Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Kgyb0tGn6r3eDSRDkd2dmwKFcdw.roa
File: Kgyb0tGn6r3eDSRDkd2dmwKFcdw.roa (raw, json)
Hash identifier: 5Kx/SukAWQT/ZG4Mv5mK/phAjeDZAE12TqmwXqP0VQ8=
Subject key identifier: 2A:0C:9B:D2:D1:A7:EA:BD:DE:0D:24:43:91:DD:9D:9B:02:85:71:DC
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 03BB
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Kgyb0tGn6r3eDSRDkd2dmwKFcdw.roa
Signing time: Sat 25 May 2024 07:55:02 +0000
ROA not before: Sat 25 May 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 May 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955 (0x3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 25 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2A0C9BD2D1A7EABDDE0D244391DD9D9B028571DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:0f:0f:5e:de:c2:0b:26:31:35:46:b7:0f:
8b:e6:34:da:65:68:ae:b6:51:dd:54:72:87:23:24:
7e:b3:31:47:d5:14:bf:07:c0:cf:78:0c:6f:c4:af:
39:54:4f:04:a3:cb:c1:14:e3:55:0d:9a:17:ea:c8:
96:9a:7e:2a:9a:2d:89:db:fa:07:69:76:6c:ae:a3:
85:e0:a8:f5:41:9a:72:2b:d8:a4:16:00:f1:73:32:
07:d5:86:c9:69:a0:2a:f9:9a:a6:88:6d:33:e0:97:
58:c5:a0:57:0d:55:e5:ad:dd:18:9d:09:45:3b:83:
6e:67:5f:b5:70:af:79:85:1c:d3:f9:d6:c1:6f:19:
49:bf:7c:49:eb:a1:28:ca:7c:e0:1e:23:d1:c3:da:
40:b2:de:ee:03:98:34:20:5e:c8:aa:fd:9a:57:a2:
1e:37:05:f5:61:2c:ea:20:1d:ee:51:ba:53:12:80:
04:0a:3f:04:1c:99:9b:d6:43:db:bd:b0:cc:7f:e1:
3c:ec:1b:75:d9:72:01:23:de:a0:9e:c8:da:a6:e6:
66:07:30:ff:2c:70:87:af:d8:c6:ff:7d:d7:c3:8a:
3b:66:a3:1e:b2:9d:f1:0f:4b:65:33:94:0b:0b:c3:
0c:9f:89:03:b0:8c:9b:81:ae:ac:b0:b3:89:14:4a:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0C:9B:D2:D1:A7:EA:BD:DE:0D:24:43:91:DD:9D:9B:02:85:71:DC
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Kgyb0tGn6r3eDSRDkd2dmwKFcdw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ef:50:37:4a:f2:c2:d1:01:e1:ce:f3:fb:6d:1a:0e:78:3a:
5d:da:6c:3a:17:fa:f4:9e:12:4b:27:45:7d:f4:4b:2f:a5:91:
81:10:ae:83:a5:5f:98:02:7d:f8:e0:0f:89:e0:9b:6f:ed:61:
4a:ff:8f:34:74:b2:eb:96:10:1b:c4:9c:4e:ff:ae:c8:a3:c6:
17:35:39:f8:e4:db:28:31:c3:60:53:6b:cd:be:f0:fb:a0:55:
4c:ee:53:56:cd:80:21:a0:d0:93:1a:cc:05:ec:c7:38:b5:99:
48:f1:a9:70:7e:6a:04:8b:92:95:a3:d1:58:7d:87:e6:22:e6:
48:14:0b:65:8f:4d:1f:9b:78:b8:1b:89:5f:58:26:2a:dd:d9:
63:c9:bc:a9:44:bb:1d:41:76:6d:0b:2c:09:4f:7e:1b:83:26:
de:f1:81:57:02:37:fa:cd:e3:c4:a3:93:24:eb:19:90:fc:7c:
7e:76:16:ef:b2:ae:a3:73:b5:55:79:89:07:23:09:32:3a:4d:
fe:44:a1:d5:96:29:fc:c3:c4:cb:7e:f7:52:c6:4f:36:11:f8:
17:46:03:f4:fe:96:3d:44:b1:07:cb:ff:e7:dd:23:cc:75:13:
7e:1c:53:82:db:1a:0a:10:59:32:25:c3:40:6d:bd:2a:9b:6b:
cb:5c:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 12:54:30 2024 by rpki-client on console-ams.rpki-client.org