Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/MoWhgt9V3ZiPYkw1DPZwd9YOhoI.roa
File: MoWhgt9V3ZiPYkw1DPZwd9YOhoI.roa (raw, json)
Hash identifier: YRCaaXi1pVDZBBfpb7063OwAkilGHQqlDnmHpwTUp9M=
Subject key identifier: 32:85:A1:82:DF:55:DD:98:8F:62:4C:35:0C:F6:70:77:D6:0E:86:82
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0929
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/MoWhgt9V3ZiPYkw1DPZwd9YOhoI.roa
Signing time: Sat 26 Oct 2024 15:55:03 +0000
ROA not before: Sat 26 Oct 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2345 (0x929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 26 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3285A182DF55DD988F624C350CF67077D60E8682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:47:09:88:8f:f4:9c:58:7c:5a:06:75:19:
29:61:a9:a4:4f:33:fc:6e:fd:b5:97:1b:35:a1:7f:
42:c2:1c:a3:32:15:39:62:f5:c2:95:04:5c:59:33:
4c:36:64:0b:d4:2b:9e:b1:fe:20:1b:ea:96:2c:47:
ed:a6:3e:b1:79:ab:8d:2e:ef:5f:66:3c:73:fb:f1:
d1:7b:56:98:98:69:6a:a7:91:40:17:4b:35:75:2e:
de:f9:6c:ee:6f:c6:eb:06:d0:e9:00:2e:e9:e2:fe:
d8:05:b8:b6:5a:ee:82:64:4c:c5:30:1f:db:5e:12:
5e:4c:9c:f6:50:71:9d:4c:c2:6a:9d:d4:d0:e6:db:
ce:e7:59:d9:84:16:9e:59:55:22:59:5d:b1:0a:8a:
f1:d0:c4:31:c7:ea:af:8c:e0:6f:76:ed:e5:78:81:
20:e9:59:d9:0e:f8:8b:5b:20:42:10:92:ce:fc:53:
77:0b:7b:d1:ad:07:74:97:50:18:f9:b7:3e:d3:cd:
57:de:64:93:73:6a:50:5b:34:89:9a:4d:2e:d2:44:
10:03:4d:4b:19:b6:b1:78:a7:a3:f4:e5:25:f8:bc:
be:1b:a6:e6:c7:3e:86:a6:92:6c:27:97:16:15:a4:
10:67:6a:c6:2b:cf:b0:fa:f5:24:e8:2b:e4:ab:b6:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:85:A1:82:DF:55:DD:98:8F:62:4C:35:0C:F6:70:77:D6:0E:86:82
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/MoWhgt9V3ZiPYkw1DPZwd9YOhoI.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d0:7c:63:99:44:fb:58:1e:5a:4d:f9:3e:b8:c4:77:78:79:
cb:4a:39:9c:0f:3c:dd:eb:9e:93:1e:5e:5b:21:e5:84:b8:5f:
a3:99:f5:57:99:4c:9c:16:c1:6d:63:b9:8e:c7:35:1f:7b:c8:
60:ec:80:19:87:35:b5:8b:01:0f:24:38:57:8b:05:c5:5a:d1:
48:38:6b:af:4e:e2:f8:6f:cc:7d:ef:a8:b2:d7:54:86:f2:2e:
fe:37:76:d0:09:a3:79:83:af:2e:3e:bf:72:00:e1:c0:55:89:
55:17:16:04:d6:1d:fd:77:8c:9d:35:37:ce:f8:7e:a1:ef:9e:
4b:76:47:74:45:c7:35:e0:51:0a:ab:c1:ed:1c:43:f5:83:8e:
3e:1b:7e:0e:64:62:3f:35:fa:de:1c:d6:ea:4d:24:cf:46:7f:
d2:a1:28:e2:9c:09:ff:d1:cb:64:1f:5e:31:ff:b0:e6:5c:08:
9f:44:85:4e:c6:10:36:7e:f8:04:f6:99:4a:61:3d:72:f8:6f:
88:3b:33:56:a4:96:56:e9:58:7f:5e:2c:77:3f:3c:c1:f7:14:
0b:f4:21:b4:95:73:f8:91:c7:aa:68:f3:75:5f:9e:91:9b:da:
a8:b0:c1:95:73:64:3a:42:21:8e:11:80:ea:4c:9b:b8:3b:8e:
69:65:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 22:53:51 2024 by rpki-client on console-ams.rpki-client.org