Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/48TGh5UXrogvS1yqkCcyfU6NBig.roa
File: 48TGh5UXrogvS1yqkCcyfU6NBig.roa (raw, json)
Hash identifier: OLG5baVa4QMnI/6A+yK9WUoLXq4P2hYxij1e10YZJdU=
Subject key identifier: E3:C4:C6:87:95:17:AE:88:2F:4B:5C:AA:90:27:32:7D:4E:8D:06:28
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 050B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/48TGh5UXrogvS1yqkCcyfU6NBig.roa
Signing time: Mon 01 Jul 2024 15:55:02 +0000
ROA not before: Mon 01 Jul 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1291 (0x50b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 1 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E3C4C6879517AE882F4B5CAA9027327D4E8D0628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:3d:ab:52:d1:88:aa:6e:57:0a:22:2a:fc:
4f:c0:a5:8b:35:ed:de:5f:ea:0c:ab:4a:9d:6f:af:
e3:98:21:72:e0:af:aa:96:7a:fc:fd:59:d8:04:2e:
1d:51:4e:49:ec:b3:91:81:73:7e:56:81:11:96:25:
04:4d:81:fc:72:0e:ac:4d:26:6c:62:26:11:d7:ee:
38:0e:ca:81:90:44:e5:c2:4c:66:c9:21:a2:2f:98:
03:fd:50:6d:53:bb:ee:5a:05:ba:5b:b4:d6:a6:5e:
de:94:09:bc:e0:3e:ed:58:b1:10:4c:d4:37:8d:8f:
23:52:6d:e8:58:92:22:3c:ba:4f:8b:af:0e:83:41:
a7:5d:54:f1:5e:c0:23:1a:b0:a4:d5:36:3a:45:e1:
40:75:4f:d8:1d:96:79:23:5f:99:1c:a4:b8:d9:80:
f7:ee:cc:a8:8e:96:8d:72:be:93:c5:f0:17:73:e5:
78:07:4c:ea:6c:ef:3a:ce:17:c5:8b:3c:90:6d:2c:
98:a8:24:51:55:f4:b4:c5:8d:e9:47:8d:cd:32:94:
29:85:41:c4:8a:c8:ea:16:c4:25:64:a7:5b:3a:66:
3e:ee:d5:19:78:7d:6f:64:48:90:89:48:4a:08:c4:
03:82:95:b9:10:3c:c5:7d:22:58:cb:61:91:57:d8:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C4:C6:87:95:17:AE:88:2F:4B:5C:AA:90:27:32:7D:4E:8D:06:28
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/48TGh5UXrogvS1yqkCcyfU6NBig.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5e:8d:01:6c:9f:4a:22:66:f4:d1:5a:ba:ab:c3:e6:33:2f:
64:a2:94:ed:82:26:17:eb:1c:e2:ce:78:75:a7:94:35:66:b6:
fb:c3:dd:2f:6f:d8:bb:7a:4d:44:7a:78:60:8c:3d:aa:75:76:
44:a6:97:0b:c5:bd:39:bc:3e:cb:27:d3:50:9d:f4:fd:91:1d:
1b:06:e4:02:34:d5:16:2c:91:62:10:75:81:9e:ca:fc:b8:c6:
54:30:77:30:21:46:94:b2:d3:91:a2:da:23:df:08:54:b5:6a:
85:20:ca:be:7a:6a:1e:8a:8d:c0:54:eb:c9:30:45:a7:19:27:
13:2c:e2:80:fb:4f:fe:5a:c2:00:f4:39:93:c6:b1:9a:b0:ee:
96:46:f0:52:89:29:92:55:72:4e:1b:93:aa:1b:fb:c5:56:57:
da:4c:a7:4b:a8:f3:1c:cc:05:bb:b7:18:b4:ad:7f:ed:5b:d0:
7c:7b:14:eb:ac:e1:97:22:04:b9:f2:29:b8:99:cf:65:3f:1d:
22:cf:63:11:5a:f8:78:3d:a8:fb:2e:4e:34:61:ef:bf:0b:ba:
12:27:28:0a:83:f6:f3:36:16:4c:a7:a5:6b:8d:ed:a2:91:f4:
31:d3:81:0a:b9:53:42:94:a2:7b:2e:d6:ba:54:15:9f:09:77:
d9:60:95:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 21:05:34 2024 by rpki-client on console-ams.rpki-client.org