Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/TiZP1AS4xEMhPCQIiXD4tCu_Y8I.roa
File: TiZP1AS4xEMhPCQIiXD4tCu_Y8I.roa (raw, json)
Hash identifier: lxfsUpUXbVBmn1aL1SFmhSRi02Hr6PFMikHxK5Pk+1g=
Subject key identifier: 4E:26:4F:D4:04:B8:C4:43:21:3C:24:08:89:70:F8:B4:2B:BF:63:C2
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 078A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/TiZP1AS4xEMhPCQIiXD4tCu_Y8I.roa
Signing time: Tue 10 Sep 2024 15:55:04 +0000
ROA not before: Tue 10 Sep 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1930 (0x78a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 10 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4E264FD404B8C443213C24088970F8B42BBF63C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:fc:75:d6:5b:28:f0:36:71:4e:5d:99:10:
a1:9a:56:bd:93:80:52:23:50:38:60:83:b3:1e:5f:
52:8a:d4:a5:90:87:f0:d4:5b:d0:d3:04:a4:47:d7:
1f:1a:13:6d:2a:0b:22:d0:6b:2e:74:27:ae:7d:c1:
be:f5:8a:cb:f5:9a:54:98:58:c6:84:ee:b1:ed:21:
40:f4:80:84:af:f1:cb:57:e9:f5:ca:e3:3d:e5:bf:
5c:d9:6f:7c:38:52:67:76:f7:38:ad:4c:89:84:bf:
13:38:45:9e:70:25:64:c5:49:a5:10:e8:4c:7a:42:
5c:f8:b4:0f:ab:45:2e:18:53:64:51:56:28:76:69:
8a:4f:a6:3a:34:3c:ac:1a:ff:7f:7b:9d:3b:ef:e8:
36:f0:28:51:72:3a:80:51:46:b6:1f:e9:27:a2:f1:
23:d2:a6:5e:ea:d1:17:22:00:78:11:3a:bb:7f:f5:
6c:bb:dd:41:2d:02:18:d1:30:73:ec:a3:80:ec:cd:
5a:44:fe:3f:a0:2e:e5:bb:41:b1:86:5c:1f:2e:54:
a7:78:75:13:3b:9c:18:5e:b1:36:17:2a:d7:5a:e9:
71:e1:fa:3f:d0:84:01:a6:dd:f6:0f:3c:ac:d5:92:
42:7b:b3:93:41:89:f1:ab:b5:08:08:19:90:8c:38:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:26:4F:D4:04:B8:C4:43:21:3C:24:08:89:70:F8:B4:2B:BF:63:C2
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/TiZP1AS4xEMhPCQIiXD4tCu_Y8I.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
49:2c:ab:51:2b:7f:4a:0a:c6:f3:aa:3d:86:58:9c:6f:ec:e1:
ad:34:87:5b:24:3c:8c:01:a2:a4:ad:fb:56:19:7a:00:60:3a:
29:79:5f:02:f8:94:9b:07:0e:f1:d0:fb:52:8e:89:39:d0:79:
73:a7:0b:8f:19:75:95:80:3c:1b:c9:10:9e:6c:c7:47:18:67:
d9:04:4c:3c:e3:b4:a4:85:60:ac:5e:b4:a5:f6:0f:d9:57:0d:
e1:89:1b:c6:f1:a1:59:3a:f8:8a:b9:a9:01:b7:f8:92:f2:3a:
99:84:7b:07:54:35:44:66:22:a3:8a:01:2c:a0:bf:51:da:9c:
80:8c:50:60:be:c5:f2:25:5e:f2:e1:93:a9:45:eb:cb:4c:d9:
77:d9:37:70:27:cb:bc:b9:a8:0c:89:95:dd:6b:64:93:09:aa:
9a:77:fb:c7:cd:f0:fc:7d:bb:97:f8:1c:e4:c7:4b:52:f0:75:
1e:22:28:dd:80:68:27:3b:9d:eb:f8:68:68:c2:7e:03:17:bb:
6c:51:9d:11:97:3b:32:90:69:b7:4b:bf:de:b6:70:e1:51:68:
98:19:09:31:0e:77:e4:ee:e0:77:e9:d9:18:bf:04:db:0b:a7:
84:22:5e:11:aa:0d:fb:a2:c8:db:cd:7c:35:61:cb:1b:2d:9c:
54:7c:0b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 23:11:31 2024 by rpki-client on console-ams.rpki-client.org