Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/NAt-FUC1xJMKb8huA3nkOLQuDuI.roa
File: NAt-FUC1xJMKb8huA3nkOLQuDuI.roa (raw, json)
Hash identifier: N71o6LpeHDWU20LG4BIeC53QAj38R01Cap8BlDAnhtk=
Subject key identifier: 34:0B:7E:15:40:B5:C4:93:0A:6F:C8:6E:03:79:E4:38:B4:2E:0E:E2
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0977
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/NAt-FUC1xJMKb8huA3nkOLQuDuI.roa
Signing time: Mon 04 Nov 2024 07:55:02 +0000
ROA not before: Mon 04 Nov 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2423 (0x977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 4 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=340B7E1540B5C4930A6FC86E0379E438B42E0EE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:57:c7:73:95:d5:4b:82:a9:8d:85:c8:67:
a0:56:c8:7f:69:62:54:1a:b0:c3:0b:b1:e6:77:af:
6d:c4:03:f4:46:74:4c:aa:48:56:4b:be:43:3e:d4:
f4:13:19:c4:17:4a:b2:73:ac:47:3e:bc:9e:02:13:
81:8b:bf:9c:9e:f4:b9:7d:b8:43:c7:1b:7f:73:65:
43:a6:2a:d5:b5:38:e9:be:4f:c8:db:45:aa:ed:8f:
f2:ba:76:eb:16:0d:6c:9b:5b:cb:d2:89:38:95:9d:
07:81:98:34:53:93:f6:8f:c6:a2:98:ff:73:61:16:
63:32:bb:98:88:e9:62:19:78:32:7d:d0:33:2e:36:
12:ce:63:50:89:7d:54:07:ed:37:84:f6:36:0a:80:
3c:36:43:22:64:6d:3a:c8:6b:b8:90:25:6f:b5:d3:
de:6a:ff:31:8c:d1:72:12:00:04:e6:88:28:56:90:
b1:17:0f:5e:fc:1b:67:61:cb:9d:df:2b:cd:18:0f:
ac:23:1a:a2:a0:62:e2:3b:8f:40:7f:18:74:87:f4:
4c:2f:9c:d3:71:dc:c4:0d:3f:02:2b:fd:29:47:d2:
78:00:b1:73:af:d4:70:63:09:72:08:5b:74:61:80:
25:f5:ca:d2:f1:48:e4:07:dc:d5:a5:3e:5d:5e:15:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0B:7E:15:40:B5:C4:93:0A:6F:C8:6E:03:79:E4:38:B4:2E:0E:E2
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/NAt-FUC1xJMKb8huA3nkOLQuDuI.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
44:78:08:1e:da:a9:e4:0d:03:f9:f2:44:77:9f:e7:98:90:5e:
85:20:18:61:75:3b:57:09:38:5c:c2:5c:04:56:db:55:c3:54:
a5:97:2d:5e:18:60:86:66:98:2e:4a:fc:88:8f:69:f8:cb:4b:
5d:b4:86:2d:27:ca:5a:7b:f1:81:7e:7d:4f:0f:3c:8c:e4:0b:
ed:f5:39:19:6b:6f:cb:09:3a:10:78:5d:68:31:30:ee:87:b0:
bb:1e:77:e3:ad:c1:e9:83:c0:91:1f:87:75:c9:82:18:02:85:
ad:e7:05:e2:9c:c8:9f:24:f8:7d:2d:1c:ea:8c:dc:cf:b0:de:
5d:3e:df:e8:90:d9:95:83:cc:bf:c7:6e:e9:0b:76:cc:83:56:
a5:25:33:63:c6:35:55:0e:4a:6b:21:7b:95:e2:41:0b:d1:0b:
62:0f:a9:63:08:ed:63:61:05:af:e4:55:88:e7:ad:de:79:40:
e8:8c:36:1c:c4:d5:e3:06:ae:5d:05:a4:b2:de:cf:22:ab:fa:
8b:fe:51:3a:18:b0:b1:7e:e5:33:91:f1:78:10:36:85:87:67:
cb:1d:26:73:b2:8d:dc:74:9b:f9:b6:9c:10:e1:66:29:b3:aa:
41:21:28:57:a8:28:e0:5a:bf:8f:20:c9:96:42:3b:bd:d4:ba:
ce:35:f6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 17:33:59 2024 by rpki-client on console-ams.rpki-client.org