Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/3139342e3135362e3135352e302f32342d3234203d3e203438333836.roa
File: 3139342e3135362e3135352e302f32342d3234203d3e203438333836.roa (raw, json)
Hash identifier: Gd3BmvivcUTJV/L0wb1RozjHae1GaZ3qkd9c8peeT28=
Subject key identifier: 2A:CA:7F:B8:C3:1E:98:55:33:13:60:D2:33:D3:27:07:7B:82:5F:B9
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 146EDD0A0589BF1406AAD59147C8304408177FAA
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/3139342e3135362e3135352e302f32342d3234203d3e203438333836.roa
Signing time: Sun 03 Dec 2023 21:38:17 +0000
ROA not before: Sun 03 Dec 2023 21:33:17 +0000
ROA not after: Sun 01 Dec 2024 21:38:17 +0000
asID: 48386
IP address blocks: 194.156.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:6e:dd:0a:05:89:bf:14:06:aa:d5:91:47:c8:30:44:08:17:7f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 3 21:33:17 2023 GMT
Not After : Dec 1 21:38:17 2024 GMT
Subject: CN=2ACA7FB8C31E9855331360D233D327077B825FB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:6a:dc:e5:30:ac:47:e2:d4:1a:2f:41:d7:
57:f1:bc:bf:f0:2c:e5:5f:fd:5e:c3:4d:ce:a0:47:
a3:60:b2:bb:99:2c:cc:8f:7e:db:3c:72:8c:06:37:
b4:fc:79:fb:b6:8f:1f:05:63:68:dc:94:c8:c5:4c:
c1:ac:e3:d0:f8:70:ca:17:9c:66:51:2e:d8:a2:e9:
9f:d7:de:40:d3:48:b5:81:05:94:84:f6:19:cd:53:
dd:49:c0:a7:b2:14:dd:d0:49:23:d9:5a:61:cf:28:
fe:0e:a7:4b:d5:b5:fe:ef:db:c4:89:d6:69:5b:29:
b5:db:71:6c:88:a6:d4:1b:de:ce:45:59:c5:e7:25:
e1:a9:26:c1:5b:66:de:9f:0d:d3:d2:16:93:92:f3:
37:31:8b:39:56:7a:42:83:cb:e7:59:77:28:5f:3e:
98:ee:03:71:ac:ab:08:c0:d9:ea:f0:c9:a8:fe:ea:
80:87:f7:a8:a4:52:77:68:1e:c7:ff:85:9b:87:e4:
a7:0a:ca:87:c0:9a:c2:a3:34:cd:b0:c5:14:96:02:
b6:66:81:f5:85:b9:46:d6:81:ae:24:ab:ad:83:18:
ce:c6:c8:50:d1:5b:13:20:06:a6:74:77:f9:9a:32:
a0:8f:af:75:d3:22:4d:9d:ce:7f:d3:40:4b:a7:4f:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CA:7F:B8:C3:1E:98:55:33:13:60:D2:33:D3:27:07:7B:82:5F:B9
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/3139342e3135362e3135352e302f32342d3234203d3e203438333836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.155.0/24
Signature Algorithm: sha256WithRSAEncryption
92:1f:ec:a6:1b:d8:65:0f:f3:48:8a:25:e1:ff:8b:98:71:5a:
25:5a:e7:b5:77:81:0f:f9:30:07:5d:4f:a4:b5:5a:2b:11:21:
b6:94:84:24:6c:dd:0b:55:5a:25:ab:c4:52:dc:58:80:15:b0:
2f:e0:8e:43:1b:ae:1a:67:2b:82:5b:e1:f1:33:aa:af:b6:63:
bb:74:fe:03:c1:37:82:f0:d2:cc:d5:b3:df:e7:58:71:a5:5c:
4e:4f:0c:42:f4:1f:87:85:0d:d9:58:31:21:ee:b9:30:94:8d:
9e:9a:5f:8e:21:a5:ae:39:90:4a:78:ad:3a:c0:c1:b3:59:7b:
40:10:69:69:e4:d5:e1:7f:5d:e6:68:67:79:53:f5:49:df:2e:
44:43:69:84:6e:84:3f:01:a7:18:b6:30:30:df:cf:93:7c:dc:
d5:2e:79:b8:26:e5:a2:9f:27:7c:94:1c:0b:9e:da:5f:fb:79:
9c:b5:6e:e9:4a:2a:9f:3d:13:4a:cc:6c:88:cc:e0:81:98:fe:
fa:74:a8:f2:08:2f:99:d8:22:c3:d0:d7:3a:b7:eb:33:41:f9:
5b:db:35:4c:43:ab:b6:99:3b:33:d3:80:da:53:5a:ab:30:c3:
5e:63:20:89:54:17:ae:df:ac:19:c4:56:68:63:5c:13:ce:ae:
1b:45:31:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org