Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/TKatOh74P0Puf8nVTNv45wC88LE.roa
File: TKatOh74P0Puf8nVTNv45wC88LE.roa (raw, json)
Hash identifier: ixisAS5zuXhpsfTOEoCzmV+RqkTNAIuXh8Dg1TAPPSM=
Subject key identifier: 4C:A6:AD:3A:1E:F8:3F:43:EE:7F:C9:D5:4C:DB:F8:E7:00:BC:F0:B1
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 01B4
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/TKatOh74P0Puf8nVTNv45wC88LE.roa
Signing time: Thu 28 Mar 2024 15:55:04 +0000
ROA not before: Thu 28 Mar 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 28 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4CA6AD3A1EF83F43EE7FC9D54CDBF8E700BCF0B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:15:08:9c:dd:6b:3d:c8:fa:1c:91:92:b7:
cb:17:69:06:4d:ce:d0:4e:3a:43:4a:06:4f:f4:93:
85:4e:75:4e:04:ee:b4:37:b5:a2:6f:7d:a0:73:c9:
fb:83:5d:15:f5:64:15:2c:08:5c:67:45:bb:e4:f4:
ac:e9:15:d5:a1:a9:b2:9e:4d:32:f2:31:cd:5e:82:
4f:a3:94:06:6e:7d:9d:99:3c:3b:4a:b5:f4:60:58:
2f:eb:28:01:ec:b1:16:4b:a4:4f:ac:15:d6:bc:19:
68:40:b8:db:3d:26:20:27:14:18:f6:15:f4:f9:2e:
cc:c1:bc:99:df:9c:ad:a9:3f:64:fc:9b:dc:3a:22:
a1:80:1c:8f:8a:fd:ab:e9:df:7b:93:4a:a4:24:f2:
e1:68:8f:35:27:27:fa:6d:33:79:6e:95:82:e6:e6:
7a:0c:83:4a:b8:46:d3:7e:73:04:5b:ba:ea:7a:46:
91:a7:a4:2c:14:ee:08:99:27:f3:e2:61:76:6b:57:
ba:80:46:8d:7b:5a:d3:e6:21:f9:a5:92:4b:76:77:
eb:77:5b:75:fc:35:36:3b:c7:d2:8f:11:21:91:bb:
f0:4a:96:25:07:db:3d:b2:16:b1:a2:31:30:1f:fb:
e6:e4:ee:29:81:df:a2:8b:31:d5:e7:df:81:54:23:
05:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A6:AD:3A:1E:F8:3F:43:EE:7F:C9:D5:4C:DB:F8:E7:00:BC:F0:B1
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/TKatOh74P0Puf8nVTNv45wC88LE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:07:25:f6:9e:b8:1a:99:a7:52:a8:04:91:e8:9b:28:22:ed:
6f:12:93:b7:57:86:3f:a5:e2:49:50:74:1f:0d:cd:ae:72:20:
2f:98:7c:93:60:a8:bf:f9:55:d1:2a:fc:40:91:fe:d1:28:da:
34:de:c9:28:d2:40:fa:25:6b:ef:ad:10:2c:66:e4:c4:f1:37:
3a:b1:12:cd:8c:a4:2b:4c:cb:32:54:97:c4:54:f0:0b:c8:64:
93:b6:20:d6:c2:d9:c9:8f:c6:ff:b2:62:ec:ab:c5:0e:e2:33:
87:a8:95:bb:89:1a:22:4f:fe:bf:8f:f5:2f:c6:f8:9e:5f:71:
6b:fa:b3:ee:c9:62:61:b2:34:db:78:07:0b:27:aa:1b:70:fa:
e8:6d:82:2d:05:d1:00:7f:49:3e:e5:eb:0d:34:ff:22:0b:0a:
7b:c4:d3:13:56:63:19:7e:71:b6:8a:ae:34:b8:37:b3:99:3a:
76:e4:e0:d9:45:85:f8:92:31:86:44:c6:86:a6:48:6d:db:4c:
e0:7a:d7:6e:3c:1e:7c:00:9c:c0:8a:48:ee:39:65:b6:17:78:
15:5d:d7:1a:3e:0a:02:a1:3c:1b:67:2d:7a:a0:2c:fc:40:28:
85:9c:03:9b:82:fe:0b:fc:ab:9c:e9:07:42:1c:e6:cc:36:5f:
53:fb:2a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:13:22 2024 by rpki-client on console-ams.rpki-client.org