Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/TZRaXrQo8ZNC9IXDCJpbvScWsjY.roa
File: TZRaXrQo8ZNC9IXDCJpbvScWsjY.roa (raw, json)
Hash identifier: BqBKuUHuopAotfdhdHwM2CYFthjrY4ttdkgDXOO0ofo=
Subject key identifier: 4D:94:5A:5E:B4:28:F1:93:42:F4:85:C3:08:9A:5B:BD:27:16:B2:36
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 52
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/TZRaXrQo8ZNC9IXDCJpbvScWsjY.roa
Signing time: Sun 18 Feb 2024 07:55:04 +0000
ROA not before: Sun 18 Feb 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Feb 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 18 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4D945A5EB428F19342F485C3089A5BBD2716B236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:a3:ad:a4:2e:d4:1d:13:74:65:46:0f:d9:
0c:1c:74:84:ea:79:ca:b0:cb:6d:db:87:ce:0a:b3:
25:14:a5:97:84:3d:f6:19:ba:ff:2d:f9:83:bf:f9:
f0:00:b6:a4:74:99:9e:3e:b2:36:87:38:3c:bb:b2:
64:58:90:0d:a0:90:b8:15:9d:c1:c4:fb:e4:e6:6b:
84:dc:9a:98:7f:79:f7:c6:70:3b:fa:ae:84:5a:30:
48:7c:6c:9c:09:a4:54:61:4f:0d:09:de:d9:8a:95:
77:5b:e3:88:ae:ab:09:21:48:83:45:ba:6e:4a:b3:
e0:56:c2:5b:35:73:ad:01:6b:84:25:c8:b7:53:9e:
fa:e8:da:e5:a9:88:9b:22:11:37:c4:7b:6a:19:27:
cf:87:78:88:ef:00:2c:26:28:fa:29:54:ec:ef:7e:
a4:07:f5:aa:f1:51:cc:15:91:f4:46:98:6a:9d:e0:
97:bb:92:7a:99:5e:0d:2c:73:05:f9:cb:8c:0f:45:
c5:78:fc:b7:26:55:8f:01:b7:47:2e:46:60:57:c7:
56:fa:64:5f:a6:d7:94:b4:ec:18:3f:a0:5d:63:32:
0b:dd:6f:48:85:ba:c0:ff:34:68:07:49:e4:24:53:
05:b1:d8:b2:4d:6f:dc:00:00:98:83:5e:fb:fa:af:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:94:5A:5E:B4:28:F1:93:42:F4:85:C3:08:9A:5B:BD:27:16:B2:36
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/TZRaXrQo8ZNC9IXDCJpbvScWsjY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:6a:5f:c7:4f:be:53:1d:7c:20:b6:ad:90:ef:dc:3f:f2:fc:
bd:78:88:2b:d5:3b:6a:24:f4:e4:fd:27:b7:c2:78:63:5f:47:
ad:44:20:1c:e4:ea:10:76:6d:df:38:6c:f4:cd:40:71:dc:87:
56:aa:b6:d5:62:d5:9e:d4:9b:f6:e8:84:e6:5f:29:bc:ff:2b:
9b:ce:66:e8:23:27:51:cd:e0:8f:a6:89:9d:cf:68:53:de:f6:
6a:7d:07:5d:18:e2:7d:03:6a:e2:1b:02:be:d7:65:44:d2:e2:
33:c5:2f:3e:c2:62:12:f9:5a:42:11:93:2b:60:e1:aa:7f:07:
bc:c5:c8:b5:5a:2d:c1:06:8b:31:d0:f0:02:22:4d:35:f6:0b:
87:14:96:16:36:3c:0a:b0:0e:e5:b7:eb:e3:95:b1:13:da:1a:
53:dc:26:8a:9d:f2:c0:be:2e:fb:09:6e:2e:f6:59:c3:a3:b5:
83:e9:6e:86:5c:09:54:8e:07:1a:17:3d:3e:ec:47:cd:f1:f6:
e9:af:27:5f:18:a4:6c:f2:6e:4a:b6:2c:42:d9:c5:5e:04:57:
59:32:2c:27:53:d4:1f:fd:da:80:94:d7:52:18:35:f1:0f:75:
a9:b8:d5:52:40:66:6c:53:d0:fe:82:4f:19:3a:ee:90:c7:69:
6b:af:16:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 18 13:16:14 2024 by rpki-client on console-ams.rpki-client.org