Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/3vOXALnxL_3TMFc-aENu9ZhVde0.roa
File: 3vOXALnxL_3TMFc-aENu9ZhVde0.roa (raw, json)
Hash identifier: CYdnadjFdiLGLUzR1jsxxbJHiGTDSz7yAukx5LmkbIE=
Subject key identifier: DE:F3:97:00:B9:F1:2F:FD:D3:30:57:3E:68:43:6E:F5:98:55:75:ED
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: 011094
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/3vOXALnxL_3TMFc-aENu9ZhVde0.roa
Signing time: Sat 17 Jun 2023 00:00:39 +0000
ROA not before: Sat 17 Jun 2023 00:00:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15562
IP address blocks: 2001:67c:208c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 Feb 2024 16:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69780 (0x11094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Jun 17 00:00:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=DEF39700B9F12FFDD330573E68436EF5985575ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:de:2d:db:83:f7:34:2e:d0:e5:60:53:be:0a:
0d:2e:b9:91:86:27:cc:2d:3e:09:1f:35:8d:ac:d3:
c9:33:57:cd:61:3c:04:2b:ff:fb:b6:f5:2d:f5:55:
98:53:bb:11:5b:75:49:4f:2c:c8:f0:72:e8:a1:73:
72:a7:29:96:2c:ec:cd:7f:f3:e9:04:3c:7b:9e:4d:
35:f9:fa:5d:9c:af:3b:ac:3d:fb:df:6b:06:31:6b:
4a:fe:41:b2:31:a1:22:84:d8:c8:63:eb:ba:ef:d9:
68:8d:8a:6b:22:69:13:d7:b7:69:b5:b0:27:93:a1:
cf:c8:60:68:46:e0:2d:0e:a9:1d:4d:c5:8f:d7:73:
b9:f0:da:db:20:6f:bc:0c:5e:70:65:05:fd:a4:c7:
5d:68:d8:fa:54:66:89:f9:96:7f:3d:73:dc:60:a4:
9b:d1:89:3e:ce:83:b0:c6:29:3a:5b:dc:71:42:0c:
1b:ab:67:bd:02:bf:ee:79:c4:2e:df:fb:9e:10:b7:
4f:e1:d4:93:23:3c:05:e9:15:34:f9:c6:07:50:5e:
05:d6:15:3e:3d:a5:10:17:19:43:66:b3:40:db:a0:
d1:51:a8:9e:94:c0:c2:de:1e:58:7f:bc:1d:9b:99:
1e:2e:02:7e:f8:4a:b9:40:ca:22:8b:06:3f:c7:1b:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F3:97:00:B9:F1:2F:FD:D3:30:57:3E:68:43:6E:F5:98:55:75:ED
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/3vOXALnxL_3TMFc-aENu9ZhVde0.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:208c::/48
Signature Algorithm: sha256WithRSAEncryption
27:a5:cb:61:12:b8:53:a1:83:d0:e4:76:f4:df:97:c1:50:a3:
7b:41:42:75:7f:bb:44:42:b9:78:a1:aa:90:55:93:e8:99:b3:
cc:35:4f:fd:79:ea:ba:4f:74:51:ac:dc:00:78:d9:32:e2:ab:
27:40:ff:c5:1f:4f:84:d4:13:f0:40:fe:05:7a:4c:ec:1b:86:
ac:17:b9:5d:59:9d:8b:f6:4f:24:fb:6d:d2:31:54:c2:30:eb:
0d:cb:80:5f:af:71:74:52:e2:88:51:df:da:23:aa:0a:0e:6c:
60:38:c1:15:b8:94:3d:75:f5:f5:61:fe:a7:d5:c4:60:a0:00:
d7:5a:5f:da:8e:97:cb:48:95:3b:cb:53:81:1b:65:d4:f6:ad:
c3:ad:c5:1b:5f:3f:12:6d:80:6a:53:06:14:3d:89:f5:79:2b:
1f:fa:f9:b4:0b:8d:e5:23:4d:ef:df:19:9c:61:c2:2c:46:05:
df:51:0e:d5:f8:de:2b:6c:1f:ae:c3:f0:49:5b:0c:3e:7b:25:
eb:95:0c:4c:6f:b9:1a:06:af:27:dd:0a:9b:17:1d:96:bf:5e:
c9:82:04:f0:ec:bc:dd:2f:11:8a:c9:32:f9:91:b9:ad:95:92:
ca:fb:87:73:5d:af:73:38:63:b3:6a:00:af:3d:74:8c:89:ff:
fc:0c:7f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org