Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/44HnwXCF8t0K9fmOVErdztNQISY.roa
File: 44HnwXCF8t0K9fmOVErdztNQISY.roa (raw, json)
Hash identifier: 2FZS0ruungJOxeCbTzFz+EGEtTWoWzZ/ngiof5cVNjw=
Subject key identifier: E3:81:E7:C1:70:85:F2:DD:0A:F5:F9:8E:54:4A:DD:CE:D3:50:21:26
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 9A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/44HnwXCF8t0K9fmOVErdztNQISY.roa
Signing time: Mon 26 Feb 2024 07:55:03 +0000
ROA not before: Mon 26 Feb 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 26 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E381E7C17085F2DD0AF5F98E544ADDCED3502126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:c0:5b:02:26:16:52:55:71:4b:77:4c:73:
93:c5:62:57:04:b8:bb:a9:6c:9f:cb:4a:a5:38:3d:
bd:ba:dd:52:e9:7c:1d:a6:04:df:98:3e:73:27:60:
17:cd:6a:ca:16:af:fd:e8:ba:c5:72:9f:e6:53:a1:
60:a1:9c:2b:5b:62:5a:40:fe:7b:70:88:e3:c0:52:
6c:b7:b9:49:eb:da:d9:0d:9e:74:ac:e4:6d:85:4f:
97:f0:33:f0:88:8a:5a:01:0e:76:32:60:3d:29:3b:
5a:2f:3a:48:f2:36:36:0e:f1:db:d7:47:27:0f:5a:
2b:d3:07:3c:83:73:00:6d:2e:eb:3d:7a:fd:5d:41:
40:c5:16:d2:8d:6e:93:b9:ce:e1:af:5a:af:29:f9:
dc:9b:7f:7f:e6:e8:5c:07:1c:49:55:5d:5c:ff:47:
49:eb:d9:9e:ae:77:06:97:3f:bf:db:63:4b:bb:c3:
25:39:dd:2d:cf:58:dd:f0:c2:b6:39:c7:9c:89:ae:
82:64:de:38:56:7b:34:2a:e8:87:46:1d:43:ad:85:
c7:36:68:0a:25:f3:b4:be:1e:28:6d:62:2e:3a:41:
c5:5d:0a:c6:a7:9c:39:ae:bc:ea:f1:66:af:a4:23:
4c:28:73:c6:42:08:73:62:86:25:de:29:f0:76:22:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:81:E7:C1:70:85:F2:DD:0A:F5:F9:8E:54:4A:DD:CE:D3:50:21:26
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/44HnwXCF8t0K9fmOVErdztNQISY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8c:76:be:de:68:8c:5b:6b:32:f9:79:f8:cb:19:38:c1:1f:
bf:f0:6e:0a:a5:d1:b9:09:bc:27:7f:79:5e:b7:f1:b9:5e:8d:
b9:ba:5f:12:3d:ad:2a:f1:a1:29:47:e0:09:79:b2:2a:32:74:
91:af:df:80:db:09:a1:ec:c8:d6:50:f2:0d:56:b6:ef:b8:32:
7d:67:f2:e2:21:73:46:cf:af:2d:0a:a8:80:b8:95:0c:59:31:
f6:79:b9:fe:a9:3e:5b:ed:75:4c:d0:ac:cc:96:3b:c7:8a:07:
04:18:08:37:1c:9c:37:e1:cd:d6:62:9e:6f:ab:30:04:5f:13:
8a:4b:b3:61:dd:92:74:4b:be:d6:95:c2:e9:2a:b3:48:54:49:
9e:cb:37:a7:6d:90:1d:ca:87:3e:33:ce:b8:d7:cd:ce:86:5a:
ac:7c:0d:3a:bf:77:67:3d:bc:66:8c:5c:92:a2:01:7e:bf:25:
67:16:0a:c5:02:a2:cb:71:cf:f2:64:ee:5c:6f:2a:42:c6:54:
77:b8:aa:64:25:fe:2a:a1:4b:2f:b9:85:8e:f0:c5:05:69:82:
3c:f4:b6:41:b6:f6:53:4f:f0:06:2d:fa:64:9b:96:41:b1:29:
d8:10:44:10:d1:90:30:d7:b5:e3:ed:96:42:5a:92:50:ee:3c:
53:17:d6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 17:17:04 2024 by rpki-client on console-ams.rpki-client.org