Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/EmMkLlXE4s5uWtikD20SjeHE00I.roa
File: EmMkLlXE4s5uWtikD20SjeHE00I.roa (raw, json)
Hash identifier: nAyeLp/lGUuBIENWwD00kDQFgX0rC/ZHGK9/JyylOT0=
Subject key identifier: 12:63:24:2E:55:C4:E2:CE:6E:5A:D8:A4:0F:6D:12:8D:E1:C4:D3:42
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 010C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EmMkLlXE4s5uWtikD20SjeHE00I.roa
Signing time: Sat 09 Mar 2024 23:55:03 +0000
ROA not before: Sat 09 Mar 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Mar 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 9 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1263242E55C4E2CE6E5AD8A40F6D128DE1C4D342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:4e:12:83:9c:dd:26:b3:fa:f7:3f:b0:a7:
33:0a:65:2e:6d:03:d8:ba:72:79:59:77:2e:a5:1a:
1b:bf:1c:4d:3a:af:4d:97:6e:bf:7a:37:89:c1:6c:
55:2b:48:7e:e7:c2:dd:7a:9e:ee:63:44:9e:1b:e2:
bd:c1:28:11:72:fa:57:7c:4a:fc:66:04:ed:2b:2b:
23:65:cf:a3:21:b6:02:e8:05:5c:c1:6f:df:37:61:
06:f5:b2:d3:b7:b3:8c:6b:fc:bc:05:f5:ba:26:41:
07:55:d7:d5:f1:37:24:3a:54:3e:e4:03:b5:13:76:
1d:7a:c9:ab:1b:d9:3a:2b:b1:9d:bb:b3:06:b7:7a:
59:a2:d7:72:4e:05:d2:5e:65:70:0a:7d:6e:d2:cf:
c5:4b:7b:12:0d:5b:dc:96:90:85:fd:d9:7e:ec:df:
0a:51:58:8a:43:da:06:52:4a:12:b4:d5:ce:4c:5d:
2a:5b:02:1d:8b:0b:44:14:d9:d0:34:08:ae:c6:83:
34:8f:17:88:bb:66:4f:34:06:fb:e6:89:6d:cb:e7:
10:a3:40:77:cf:8f:f0:0f:58:e0:c0:ce:ec:59:0b:
92:f4:e3:25:c9:2b:04:07:db:89:68:c0:2d:a2:25:
76:18:72:07:3a:61:9d:51:17:d0:23:46:88:f7:00:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:63:24:2E:55:C4:E2:CE:6E:5A:D8:A4:0F:6D:12:8D:E1:C4:D3:42
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EmMkLlXE4s5uWtikD20SjeHE00I.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c4:3e:16:3f:f7:e0:a1:84:c7:bc:89:50:dc:c2:eb:c3:4b:
df:5b:d8:c0:1f:92:7a:5f:3f:c2:bd:65:0c:f5:5b:67:59:12:
c2:6a:23:04:bc:83:80:a5:de:8b:a9:cd:4c:70:3a:71:08:fd:
c9:7a:67:0e:40:76:2b:35:38:d8:f6:49:96:32:41:5d:ad:77:
02:1b:5b:ed:65:dd:d9:55:83:45:b6:84:7a:b3:88:fe:6f:82:
88:c0:28:da:41:83:3a:9e:e8:a1:df:2f:55:8f:0e:4d:79:1f:
6b:84:b1:96:a4:b4:4c:87:f2:2c:bb:62:75:a5:02:b0:59:23:
51:7c:1d:83:87:fa:37:8e:c9:53:9f:a0:67:07:3e:cc:0b:2b:
5d:20:ff:67:b0:89:74:64:c4:7f:62:6d:27:63:96:00:52:97:
84:e0:c7:ab:1a:fa:cd:dc:31:15:45:36:d6:0e:f7:d9:d9:f7:
2f:22:7e:bf:ff:16:6f:a8:98:51:6a:21:93:4e:a0:b0:f9:48:
cc:62:1b:68:19:f7:19:04:71:5e:39:a2:63:df:94:91:f6:59:
48:97:04:e1:24:f6:4a:14:2b:53:b2:3f:16:45:96:e2:3d:9a:
65:84:a2:e2:04:7e:94:b8:5d:9c:30:f9:15:6c:95:38:34:d3:
0a:21:a9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 10 08:31:07 2024 by rpki-client on console-ams.rpki-client.org