Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/F5vw4p_8XFn6NdqGMs9IEaPMjfA.roa
File: F5vw4p_8XFn6NdqGMs9IEaPMjfA.roa (raw, json)
Hash identifier: EX8Rhd8BAftalLPdjUObEytkvkXzLRkB1xdk8ZCM9pE=
Subject key identifier: 17:9B:F0:E2:9F:FC:5C:59:FA:35:DA:86:32:CF:48:11:A3:CC:8D:F0
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0343
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/F5vw4p_8XFn6NdqGMs9IEaPMjfA.roa
Signing time: Sat 11 May 2024 23:55:03 +0000
ROA not before: Sat 11 May 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 May 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 835 (0x343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 11 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=179BF0E29FFC5C59FA35DA8632CF4811A3CC8DF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:86:64:10:04:c5:c8:9d:80:48:52:e6:2d:
4f:44:2b:a0:09:04:bf:9c:34:6e:50:b0:cd:15:c4:
9c:05:c6:e2:d4:50:db:c0:71:3e:e2:8a:ef:5a:24:
54:b6:dd:cf:9b:1c:ff:87:d3:35:04:b9:fa:20:2e:
df:0a:3b:21:4a:5f:d6:b3:ae:3a:ec:c4:ea:b1:ec:
2c:8d:60:2f:9b:8e:e5:b5:16:5e:58:d0:f4:16:d0:
3d:28:81:e7:89:39:32:bc:d6:4e:15:34:cc:4d:bb:
05:9b:74:2e:5d:e4:b9:7d:95:06:0f:6f:cf:0d:9d:
77:e9:ab:25:ce:0f:01:a0:ca:9f:c4:65:c4:d9:35:
33:8d:76:b1:bf:ea:66:98:63:37:51:1f:a5:9a:d3:
4d:81:23:08:9a:df:1b:5e:d3:8b:4e:1d:0b:c2:b7:
52:49:b9:6d:65:49:59:bb:4f:f0:2a:aa:21:44:02:
02:81:6f:77:18:31:da:de:02:ef:b5:dc:84:8e:ee:
27:1e:64:ab:d0:68:ba:c2:cd:10:68:e3:ab:d5:00:
12:aa:80:3f:f4:05:2d:af:36:9b:fc:f5:a8:b1:a0:
9a:79:5f:68:c6:51:6c:a3:f5:1e:b9:24:7d:de:8d:
45:2f:f0:2e:ce:89:69:a3:be:df:ee:62:21:6e:30:
1a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9B:F0:E2:9F:FC:5C:59:FA:35:DA:86:32:CF:48:11:A3:CC:8D:F0
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/F5vw4p_8XFn6NdqGMs9IEaPMjfA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:b1:6a:2d:9b:8e:39:81:a4:77:3c:18:13:3f:2e:6f:d3:69:
d5:91:b0:b5:f5:89:2a:f4:27:19:7e:4c:ad:b5:8d:82:cb:b2:
90:ae:b6:ef:0f:12:5f:80:e4:81:d8:8e:48:84:d1:e3:20:25:
5d:7b:8d:5c:33:06:ac:fe:0b:6c:a8:2f:66:09:e1:e1:c6:dd:
c5:11:52:40:70:19:5f:b6:1a:23:20:d3:11:32:71:78:39:2d:
69:d9:85:fa:9d:14:26:a7:5c:08:c7:4d:ba:b5:f2:56:dc:bf:
5d:7e:b4:c1:75:32:85:5c:1a:f8:f0:cb:3a:25:eb:6b:ba:cb:
ea:9c:01:a4:ab:6b:c9:07:50:f1:43:a8:05:9a:90:c0:7d:e5:
23:44:78:ed:89:25:0c:b5:da:ea:48:a9:59:9e:9a:14:a9:cc:
5a:c8:9e:3f:6d:f0:17:83:04:a1:38:f9:68:c3:52:b6:a5:6b:
7f:cf:ed:ec:69:6b:60:36:08:de:12:29:c8:78:79:e8:89:50:
76:b4:e3:0b:3c:d3:40:d2:16:86:89:c5:46:73:8f:f2:49:1a:
52:65:81:33:59:b5:8d:8b:ff:56:f3:b8:ae:82:36:e4:7c:07:
51:7b:6c:80:f5:0c:8d:27:77:1b:f0:6f:d4:ee:b7:e4:de:c6:
35:cd:1f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:58:40 2024 by rpki-client on console-ams.rpki-client.org