Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/34352e3134322e3234342e302f32342d3234203d3e203538333133.roa
File: 34352e3134322e3234342e302f32342d3234203d3e203538333133.roa (raw, json)
Hash identifier: Kd8YPNaDBXEXgPZGHOgfiU0eZ0MC0kRfERJcSMAYiuk=
Subject key identifier: 49:23:BA:BE:75:75:6E:10:46:DE:8B:04:29:1A:A4:08:FE:68:3E:64
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 77ECDC1C0A93A5EE5BCB2587D0D14394AAA36A2B
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/34352e3134322e3234342e302f32342d3234203d3e203538333133.roa
Signing time: Sun 03 Dec 2023 21:38:18 +0000
ROA not before: Sun 03 Dec 2023 21:33:18 +0000
ROA not after: Sun 01 Dec 2024 21:38:18 +0000
asID: 58313
IP address blocks: 45.142.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ec:dc:1c:0a:93:a5:ee:5b:cb:25:87:d0:d1:43:94:aa:a3:6a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 3 21:33:18 2023 GMT
Not After : Dec 1 21:38:18 2024 GMT
Subject: CN=4923BABE75756E1046DE8B04291AA408FE683E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:0b:a9:5c:0f:eb:fb:c0:05:86:69:b5:b6:
bb:20:b1:48:08:ad:38:ac:bb:f3:8b:e8:06:bc:a2:
1d:bd:63:74:3e:59:5c:ae:27:a1:51:e9:ee:0a:d0:
a3:e9:06:7e:86:a8:4d:6f:ba:ce:c6:f6:c2:46:1e:
4c:7c:96:3a:50:9a:f3:58:bb:a0:46:ef:94:92:29:
fa:d5:c9:23:90:a3:ba:f1:0f:d9:97:52:2b:99:d8:
6a:23:40:cb:e6:a7:06:7a:b1:1d:75:0f:ae:d9:26:
ad:1b:2a:3d:06:e4:d4:e7:95:cd:d5:86:9d:b7:ef:
30:61:a4:fe:01:a0:be:e4:ab:80:4d:df:42:b5:9f:
b9:02:37:02:81:36:75:89:32:66:b3:cc:95:32:29:
15:ea:8b:ea:35:15:cf:01:9a:bd:6d:bd:0d:8d:1a:
ac:d4:19:28:b8:6e:a6:8c:16:8e:5a:56:3e:c5:50:
2f:c8:1e:77:73:ed:07:e7:b8:01:96:9e:4a:62:ce:
1b:d7:dc:2f:94:a0:03:bc:ae:1f:cc:2d:5f:a3:81:
a8:5c:fd:0b:7f:65:12:08:a5:ae:c3:46:30:b2:ba:
33:fc:d3:90:c7:4f:70:e9:92:20:5c:58:78:92:81:
8e:89:56:d0:b1:11:cc:a8:af:e9:fb:11:cb:86:f0:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:23:BA:BE:75:75:6E:10:46:DE:8B:04:29:1A:A4:08:FE:68:3E:64
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/34352e3134322e3234342e302f32342d3234203d3e203538333133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.244.0/24
Signature Algorithm: sha256WithRSAEncryption
90:51:a1:da:37:85:75:4c:72:ef:74:d9:fb:45:bb:58:1f:24:
36:8f:ad:a7:27:0a:c0:6e:19:8a:84:ef:b5:dd:6b:30:fb:79:
e0:3e:0a:e1:99:5f:7a:0e:8b:64:aa:aa:ec:7e:57:8c:52:15:
ab:72:34:ab:cd:91:47:09:20:33:b8:10:b1:ad:45:38:9a:46:
06:c7:20:1e:9d:9a:d1:c8:5c:6a:49:96:68:0b:d1:56:47:90:
8a:18:11:f5:65:f9:d9:7d:7c:c4:df:f7:2c:77:d3:aa:ee:c4:
46:8a:ea:df:d6:51:48:58:9c:f8:97:82:26:72:01:18:84:d9:
64:fc:6b:69:94:6a:2a:03:19:71:fb:71:e0:eb:00:37:ce:eb:
97:1b:73:3b:44:7f:8a:10:49:7f:ac:fb:e7:55:50:ef:a3:6f:
aa:27:6c:28:e6:34:1b:3f:04:c1:19:db:c4:07:43:28:d2:8c:
60:7d:04:e5:c9:2f:cb:b7:2d:52:c2:c7:c8:66:7d:04:55:26:
3f:97:72:d8:99:32:4a:a4:f1:d9:ce:f8:17:c1:c2:3e:f4:9d:
9d:23:b6:36:ef:87:da:9c:ea:16:dc:0c:d3:e4:24:76:92:96:
95:7c:e8:8a:3f:16:6f:1c:44:30:32:8c:5b:95:2e:02:e7:2f:
65:3c:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 21:55:10 2023 by rpki-client on console-ams.rpki-client.org