Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130663a336230353a3130303a3a2f34342d3434203d3e203335343837.roa
File: 326130663a336230353a3130303a3a2f34342d3434203d3e203335343837.roa (raw, json)
Hash identifier: Zx+P+Q7rKqsOCSIRLvPSTSe3dnUUwnFlWktwBD603Dw=
Subject key identifier: 6A:48:A0:BB:62:A4:EE:4A:5D:7D:14:95:2A:50:81:55:CF:8C:D6:25
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 329A5A617C60EB2D248A008D9AB7D2FB6DF4DAE6
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/326130663a336230353a3130303a3a2f34342d3434203d3e203335343837.roa
Signing time: Sun 03 Dec 2023 21:38:19 +0000
ROA not before: Sun 03 Dec 2023 21:33:19 +0000
ROA not after: Sun 01 Dec 2024 21:38:19 +0000
asID: 35487
IP address blocks: 2a0f:3b05:100::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:9a:5a:61:7c:60:eb:2d:24:8a:00:8d:9a:b7:d2:fb:6d:f4:da:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 3 21:33:19 2023 GMT
Not After : Dec 1 21:38:19 2024 GMT
Subject: CN=6A48A0BB62A4EE4A5D7D14952A508155CF8CD625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:e5:c6:37:04:16:92:b6:91:28:89:a9:ed:
75:cb:63:3d:dc:cb:6a:7d:75:2e:dc:16:66:94:c6:
89:be:d5:34:4d:21:38:57:63:f0:3a:bd:d3:12:7a:
49:ba:40:3e:c1:c9:d9:ba:6f:1d:a6:92:2b:17:38:
d0:d5:37:86:18:33:ab:c5:cc:39:e1:78:0d:2f:fa:
e5:be:81:c7:49:54:70:be:16:db:b3:b8:17:ab:cf:
ac:97:ce:58:e0:1d:8b:db:53:ac:27:76:f7:ac:92:
c7:76:3b:a9:99:ee:9d:93:21:f3:82:9c:70:16:d1:
9e:d5:c3:ae:69:cc:a7:b4:cf:74:58:bf:b8:bf:c4:
12:48:9d:b2:d0:d6:88:c4:ef:29:86:98:01:3b:25:
75:cd:6a:02:57:9b:54:f4:1b:1d:80:0e:02:e6:aa:
16:9e:2d:6b:45:c2:02:e9:e9:01:7f:6d:5d:bd:0b:
92:0e:b7:1e:1f:10:53:2f:d3:44:cf:55:57:93:18:
52:96:99:bb:dc:7e:c5:4a:91:a6:d5:94:81:95:7e:
59:8f:ce:0b:94:05:fb:78:a6:b0:85:22:13:9f:e4:
a8:a0:c4:40:18:21:a7:c4:dc:dd:d4:9a:a1:e7:2e:
f3:48:82:21:e1:ee:74:e9:47:70:cf:7b:05:88:f6:
ce:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:48:A0:BB:62:A4:EE:4A:5D:7D:14:95:2A:50:81:55:CF:8C:D6:25
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130663a336230353a3130303a3a2f34342d3434203d3e203335343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3b05:100::/44
Signature Algorithm: sha256WithRSAEncryption
3f:56:99:86:fc:f3:5b:86:3b:a9:42:29:cf:a9:59:4c:b0:99:
04:01:e0:9e:1e:52:6d:f5:95:b3:a5:4f:0c:43:ae:31:ef:09:
f1:45:bb:52:48:4c:03:25:d2:f1:3a:ee:57:45:d9:8e:c6:5b:
05:4f:df:97:0f:06:c5:19:92:22:32:13:23:5b:b0:58:f1:fe:
d5:ec:de:82:49:b9:b9:5b:e4:2d:7d:b8:3e:f6:88:4e:1d:49:
3d:70:e7:97:67:74:a4:40:e1:98:12:c8:09:83:8b:9d:37:5c:
e1:70:eb:19:50:8a:05:11:1f:a4:ec:0c:0a:0f:02:1f:78:91:
50:c8:a9:b5:88:a6:31:79:87:74:4e:13:01:27:de:5a:1d:d1:
65:26:9c:8c:31:bf:24:43:d0:7b:84:0d:a9:47:d0:99:ab:8a:
fb:75:e1:ea:51:1b:7f:04:5e:1f:c8:76:8a:aa:08:d7:17:79:
0f:e8:42:26:a3:0f:39:08:b7:fa:53:10:27:77:52:df:05:1b:
35:a6:c1:13:f3:f0:83:56:ca:1b:70:c8:31:1e:1e:fa:11:0a:
91:32:25:47:b1:3d:7d:97:7b:80:6d:9f:eb:93:4a:8b:ee:c1:
f1:e5:42:3b:cf:9f:90:d6:5a:b7:a1:13:ce:51:62:8b:69:fe:
9d:e2:f5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org