Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/NI3WUMnZXjds0uHGLWkUyqlAL-U.roa
File: NI3WUMnZXjds0uHGLWkUyqlAL-U.roa (raw, json)
Hash identifier: +6nJ5/bj3M5w/iuaPcfAX/bwrIQkYk5chBIS4Ee2hbo=
Subject key identifier: 34:8D:D6:50:C9:D9:5E:37:6C:D2:E1:C6:2D:69:14:CA:A9:40:2F:E5
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 07C9
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/NI3WUMnZXjds0uHGLWkUyqlAL-U.roa
Signing time: Tue 17 Sep 2024 15:55:03 +0000
ROA not before: Tue 17 Sep 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1993 (0x7c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 17 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=348DD650C9D95E376CD2E1C62D6914CAA9402FE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:f2:1e:74:76:7b:c5:4d:bc:ca:e0:ae:cf:
ab:a8:05:3f:eb:f2:46:96:0d:da:ad:47:f9:b4:47:
e5:84:1b:82:25:dc:36:f0:4b:f3:df:e7:1c:db:68:
c3:4b:eb:55:77:ac:56:64:00:26:56:97:51:5b:b7:
2d:0a:07:53:5a:01:dc:56:39:17:65:64:86:22:00:
a5:79:d5:e9:8c:c2:1a:25:f8:0c:55:6e:81:1e:f6:
df:64:26:ea:bd:f3:93:39:22:18:18:e8:45:a3:15:
34:48:da:38:90:5a:51:f4:33:e3:5b:30:ed:1d:31:
80:9d:de:13:94:e9:f7:da:ff:f4:4e:8f:be:df:e7:
36:87:9b:6e:45:2d:54:0b:4d:52:e6:b3:e5:07:c3:
44:e0:8f:7b:9f:c3:f6:a3:7d:29:27:38:9b:7a:26:
0f:a8:53:4b:be:c2:92:87:f5:36:23:0b:53:10:c2:
96:55:dd:9d:3e:87:89:06:b9:b0:b3:6c:ef:20:55:
73:68:40:ce:de:38:c8:a1:3f:c3:c6:17:2c:64:6e:
dc:c8:24:d8:24:60:02:77:1f:b3:fc:a1:e2:16:9b:
88:cc:e3:c1:63:30:b6:73:09:5d:92:68:39:30:a7:
bc:70:37:d7:a0:fb:7b:41:c8:bf:b0:4b:80:05:ee:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8D:D6:50:C9:D9:5E:37:6C:D2:E1:C6:2D:69:14:CA:A9:40:2F:E5
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/NI3WUMnZXjds0uHGLWkUyqlAL-U.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d7:fd:cd:08:08:e4:30:c2:48:82:16:ff:ba:d4:52:0c:22:
23:f6:9f:ff:4f:e3:9e:54:c4:28:a8:20:84:fe:1a:4f:09:97:
87:9b:f4:02:4c:f6:83:41:bb:36:a3:3e:6d:9e:2d:58:63:ba:
bd:ca:55:f2:3d:ac:d2:1b:26:a8:88:37:28:5e:fb:d6:51:db:
7a:c3:10:08:b1:35:7a:1b:6d:8a:f5:45:5b:63:58:a0:5f:f9:
7b:0f:19:41:61:ed:3e:10:ad:7f:19:00:84:77:14:b3:f3:e3:
75:9c:92:20:fe:a2:5c:a7:8e:1f:e7:30:16:6f:78:4b:ab:6e:
29:9b:52:e5:fd:4c:12:c5:b6:7c:14:6b:f3:27:46:2a:e5:28:
c6:d8:80:0b:0f:c7:93:80:d0:61:b2:ff:2b:88:31:36:79:57:
b4:85:a0:e4:c6:be:ae:02:4c:ae:7e:3e:73:08:0c:40:6d:9c:
07:8e:34:33:5e:55:ba:32:ed:cd:97:61:28:20:bc:88:e2:cc:
7c:28:17:9a:16:c5:ac:31:3c:95:05:e4:97:3f:da:41:0d:be:
ed:01:2a:f9:36:ca:db:f8:b2:17:cb:5c:a7:2c:7f:3b:ac:40:
49:87:05:34:d3:15:6d:d6:d3:f8:46:0b:da:37:7b:01:bd:e0:
2c:3d:5d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 22:38:11 2024 by rpki-client on console-ams.rpki-client.org