Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/21Ghaz0pmMi7790iahBr3ieJc48.roa
File: 21Ghaz0pmMi7790iahBr3ieJc48.roa (raw, json)
Hash identifier: yP2unblDdGouhqWBB3+vG8nHVDAZhbgxn+Qs4+cZiTg=
Subject key identifier: DB:51:A1:6B:3D:29:98:C8:BB:EF:DD:22:6A:10:6B:DE:27:89:73:8F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 03
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/21Ghaz0pmMi7790iahBr3ieJc48.roa
Signing time: Fri 09 Feb 2024 11:13:11 +0000
ROA not before: Fri 09 Feb 2024 11:13:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 14:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 9 11:13:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=DB51A16B3D2998C8BBEFDD226A106BDE2789738F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0b:dc:77:c8:26:e1:e3:82:0a:b7:b4:ed:a6:
da:55:eb:1a:de:36:38:4a:8c:cf:96:04:34:22:b6:
51:59:08:5a:95:e0:be:9b:86:e3:11:aa:df:5d:53:
8b:ea:96:81:e7:4a:ae:ca:29:50:22:49:f1:59:68:
84:51:44:32:94:03:7c:33:4e:5b:a5:c9:f9:c0:20:
c6:f5:28:15:f1:12:59:df:be:83:2d:5d:43:69:d8:
3f:d5:fa:03:4c:f2:f3:7c:f7:a8:11:9f:6c:f4:e7:
85:77:93:12:b4:f1:d2:27:b7:b7:8c:b0:76:fb:70:
64:63:af:c8:35:d1:69:21:e9:0b:e1:be:87:86:49:
0b:e9:06:55:c8:45:a1:c1:c7:c8:1f:32:13:eb:d9:
8f:d1:cc:d3:9a:a5:be:ab:a0:20:9e:be:b8:7e:22:
d0:fb:5a:d9:ae:d4:8a:16:d3:c7:9e:d3:2b:6b:ec:
7e:0c:ac:26:23:c2:47:ed:a8:7d:09:72:1b:0c:f9:
c3:65:6d:6a:8b:93:30:ad:1f:a7:db:43:b4:79:32:
fc:19:8b:b6:52:7f:a7:99:78:92:df:ef:73:72:7f:
74:76:fd:fe:79:5b:0b:20:b8:54:08:8e:ca:a0:33:
e2:cc:69:8c:c0:2b:4a:4e:ad:1a:91:63:a4:79:25:
4b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:51:A1:6B:3D:29:98:C8:BB:EF:DD:22:6A:10:6B:DE:27:89:73:8F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/21Ghaz0pmMi7790iahBr3ieJc48.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:38:db:03:45:81:77:59:1d:93:07:73:f8:e4:4a:cc:c5:72:
a2:b6:eb:b6:82:d2:5a:27:24:f6:51:d9:9a:7a:9e:f0:3d:bd:
1c:ea:34:88:fa:11:ed:8d:d6:a0:f9:38:e9:3c:57:d5:3b:da:
3e:c6:c1:71:51:fa:bf:be:01:02:85:ad:67:24:26:fc:04:66:
52:36:48:4e:59:8e:99:69:e6:59:90:cd:52:3d:0a:63:cb:70:
03:97:81:b9:fd:a1:d4:9a:3c:53:7a:f0:97:74:57:29:92:79:
77:30:00:30:e0:c2:b4:b6:57:8b:42:85:26:0f:0e:3a:22:bb:
2d:17:96:b8:7b:55:19:ac:aa:35:0c:78:cd:76:a7:60:3b:3b:
39:f1:27:22:11:8d:b3:d5:ca:24:8e:1b:5e:41:3f:23:13:f1:
9e:df:72:4d:65:37:47:30:40:81:82:dd:f0:65:af:55:42:26:
a9:34:c2:43:90:aa:d7:8b:9b:14:b3:c2:bc:a6:84:7c:db:60:
26:b6:94:a5:33:06:21:d7:74:9e:e0:cf:e4:bf:3f:02:ed:7b:
9c:b7:34:2b:01:86:5f:bd:80:74:50:4b:53:63:cc:a1:16:5c:
2c:a0:6b:21:71:df:29:b9:e8:48:e6:cf:3e:fe:a3:39:fa:c2:
e2:68:0b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 18:27:15 2024 by rpki-client on console-ams.rpki-client.org