Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/34352e3135302e3234322e302f32342d3234203d3e203233393631.roa
File: 34352e3135302e3234322e302f32342d3234203d3e203233393631.roa (raw, json)
Hash identifier: MI0yLvJPxldZqeNH3R5nbE1rp5FGlU29qtzwSeZHjN0=
Subject key identifier: 0B:E2:0F:60:26:09:22:51:10:0C:A9:82:82:D7:9C:80:8F:F8:6E:EB
Certificate issuer: /CN=e36a3cbcb6635d140f694b0cd99d1cd62456de2e
Certificate serial: 339F29945799BC4A7C9CC385493CFADF96A87DD6
Authority key identifier: E3:6A:3C:BC:B6:63:5D:14:0F:69:4B:0C:D9:9D:1C:D6:24:56:DE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42o8vLZjXRQPaUsM2Z0c1iRW3i4.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/34352e3135302e3234322e302f32342d3234203d3e203233393631.roa
Signing time: Mon 20 Feb 2023 19:34:05 +0000
ROA not before: Mon 20 Feb 2023 19:29:05 +0000
ROA not after: Mon 19 Feb 2024 19:34:05 +0000
asID: 23961
IP address blocks: 45.150.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:9f:29:94:57:99:bc:4a:7c:9c:c3:85:49:3c:fa:df:96:a8:7d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36a3cbcb6635d140f694b0cd99d1cd62456de2e
Validity
Not Before: Feb 20 19:29:05 2023 GMT
Not After : Feb 19 19:34:05 2024 GMT
Subject: CN=0BE20F6026092251100CA98282D79C808FF86EEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:91:87:06:af:f1:d5:2c:2c:76:5d:85:b1:
ed:a3:b4:86:e0:c8:a6:cd:5c:04:c2:42:e4:89:40:
74:76:ee:34:da:c0:13:b7:f1:c6:89:5e:14:49:30:
b8:d2:e4:8b:e6:e2:6a:58:7c:7b:d6:75:e8:46:2b:
b5:68:9a:42:d1:0a:c9:e0:59:e4:f0:ac:8e:a9:14:
65:66:58:92:2b:94:ad:24:11:83:b8:a3:bf:71:35:
29:52:88:22:90:84:d1:ea:aa:26:d4:8a:46:fb:2f:
b5:46:6f:4a:9f:bf:f9:28:e1:3d:08:68:01:8a:46:
29:2a:70:ec:82:ac:44:58:a9:ee:1a:60:c1:a2:b1:
f0:0b:6e:27:9f:e2:21:2c:f4:d2:a2:15:37:be:c7:
58:c4:2a:a4:81:b3:43:13:c1:7e:35:2a:7e:ed:46:
18:c0:3a:40:0b:b3:19:68:26:5d:19:cf:64:58:5c:
a8:93:cc:8a:35:91:c5:e8:d8:45:db:97:d1:c2:72:
fb:98:99:b9:33:24:b9:d0:30:f4:9c:ac:79:41:86:
68:03:5a:11:71:9a:bc:70:f0:a8:eb:36:18:56:78:
e2:6c:6c:83:c4:b7:63:b9:36:9a:46:72:15:28:ca:
6e:22:f6:87:22:37:49:03:e7:b1:ca:0c:8e:f4:ab:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E2:0F:60:26:09:22:51:10:0C:A9:82:82:D7:9C:80:8F:F8:6E:EB
X509v3 Authority Key Identifier:
keyid:E3:6A:3C:BC:B6:63:5D:14:0F:69:4B:0C:D9:9D:1C:D6:24:56:DE:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/E36A3CBCB6635D140F694B0CD99D1CD62456DE2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42o8vLZjXRQPaUsM2Z0c1iRW3i4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/34352e3135302e3234322e302f32342d3234203d3e203233393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e9:b3:df:96:ff:39:e4:d3:8a:3d:78:cf:32:a1:b6:80:49:
8b:66:e8:11:67:d6:c5:22:63:1d:a3:68:73:78:9d:ae:57:d9:
52:04:a5:a0:2a:59:47:38:36:b1:eb:9c:15:ea:77:05:ca:21:
31:8d:ba:7c:b2:53:a8:e7:10:9d:6e:c5:ac:cc:c7:40:e2:4a:
47:0f:ae:c8:bb:9b:99:b0:17:c0:a3:f0:d9:02:9a:4f:11:9e:
24:94:f3:fa:01:8c:93:d1:56:83:e1:2a:99:35:1d:1a:de:39:
40:77:b4:6c:3c:ef:92:af:da:4c:f7:f2:08:c4:30:cb:cc:c7:
f2:4e:53:6c:fb:cd:26:49:7c:57:ff:1b:59:04:c9:29:42:8a:
c8:86:e2:31:db:cf:4f:1a:d9:c5:a1:51:0b:a5:cd:1d:8d:be:
b8:0c:d0:fa:fa:67:24:a8:ab:11:42:fd:aa:23:db:b6:9a:01:
76:66:eb:f2:46:a7:00:82:17:23:23:d5:7c:60:56:f0:82:a1:
7f:da:74:6a:5a:29:18:9c:69:f8:a3:39:a6:0a:3b:d3:6f:e5:
87:ee:c6:a3:94:a4:29:c8:c0:f5:8c:dc:10:be:df:49:37:89:
ff:24:3c:46:a6:97:5e:8c:b8:27:12:95:bf:da:d9:b4:22:8e:
eb:bd:61:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org