Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/JIKv0ceVUP22sryraVbnsWSEboU.roa
File: JIKv0ceVUP22sryraVbnsWSEboU.roa (raw, json)
Hash identifier: w/oqutlIWowhRZPp6IRctSy/Eb6Aa3W2z1yMdqLmowQ=
Subject key identifier: 24:82:AF:D1:C7:95:50:FD:B6:B2:BC:AB:69:56:E7:B1:64:84:6E:85
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 032B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JIKv0ceVUP22sryraVbnsWSEboU.roa
Signing time: Thu 09 May 2024 07:55:03 +0000
ROA not before: Thu 09 May 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 811 (0x32b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 9 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2482AFD1C79550FDB6B2BCAB6956E7B164846E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:bd:a2:7e:f5:34:d3:a3:67:1c:33:12:36:
e7:55:b5:72:ab:b9:1e:aa:21:71:dc:99:b9:9a:e7:
45:b1:6b:72:e9:df:71:05:17:66:68:e7:43:bd:9b:
b8:d7:0b:66:c4:42:af:6f:c2:0e:c0:7f:a4:84:d6:
e1:3d:65:68:ad:87:70:f9:5f:50:ef:d0:9c:83:7f:
41:58:33:99:69:9b:2a:a1:9e:24:0c:f6:f8:07:c7:
7f:98:bb:2f:36:83:13:49:c2:24:21:22:e4:6b:7e:
d6:b8:b1:fc:77:ba:9c:e8:87:cd:a0:e6:6c:22:aa:
b4:be:20:80:09:d9:5f:4e:33:11:54:0b:32:53:8a:
9f:9b:f8:fe:38:a7:6e:ad:7f:73:23:aa:ae:7f:55:
75:2b:a6:82:a2:f9:48:16:13:4e:0d:fa:15:9a:ae:
9c:dd:56:24:b4:25:64:03:69:da:f5:9d:65:ae:50:
e0:b5:cd:a1:50:71:c7:b6:3e:df:49:72:b4:37:31:
e4:8d:18:17:74:6f:4c:5a:ad:1a:6e:59:ff:b4:70:
8d:10:30:1b:4a:3c:eb:bd:d6:a7:3f:75:17:78:ae:
be:d3:98:b0:66:a6:5c:3d:21:ee:4a:80:c7:7f:18:
6a:bd:3b:4a:d2:63:7d:92:2e:c1:e0:b6:5e:77:45:
5b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:82:AF:D1:C7:95:50:FD:B6:B2:BC:AB:69:56:E7:B1:64:84:6E:85
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JIKv0ceVUP22sryraVbnsWSEboU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c6:18:9f:53:2f:09:e8:45:fb:74:9f:33:8f:cc:cd:55:6b:
8a:29:91:29:fb:b0:3f:16:5f:88:34:39:b8:96:3b:e1:0d:f1:
cd:0d:c0:73:38:78:6e:8a:e0:ce:10:5b:60:30:f9:1f:fb:30:
01:e6:26:dd:72:35:06:ca:98:81:5b:1b:4d:4c:76:67:d8:58:
6b:d9:b3:ce:bc:93:d4:8d:f8:9c:6e:a7:ee:32:d2:63:35:b3:
79:fa:92:77:8a:ab:b9:8c:dd:07:fc:1a:a6:9d:82:4d:c9:10:
a6:ce:21:b0:3d:52:49:52:9b:42:fd:24:8d:78:72:57:fb:c7:
0d:eb:08:b1:da:68:fe:de:75:4a:57:02:15:26:c3:7e:94:9e:
88:0a:7e:dd:eb:38:00:29:41:c0:86:7b:5c:12:f0:31:e0:69:
ed:c9:72:24:53:e6:49:64:f7:dc:86:f3:aa:88:a0:0f:b6:2b:
51:1e:a6:79:67:93:42:59:83:8a:42:03:23:f7:6f:d4:ca:02:
69:2f:03:13:3b:00:a4:f8:43:ff:ea:d0:c8:fc:9b:e9:b7:2f:
d7:fe:cd:f1:e0:f2:3a:33:b4:8f:66:3e:fa:ff:07:0c:dd:93:
e2:94:af:09:ce:7c:48:16:69:77:f5:10:53:f9:15:05:ca:c0:
c4:57:07:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 14:13:49 2024 by rpki-client on console-ams.rpki-client.org