Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/1QkCZ7layN5HeR__kYzq2HQHdjo.roa
File: 1QkCZ7layN5HeR__kYzq2HQHdjo.roa (raw, json)
Hash identifier: 1WHQaeLluuZkn5OMp2xekq0mx/2bg0s1spCHFnj/4II=
Subject key identifier: D5:09:02:67:B9:5A:C8:DE:47:79:1F:FF:91:8C:EA:D8:74:07:76:3A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0412
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1QkCZ7layN5HeR__kYzq2HQHdjo.roa
Signing time: Mon 03 Jun 2024 23:55:03 +0000
ROA not before: Mon 03 Jun 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1042 (0x412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 3 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D5090267B95AC8DE47791FFF918CEAD87407763A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:27:b0:34:a9:e6:5b:36:60:ed:53:01:35:
45:7a:50:5c:bf:c5:6c:f1:0b:dd:dc:40:ef:38:29:
80:a0:97:e2:2f:68:98:0d:86:96:ad:21:d8:51:0f:
8e:07:f6:49:bd:4f:7d:78:29:93:2a:24:7b:36:f5:
7a:80:de:c9:44:bd:b1:9a:97:98:b8:1f:a2:85:4e:
d8:98:5f:4c:35:24:e2:5b:c1:e4:ef:f4:23:c4:31:
fb:ae:f4:b3:f7:8f:ed:74:da:ec:e1:ec:b5:eb:f5:
11:46:20:e9:6f:d1:9b:36:b3:81:fb:a8:07:6b:35:
60:bd:87:52:0b:74:08:8e:ad:b5:5f:67:79:98:b4:
63:d4:7d:0a:f9:d2:3f:51:e7:9c:59:11:9a:78:c4:
0c:ec:d6:fb:00:66:b8:4c:85:de:bc:d0:75:06:eb:
27:a9:d7:81:71:49:cd:6d:36:62:1f:f2:9c:c2:16:
33:8c:66:24:a6:b7:63:17:6e:02:a8:f7:77:0c:81:
6b:e7:e5:5d:d5:c5:fe:90:03:01:f0:c0:b3:1b:ee:
09:1f:0f:29:a3:04:01:3b:1a:ed:c3:d2:6c:78:6d:
d2:4d:18:6b:a6:fe:27:b7:2d:62:24:cf:4f:f5:f6:
6e:bc:a0:d5:c8:45:c6:87:77:fe:90:ef:0f:7c:43:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:02:67:B9:5A:C8:DE:47:79:1F:FF:91:8C:EA:D8:74:07:76:3A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1QkCZ7layN5HeR__kYzq2HQHdjo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:08:09:bf:43:aa:6e:87:21:df:9d:93:14:49:82:42:23:e7:
e4:ca:96:be:2b:3d:9e:ee:be:7c:51:08:01:cf:5d:22:4e:43:
b7:9d:b7:78:1a:b1:c2:b1:b3:b4:d2:72:29:19:af:44:aa:c7:
9f:9a:0f:85:4c:b3:65:6d:57:2e:ea:51:6a:79:6c:ad:7c:02:
7d:4a:bf:37:6b:68:16:3e:94:f7:36:e7:6d:71:82:d9:60:39:
58:2f:8b:d3:af:27:7a:fc:fd:64:e4:4c:ed:17:37:e7:00:da:
cd:8a:cb:8f:a5:d2:05:76:7e:46:a4:dc:77:ea:ad:63:ef:d3:
ac:f9:52:a6:0c:ac:08:d4:3e:54:37:5d:9e:d2:84:69:ad:ec:
a7:ae:64:ee:f0:66:cc:5e:a0:b2:05:74:90:02:6e:4b:8b:d9:
cd:1a:1b:df:cb:31:8c:34:4c:54:f2:59:f1:b2:47:34:a1:b8:
a4:03:4a:0a:08:21:5e:10:4b:63:dc:39:9b:1c:d9:0c:4e:70:
fe:f5:8c:0f:8a:64:83:03:52:cd:10:d5:bb:7e:c6:f3:d0:7a:
6a:f6:46:27:a3:9a:80:69:b3:99:8d:88:e3:8c:75:b2:29:ae:
5a:88:55:6d:b8:20:20:0e:6e:3e:94:74:0c:65:51:c2:b7:76:
3f:5c:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 06:11:09 2024 by rpki-client on console-ams.rpki-client.org