Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/B-KV-qyvC7wM-vwBntfMYSOZGmY.roa
File: B-KV-qyvC7wM-vwBntfMYSOZGmY.roa (raw, json)
Hash identifier: a19ISNVVH7a4/8ViPpdmXZYBy8KcmpJWDrRDLjBVMis=
Subject key identifier: 07:E2:95:FA:AC:AF:0B:BC:0C:FA:FC:01:9E:D7:CC:61:23:99:1A:66
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 01D8
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/B-KV-qyvC7wM-vwBntfMYSOZGmY.roa
Signing time: Mon 01 Apr 2024 15:55:04 +0000
ROA not before: Mon 01 Apr 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 1 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07E295FAACAF0BBC0CFAFC019ED7CC6123991A66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:55:de:e7:b8:6e:54:cf:d2:b6:be:60:aa:e8:
44:bf:93:02:33:a0:96:67:95:ac:18:78:96:9a:ee:
e7:36:9d:12:d0:4d:68:db:e6:da:72:15:01:d5:26:
25:a2:9a:ff:43:89:c2:9e:1f:07:dd:93:52:3f:2c:
9e:08:8e:49:0a:cc:39:3e:ca:01:69:1f:75:a9:e0:
f6:e3:f8:aa:b6:6b:7c:28:28:86:cf:ae:11:90:28:
66:9c:71:e5:b3:8b:cc:6f:b8:61:5a:64:b1:ce:4b:
01:97:21:32:70:68:b8:68:ef:ed:54:4d:e0:96:ed:
11:b2:47:a7:53:7d:1a:de:ee:d8:2d:43:3e:8d:9e:
cf:f3:ad:d0:5e:7c:ca:66:1e:fc:83:eb:a3:bb:4b:
9e:b7:dc:12:c4:0e:c1:73:c9:7a:2c:75:6e:33:a0:
ec:d8:9d:6b:96:19:2d:b3:c6:81:b9:56:bb:12:ea:
71:11:bd:a0:8d:2c:95:39:94:d3:5b:2d:1c:f5:15:
18:f3:7b:72:98:8a:fb:21:ad:35:1b:e6:5a:eb:ca:
8b:93:f2:55:23:40:e0:af:8e:04:17:e2:cd:e8:47:
37:3e:dc:a8:fc:ec:9b:4d:29:82:32:d0:f0:c1:b3:
12:c8:00:ae:f2:22:28:96:bc:59:da:3c:d6:3e:83:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E2:95:FA:AC:AF:0B:BC:0C:FA:FC:01:9E:D7:CC:61:23:99:1A:66
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/B-KV-qyvC7wM-vwBntfMYSOZGmY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
08:dd:bc:08:de:8d:f1:c1:aa:16:6f:e5:83:1f:2c:65:f1:4e:
76:06:5f:a7:27:78:34:a6:0b:ef:97:df:cc:3e:a8:21:40:25:
ae:57:f5:97:ae:6e:fb:7e:3c:76:25:64:03:18:07:eb:88:30:
3b:41:4a:6b:a5:cd:fb:96:c7:2d:6e:4d:89:96:f3:b5:c0:f5:
9a:80:40:35:c3:06:9e:91:e8:2d:3b:3a:13:0d:a8:0b:c2:b6:
e1:10:a9:66:06:f0:14:d2:b7:d2:15:73:1f:96:17:50:3e:7f:
b1:ef:6b:5c:f0:89:6a:dc:68:cb:1d:12:8a:79:fe:2d:69:b1:
5f:66:42:a5:8a:d0:be:b4:a8:9f:ca:de:43:24:4a:97:c0:b1:
16:b4:ef:fc:9f:a2:14:19:12:27:86:32:50:39:05:dc:b4:ea:
6a:19:7e:bb:67:ac:5c:69:9b:75:fd:9d:18:8b:51:43:70:35:
1b:35:d0:43:f5:fb:8e:88:a4:78:12:d2:34:d5:b0:c2:e7:e2:
2a:50:34:00:e4:e8:66:2f:cd:25:04:ef:92:df:19:41:f0:f2:
7f:95:8e:c2:b5:6e:bc:9a:fc:69:b9:fb:84:57:41:8c:d4:3e:
9f:5c:5e:66:88:3a:a4:04:88:82:66:cd:8c:33:44:cf:4b:5f:
cf:23:ee:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org