Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Mx9Q1PzTLDtuxiqkZ9awoIIumos.roa
File: Mx9Q1PzTLDtuxiqkZ9awoIIumos.roa (raw, json)
Hash identifier: tPLZ1AQPdvxREu6YPYkbLFlDkSumUVqogUMtwIhUOwE=
Subject key identifier: 33:1F:50:D4:FC:D3:2C:3B:6E:C6:2A:A4:67:D6:B0:A0:82:2E:9A:8B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 018A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Mx9Q1PzTLDtuxiqkZ9awoIIumos.roa
Signing time: Sat 23 Mar 2024 23:55:03 +0000
ROA not before: Sat 23 Mar 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Mar 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 23 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=331F50D4FCD32C3B6EC62AA467D6B0A0822E9A8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:1f:ef:08:e0:70:59:1c:6e:25:b1:80:2b:
85:13:75:72:32:c9:06:5d:86:d4:bc:e9:41:68:be:
5d:32:01:48:79:e8:7c:f0:5b:9e:ae:2e:b4:d1:f1:
9f:a2:be:2a:b7:80:ae:ff:21:58:91:27:81:ec:22:
2c:a2:5a:67:ff:8f:42:0f:fa:ef:49:78:a6:8c:d4:
a1:db:aa:41:f8:0a:f4:e5:b0:9c:73:3b:55:cc:4b:
cd:73:c2:86:9a:cd:a0:35:be:83:b4:25:63:c2:29:
73:39:19:e1:a7:cf:3e:5e:4c:ad:ff:58:2f:b7:2d:
d1:4d:e3:fb:c3:07:60:3c:87:fc:b9:09:67:31:95:
be:7d:06:44:6a:76:f2:17:8c:d5:4b:66:34:f9:23:
f1:3f:16:6e:df:1a:cf:ed:af:69:2c:e0:c6:39:44:
a6:2e:6e:bc:e2:fe:4e:86:ce:a3:e0:2f:ad:ba:31:
85:fb:ef:0a:00:ef:66:dd:5b:64:b0:db:9b:a6:09:
09:13:12:66:9b:4f:5b:29:22:d7:6d:0e:39:40:4a:
da:e1:90:14:6a:74:b9:66:29:5b:b3:33:c6:d2:96:
9d:c3:8a:65:b8:a8:83:03:04:e2:f5:e1:b2:21:0b:
66:d5:0e:2b:a8:82:02:96:27:a2:29:84:b7:e1:97:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1F:50:D4:FC:D3:2C:3B:6E:C6:2A:A4:67:D6:B0:A0:82:2E:9A:8B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Mx9Q1PzTLDtuxiqkZ9awoIIumos.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:be:e5:8c:3f:22:47:0c:b4:05:36:9d:1e:35:19:11:92:cb:
4d:45:3e:5b:99:24:ee:3c:04:72:65:72:58:b9:e5:d7:ee:ec:
a8:a8:67:ee:98:66:5d:91:39:9a:b1:79:75:6c:0a:8e:4e:64:
70:71:83:84:38:c4:14:9b:4d:32:b9:c8:f9:1c:51:65:c2:e4:
98:f9:b1:34:42:7f:20:ab:0e:93:21:08:95:3f:21:54:74:0b:
06:94:a3:c1:c3:0c:3b:d8:93:a2:de:0e:1a:38:9b:ee:32:77:
b2:84:75:d4:34:ec:02:c2:ac:7c:bd:eb:bf:71:36:42:28:d6:
9d:a2:21:cd:d6:4e:31:f9:72:ce:40:96:19:52:e2:53:f1:0a:
f3:8a:e3:f6:f8:98:f6:f8:c5:bd:2d:dd:5a:b9:e6:85:00:5a:
ab:9c:76:92:fc:9f:83:9d:72:2c:9d:ab:b1:17:4d:ff:e6:2a:
bb:e6:8a:ed:21:fa:c0:6f:f7:cc:de:ee:69:74:c2:fc:b0:9a:
95:2c:23:56:b1:12:af:22:00:ed:ff:89:a8:1b:a2:61:fd:4a:
93:c6:6f:95:72:18:65:d2:71:56:61:40:93:07:fd:8d:71:5a:
b7:78:1f:a8:7f:66:f2:17:49:eb:62:d9:36:fc:99:64:a3:de:
ef:6b:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 24 07:29:35 2024 by rpki-client on console-ams.rpki-client.org