Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/1M1sAvyNQ2BR-4myG8flaQ4mnvo.roa
File: 1M1sAvyNQ2BR-4myG8flaQ4mnvo.roa (raw, json)
Hash identifier: t/USdOYpxBYn7nLaVQKoIOhKWMpDJSGAjz7RekprWbg=
Subject key identifier: D4:CD:6C:02:FC:8D:43:60:51:FB:89:B2:1B:C7:E5:69:0E:26:9E:FA
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0271
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1M1sAvyNQ2BR-4myG8flaQ4mnvo.roa
Signing time: Thu 18 Apr 2024 15:55:04 +0000
ROA not before: Thu 18 Apr 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 18 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D4CD6C02FC8D436051FB89B21BC7E5690E269EFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:cf:c0:33:58:4d:8c:02:f8:cb:68:54:fc:
05:00:19:e5:23:cc:66:bd:b0:47:54:e9:15:73:8e:
5e:79:11:19:36:2b:34:50:6e:a8:00:02:10:69:38:
f0:70:a0:0b:f0:66:27:78:16:57:cb:f3:c2:9a:db:
2a:a9:54:0e:a6:c2:6f:1a:c4:4a:f7:4f:ef:fb:ea:
e5:69:73:df:fb:7f:0d:5e:b7:02:a9:c8:03:b0:36:
96:0e:37:21:72:7a:0d:97:77:74:fa:32:b7:1b:00:
27:72:e2:45:78:d8:ef:7f:12:6d:8d:d9:02:bd:f2:
4c:22:0d:98:52:0c:74:f7:2e:59:fb:eb:d3:b1:0e:
9e:d2:1f:df:9e:fa:26:3b:e6:98:22:a2:d9:2f:83:
42:e7:ba:c5:44:b2:a8:b5:e4:dc:8e:97:fa:38:10:
e9:08:04:3f:d6:59:70:b5:3c:f7:51:04:d7:02:ef:
64:31:44:11:59:44:f3:d8:e3:3f:31:3f:90:b6:40:
4c:f3:db:86:d4:24:f1:b3:6b:ef:ba:14:53:5f:30:
67:92:12:88:92:c6:14:06:40:c7:a1:7e:8a:08:bd:
01:7d:dd:b3:3f:79:1a:e6:cc:44:7e:68:0b:c5:7c:
42:d0:c6:22:58:2c:80:1c:be:39:ee:6d:65:b8:01:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CD:6C:02:FC:8D:43:60:51:FB:89:B2:1B:C7:E5:69:0E:26:9E:FA
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1M1sAvyNQ2BR-4myG8flaQ4mnvo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
de:44:f1:d4:75:c1:19:a3:2d:44:e4:ed:11:11:7c:1f:9b:97:
68:57:99:15:d0:aa:62:0e:5c:07:1f:06:7f:3a:95:d2:0e:34:
54:14:67:46:be:c3:55:f3:39:88:80:14:be:26:c9:a8:1b:57:
d1:d6:e9:72:76:d8:e1:24:b7:75:b3:e3:22:24:11:dc:40:78:
c6:f5:94:89:02:7a:7b:a1:e7:63:db:fa:d2:4c:9e:5c:ae:6e:
90:cf:6d:61:bf:cf:a7:98:d4:81:7b:36:69:a5:ba:84:36:cc:
be:4c:5e:b1:1f:f3:f7:10:d4:e7:a1:1d:f6:3b:d3:9a:37:5a:
e7:f7:77:ca:52:ca:d2:19:a9:d4:10:aa:2f:ff:a3:57:2b:af:
55:b0:8f:d4:30:64:20:24:a2:f3:cb:2c:21:58:90:b6:ff:65:
09:ed:b9:b1:14:cf:2e:92:6b:49:a6:00:34:f3:27:f5:0f:83:
27:20:fa:0a:a7:1b:f6:01:76:b0:a0:d4:4c:16:06:60:e5:a6:
6b:70:f1:f2:3b:8b:3a:d1:ba:0c:bf:85:12:2f:5a:b1:70:ee:
1a:93:79:ff:0b:92:d7:7d:b5:a0:63:b9:10:9e:9f:59:c2:e4:
b0:aa:51:d4:3f:14:45:ff:b0:10:43:ee:6a:ef:bb:3e:68:b4:
96:94:e8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 22:26:57 2024 by rpki-client on console-ams.rpki-client.org