Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/QVMuKjj1tqOM-X3xoIMmVtJZN7E.roa
File: QVMuKjj1tqOM-X3xoIMmVtJZN7E.roa (raw, json)
Hash identifier: FzWIo+RODfo8hCITPTfz/QXQzX3Ssh8dkE76xHsb+2Y=
Subject key identifier: 41:53:2E:2A:38:F5:B6:A3:8C:F9:7D:F1:A0:83:26:56:D2:59:37:B1
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0397
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/QVMuKjj1tqOM-X3xoIMmVtJZN7E.roa
Signing time: Tue 21 May 2024 07:55:03 +0000
ROA not before: Tue 21 May 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 919 (0x397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 21 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41532E2A38F5B6A38CF97DF1A0832656D25937B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:08:d9:4d:d6:96:7f:30:ff:d7:7a:d0:0a:
eb:a8:62:61:ab:93:01:7f:64:3c:b9:28:ff:42:90:
95:05:63:08:63:53:ec:05:b6:28:d6:3a:e1:f1:c3:
f3:ab:8f:4c:72:7d:81:ab:9d:03:bf:3c:93:f0:99:
db:0a:60:8d:db:9c:7e:f2:1d:83:d8:ec:0d:99:76:
e2:5d:c7:10:32:55:66:cc:77:92:33:5a:94:9f:33:
12:1e:c2:1e:b3:3b:91:e1:2b:20:4e:43:e8:e9:f2:
72:ca:da:4a:66:db:64:b9:bf:6f:92:c1:6b:87:14:
72:02:62:ab:72:09:96:a0:aa:f7:07:f7:d6:de:53:
aa:7d:a6:3b:7b:f1:42:66:0d:56:0f:80:11:9f:23:
36:77:18:96:cb:36:d8:34:77:27:4a:ab:bf:4b:53:
57:95:de:72:d4:0e:36:a6:f4:03:9d:46:25:13:69:
90:a7:7f:aa:92:c5:ae:e7:68:7c:78:2d:db:d8:1d:
b1:19:1e:de:a6:91:35:a1:bc:f1:74:4e:43:2a:10:
59:a0:9a:3f:b1:dd:31:bb:a7:02:39:fa:b6:dc:59:
45:0e:8e:78:56:14:0a:6a:3f:7c:61:2c:91:f6:f4:
81:27:b0:07:b5:eb:45:ae:33:f0:67:8e:60:4a:e2:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:53:2E:2A:38:F5:B6:A3:8C:F9:7D:F1:A0:83:26:56:D2:59:37:B1
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/QVMuKjj1tqOM-X3xoIMmVtJZN7E.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d6:bd:3c:cf:0f:1f:0c:62:a8:26:12:a0:ac:ca:66:44:f8:
a9:7e:a9:4d:44:db:2a:a1:90:e7:b2:d2:bf:53:b0:29:67:38:
d2:77:c1:db:7f:bf:44:2f:02:d7:34:c7:5b:53:6a:01:53:4c:
bd:ad:e8:a3:a3:71:26:ba:26:17:23:0c:93:4f:ab:12:c5:14:
f4:85:a2:0a:e8:d8:3a:d8:df:0e:61:06:1a:90:3b:e1:cd:c0:
fb:b4:af:ca:55:61:0b:42:d1:cb:bc:d0:3f:1f:17:b3:70:3f:
29:25:98:cc:61:90:0b:c2:65:d2:45:17:92:30:55:f1:82:1a:
8f:0e:a6:1c:0b:0a:57:0d:57:ba:a9:b5:43:ef:f2:96:ef:b5:
86:df:f0:3f:3e:f5:c7:fd:eb:8d:aa:fd:0c:e3:a4:4b:cb:d6:
75:d1:8d:46:32:cb:c0:65:57:53:3f:30:56:a1:cf:1b:37:c7:
12:41:3f:bb:36:29:c0:23:4c:a2:77:fb:2c:e6:03:f8:58:ea:
a9:78:02:9b:00:d8:bb:87:11:52:ed:27:8b:2a:4f:58:17:24:
b7:a0:83:fe:c5:ff:f1:69:7b:b7:89:bd:8b:c6:83:13:c0:a4:
3e:b6:d9:4b:e0:e6:60:64:6b:e8:f0:5a:cd:74:5c:27:cb:70:
9a:2d:c4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 15:21:35 2024 by rpki-client on console-ams.rpki-client.org