Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/9Kvp7Hf4wchg1T_4EEiM_SF2lxc.roa
File: 9Kvp7Hf4wchg1T_4EEiM_SF2lxc.roa (raw, json)
Hash identifier: DZLazuG+iBbqNO457y3BoISvTObvUokB1NpUECPsQWo=
Subject key identifier: F4:AB:E9:EC:77:F8:C1:C8:60:D5:3F:F8:10:48:8C:FD:21:76:97:17
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 02F2
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/9Kvp7Hf4wchg1T_4EEiM_SF2lxc.roa
Signing time: Thu 02 May 2024 23:55:03 +0000
ROA not before: Thu 02 May 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 May 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 754 (0x2f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 2 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F4ABE9EC77F8C1C860D53FF810488CFD21769717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:7f:ba:8d:c6:99:38:4e:f4:cf:35:4e:c9:
e5:97:5a:37:76:76:08:34:95:8e:72:18:fc:82:71:
cc:c9:5e:0e:a9:ca:b1:5a:43:86:93:52:44:e3:95:
e3:d0:df:11:5f:c4:b1:a9:00:d6:76:a8:7d:33:ff:
5b:34:2f:cf:2f:88:7d:5e:4a:f3:23:23:b6:6c:3e:
a9:0e:67:4b:0d:57:46:08:4f:a7:ec:c7:22:a8:c5:
77:68:21:87:15:73:c4:4a:57:aa:a9:99:2e:74:76:
16:b2:17:51:d6:ac:83:81:68:44:7a:17:a8:5e:d9:
3b:16:f9:76:34:65:55:17:4b:ed:c6:04:1b:2d:38:
e2:a8:9a:64:5a:63:f8:6c:09:fa:1e:6e:74:88:6f:
ce:8d:db:f7:51:a2:7c:f3:5f:71:40:fd:1e:58:c7:
02:fb:29:c5:6b:e5:8b:11:6c:e7:5f:8c:7f:71:3a:
93:fd:4c:34:d4:2d:de:4a:ee:70:df:cf:9a:13:a7:
73:ba:00:f1:82:4f:16:1c:14:dc:2f:75:2b:88:aa:
8f:ab:8f:27:4b:78:10:46:4e:92:ac:0c:0b:92:4e:
81:2a:f3:47:3f:03:88:08:ce:62:ab:b8:b3:a5:70:
49:d9:41:2e:4a:76:80:a0:03:41:2e:4c:4f:d5:9a:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AB:E9:EC:77:F8:C1:C8:60:D5:3F:F8:10:48:8C:FD:21:76:97:17
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/9Kvp7Hf4wchg1T_4EEiM_SF2lxc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:5a:65:9e:22:c7:ce:79:0d:63:99:1c:f6:9e:43:73:f5:61:
e7:0c:3f:3c:53:7c:51:dd:b4:71:30:92:1d:3f:64:f3:3e:ef:
1a:2f:fd:ef:64:d3:b2:89:a9:da:84:28:6b:5e:9d:cc:59:c5:
9a:c3:fd:78:f5:a3:9d:94:89:53:54:3c:78:27:2e:0b:ff:8f:
bf:0a:98:32:c5:0a:b4:ac:48:77:2c:61:9a:48:38:99:17:18:
d2:27:af:d8:a9:cc:06:6c:a4:73:c9:72:87:e1:f3:1a:c1:ec:
6f:74:8c:05:13:de:bd:52:33:c7:00:f0:ec:fb:7e:d8:2e:1c:
d4:98:96:43:8c:9f:72:2f:3f:43:1e:fb:c8:56:46:93:d1:4b:
ac:a3:60:b0:79:77:13:90:b8:70:fd:db:41:aa:dd:68:19:5f:
bc:89:5a:15:58:dd:13:d8:c0:a6:d1:73:81:e9:48:82:06:21:
cc:09:fe:3e:f1:e8:c9:d3:68:70:7e:1f:c6:62:42:e2:7b:15:
cc:02:6d:c4:28:f8:f7:ab:c9:fb:ee:22:90:2e:cd:87:34:5f:
89:37:df:f9:69:33:ff:89:69:4d:65:7e:b0:c3:a7:fc:5e:c5:
0c:87:46:bc:9e:c8:26:5e:0d:22:a7:4d:cf:02:24:0a:b0:69:
e6:8c:3d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:43:18 2024 by rpki-client on console-ams.rpki-client.org