Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Kaupk6SZAZCPQjX0N7wPxjl4KZQ.roa
File: Kaupk6SZAZCPQjX0N7wPxjl4KZQ.roa (raw, json)
Hash identifier: k3G/exG9s9ARSG7Y42suL6RYqS0BWTTLVul9Jnr2sEE=
Subject key identifier: 29:AB:A9:93:A4:99:01:90:8F:42:35:F4:37:BC:0F:C6:39:78:29:94
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0148
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Kaupk6SZAZCPQjX0N7wPxjl4KZQ.roa
Signing time: Sat 16 Mar 2024 15:55:03 +0000
ROA not before: Sat 16 Mar 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Mar 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 16 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29ABA993A49901908F4235F437BC0FC639782994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c0:6f:66:45:3d:9f:46:aa:c2:c1:ee:8a:66:
0b:15:08:84:2d:54:65:8e:5f:b9:a4:c6:79:bd:12:
ec:a3:95:8a:40:1f:45:07:7f:b2:af:05:8c:14:d6:
89:d7:37:7b:84:5d:71:42:a6:cf:eb:e3:27:f1:2c:
66:64:ee:ba:be:8b:36:48:44:2c:86:42:3f:89:a2:
6b:20:6c:fd:47:50:3c:98:ca:f8:ad:7e:7a:f0:cb:
5a:08:53:77:6b:74:7b:12:01:17:ad:60:b9:b2:67:
02:cc:ab:61:55:6b:c5:f4:e7:be:3c:66:c1:c5:3f:
63:ac:f9:80:40:43:d8:e4:e1:e0:e0:af:69:9d:6d:
ce:32:70:e2:a4:e1:6a:47:cd:28:e1:c4:7d:7a:97:
41:e6:9b:77:d9:29:4a:ba:e2:97:7a:b1:ec:da:27:
4a:b9:1d:39:3d:26:4e:b4:9b:75:8d:1d:9e:b9:18:
bd:9b:3b:26:12:f9:6f:6e:70:2a:6f:61:44:87:47:
b9:46:7c:eb:2e:62:fe:b9:56:e2:c4:8c:48:a8:4d:
77:b4:02:d6:14:bf:7b:1f:97:1d:55:87:29:31:dd:
53:5c:4c:52:4f:4a:7e:34:7f:5b:7a:54:36:23:bf:
b8:d3:d4:af:f6:64:b5:00:6d:41:b2:6f:c7:8b:3a:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AB:A9:93:A4:99:01:90:8F:42:35:F4:37:BC:0F:C6:39:78:29:94
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Kaupk6SZAZCPQjX0N7wPxjl4KZQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:5e:00:8b:5c:6a:a1:8e:31:6e:db:f8:ab:f6:91:f3:cb:28:
3d:6f:4d:74:f9:9c:dd:0c:22:3d:37:22:1f:0b:28:b6:77:82:
3a:a9:c8:0c:6d:ce:d0:81:76:f3:f5:e9:0f:7c:98:95:fd:de:
77:00:29:28:0d:bb:24:46:99:82:77:bc:92:e2:8d:42:a9:26:
b5:9c:96:a6:08:0e:70:5d:1e:06:7d:48:37:de:d6:bc:50:28:
13:e2:19:99:8c:83:c1:15:12:c0:b3:c9:2c:8b:07:e9:58:42:
f0:8e:0a:99:66:53:a2:7d:c6:d5:ff:de:87:28:5a:bd:9a:0a:
55:68:fb:ec:e0:a4:2a:35:13:93:f6:d3:1c:d3:04:67:19:97:
88:89:fd:8a:0d:bb:b1:1d:4f:73:2b:6e:f3:16:04:f2:50:18:
16:68:5d:51:e0:2e:d4:ce:24:42:86:25:b5:65:5d:02:20:76:
0a:09:e4:cc:63:dc:1d:03:bf:37:14:25:be:aa:cf:50:08:1a:
b8:77:dd:7d:87:98:fa:72:33:bf:39:72:3c:cb:92:c0:64:43:
89:e3:3c:af:cc:59:13:cb:db:f4:50:b6:22:c4:bd:64:c8:80:
ad:9b:c7:48:27:46:cd:c5:bc:00:c2:ce:25:40:f6:b4:78:ab:
b0:7f:e9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 16 20:44:00 2024 by rpki-client on console-ams.rpki-client.org