Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/JaiG3CC4Dkl2vnBSNMlfOkNDb5M.roa
File: JaiG3CC4Dkl2vnBSNMlfOkNDb5M.roa (raw, json)
Hash identifier: WOOx3tcP1v2GPMlPqWeQRG+uHANo5MaIGQSLS0B8qis=
Subject key identifier: 25:A8:86:DC:20:B8:0E:49:76:BE:70:52:34:C9:5F:3A:43:43:6F:93
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0865
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JaiG3CC4Dkl2vnBSNMlfOkNDb5M.roa
Signing time: Fri 04 Oct 2024 23:55:02 +0000
ROA not before: Fri 04 Oct 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2149 (0x865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 4 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25A886DC20B80E4976BE705234C95F3A43436F93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:a1:5f:2f:a6:6f:c5:21:4e:84:a2:76:18:
b7:44:be:63:5c:b0:cc:4d:22:12:86:f3:99:19:3e:
84:7d:e4:03:d8:5a:6e:a0:a3:9e:63:61:c1:56:e5:
b9:35:47:b7:80:82:90:2b:89:c7:91:4b:37:e1:7b:
40:84:f1:f1:6d:67:4b:4f:4c:e8:aa:54:ee:75:f6:
25:d7:59:83:c2:1e:ba:b3:cc:5b:15:1f:49:69:df:
d0:c9:8e:66:3d:8b:6a:11:cc:3b:db:e6:7f:5c:04:
f6:a5:21:16:9a:39:e2:c3:dc:fb:06:0c:75:ab:dd:
e1:98:c8:c6:c2:9e:4e:0f:73:d4:ed:ba:0f:6f:77:
3d:4c:bf:ee:bf:52:b1:fa:a4:ca:70:95:10:da:6c:
70:67:d6:6e:cf:81:c5:7d:2a:c2:24:7e:b2:9e:9f:
f3:3a:13:66:a1:89:7c:73:f1:fb:dc:d9:77:d6:e3:
2b:b6:9b:e5:32:68:d3:22:70:35:1b:16:92:d5:3d:
32:07:43:30:a5:34:d6:10:e4:d3:4e:e3:ba:0b:31:
db:a1:9e:3d:4e:07:5a:8b:86:2c:39:c0:8b:9b:8d:
65:25:13:45:e9:75:0a:8c:11:77:b4:1a:f8:57:05:
93:22:c4:a4:d6:7a:cf:fd:23:41:3f:9c:de:3d:ba:
c7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A8:86:DC:20:B8:0E:49:76:BE:70:52:34:C9:5F:3A:43:43:6F:93
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JaiG3CC4Dkl2vnBSNMlfOkNDb5M.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:24:d7:e1:dd:22:a0:a7:a7:c6:a7:2c:45:22:d1:ae:0b:d1:
72:6e:f2:64:df:4c:ae:09:c4:8a:78:9d:fe:a7:8d:00:94:6a:
2e:81:b6:3b:af:95:b4:65:24:7b:c3:aa:e5:ce:10:e8:cf:ff:
70:d4:62:76:fd:72:b1:96:19:da:10:b4:9c:21:fd:fb:53:be:
f8:3c:11:fa:de:44:36:5d:04:71:3f:7b:97:0b:45:da:c2:61:
d5:73:3b:e1:96:c0:0c:0d:fe:af:d8:bd:32:22:f2:6f:fa:f9:
84:88:d8:af:5a:fa:02:0a:f6:37:3a:57:bf:56:59:03:be:de:
cf:4a:e6:c6:2c:54:e1:6c:96:8e:f7:b7:f1:19:a4:63:b2:88:
a4:04:44:31:39:79:47:4a:4e:77:9d:fa:ab:d8:43:c9:14:77:
43:f0:69:58:2c:27:c7:a2:f8:79:c3:6e:2a:cd:0d:8d:34:98:
f3:6f:50:6b:06:c6:98:71:79:87:2b:57:91:8c:c3:b1:2e:1a:
a0:ac:69:4a:90:9f:59:85:62:c1:15:b4:d4:8b:4a:05:20:67:
09:11:29:eb:c6:61:8f:de:a7:25:2f:99:25:44:9e:8e:d1:d6:
10:be:14:60:84:61:df:01:f2:b7:8c:c2:99:24:de:69:b2:d4:
b9:f7:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 05:52:53 2024 by rpki-client on console-ams.rpki-client.org