:e7:30:60:16:cc:70:5f:
7a:c1:7c:4e:cc:64:18:e7:f9:cf:6d:13:15:5a:32:76:2f:96:
66:b6:ca:e7:c2:fb:98:0c:66:2b:35:92:7e:52:19:05:4d:8d:
78:ec:d3:4b:3e:ba:63:f9:2e:a2:40:7d:32:0e:a0:a6:39:b1:
95:f2:77:21:1b:1f:88:96:24:0c:6c:bb:35:3f:e2:35:be:05:
f6:16:d1:a8:91:71:c1:c8:75:8a:86:9c:de:58:49:a1:ad:e0:
48:d4:ae:71:53:f2:2c:9a:41:67:b1:93:52:1f:ef:06:9d:3c:
4a:10:65:88:aa:b8:40:ad:b2:c8:43:5b:bc:7d:1f:b4:2a:92:
80:ce:d9:6c:6e:9a:2c:ff:87:38:7a:12:49:a6:d3:4c:e0:db:
51:5a:67:ea:38:0d:59:ef:8e:58:03:05:7d:8a:b7:22:08:42:
25:89:54:a4:e3:89:75:a2:ec:b1:b7:3d:e9:d3:e2:5e:3a:5e:
d9:17:fb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 21:59:22 2023 by rpki-client on console-fra.rpki-client.org