Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/KoMmyhB3gZPqsDg6jAZfT3ctX5g.roa
File: KoMmyhB3gZPqsDg6jAZfT3ctX5g.roa (raw, json)
Hash identifier: iY0VJVu39wBk/eKjinECc3hIM7KyUxyFnc3OCe2rj/M=
Subject key identifier: 2A:83:26:CA:10:77:81:93:EA:B0:38:3A:8C:06:5F:4F:77:2D:5F:98
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0989
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/KoMmyhB3gZPqsDg6jAZfT3ctX5g.roa
Signing time: Wed 06 Nov 2024 07:55:03 +0000
ROA not before: Wed 06 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2441 (0x989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 6 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2A8326CA10778193EAB0383A8C065F4F772D5F98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:85:86:4f:ba:9e:36:93:29:d8:d0:f1:90:de:
59:6d:51:87:5a:62:e2:34:d9:04:c5:bf:4f:98:17:
4c:58:1e:be:0f:88:6a:45:76:7a:ae:d9:b8:5f:f9:
47:cb:05:de:53:8d:84:16:74:39:33:cd:d5:96:f5:
7e:b1:3e:0f:e3:38:fa:f4:da:70:b0:08:2e:3c:0c:
3f:d1:ec:be:8c:ab:45:3a:f2:12:0a:f8:e8:21:32:
d3:56:f3:dd:e8:a1:4b:33:67:58:bf:aa:56:de:e1:
cb:4b:18:44:d3:94:46:b3:34:68:36:0f:74:d2:19:
bc:fe:55:f4:d3:99:2a:05:19:8b:ff:62:69:f4:82:
4b:47:fd:d6:5d:ea:06:fb:ee:32:c4:92:d5:f9:d0:
19:f5:8d:49:de:ad:af:e5:49:87:92:c2:de:6b:37:
29:31:b6:2f:99:f6:14:20:b6:95:56:2b:8c:df:d2:
92:51:09:bb:b8:de:9e:77:d2:10:86:d7:2d:8d:39:
20:d1:b0:4a:e9:9f:17:1b:12:9c:16:cd:37:5a:77:
8d:d0:5a:d6:74:2d:3f:be:17:e8:bb:f2:f5:81:fd:
9b:92:cf:cc:5d:ae:4e:52:58:61:78:a8:ef:6a:f1:
0b:c9:47:57:42:86:61:f3:c3:99:40:3e:35:33:f2:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:83:26:CA:10:77:81:93:EA:B0:38:3A:8C:06:5F:4F:77:2D:5F:98
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/KoMmyhB3gZPqsDg6jAZfT3ctX5g.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ed:2a:4c:88:99:83:d8:a7:df:66:b0:51:c6:d3:59:fb:65:
17:ff:71:cc:5a:53:95:59:85:3b:fd:27:37:96:bc:41:6b:ef:
65:f7:3f:60:01:78:a0:e9:06:cb:4a:06:25:01:15:e7:b2:48:
e5:df:b9:a2:c9:35:35:ee:5e:bf:82:70:11:18:3b:7a:65:be:
19:f3:a1:d2:fb:11:fe:9c:ea:b1:6e:41:8c:c7:08:27:04:61:
06:bc:b3:7a:f6:a6:21:37:ae:a9:0e:33:1a:86:c5:df:0d:f2:
db:5e:69:c2:f8:cc:fc:64:46:07:60:a3:da:27:fd:65:c1:15:
7f:fe:af:8f:28:a5:a9:a4:83:8a:5c:d3:85:35:db:0b:97:9a:
a7:0e:fb:b7:3b:87:8f:c9:65:51:76:7b:dc:67:3f:8d:8c:4c:
a1:3a:dd:f7:56:b6:07:6e:e9:a7:c3:6d:12:a8:e8:58:40:8e:
5f:1e:e0:0b:95:43:18:ae:ea:bd:b0:19:f8:45:60:4d:28:68:
82:1a:fe:d7:b7:fc:48:d4:35:ed:52:1d:a9:d9:de:94:73:57:
a9:b9:a3:c6:e4:cd:3c:03:25:5d:fb:96:be:76:bf:c2:d5:30:
1b:6d:7c:24:10:dd:51:21:fa:07:51:bb:8a:38:79:c8:68:06:
41:5e:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 17:42:01 2024 by rpki-client on console-ams.rpki-client.org