Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Tuyjj2K7-HqHMzU9rIusJ4uBBuQ.roa
File: Tuyjj2K7-HqHMzU9rIusJ4uBBuQ.roa (raw, json)
Hash identifier: 73rkid0e2wo/3dRXHJO9DZSuCUdd2w3n12GJH8isqjM=
Subject key identifier: 4E:EC:A3:8F:62:BB:F8:7A:87:33:35:3D:AC:8B:AC:27:8B:81:06:E4
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 030A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Tuyjj2K7-HqHMzU9rIusJ4uBBuQ.roa
Signing time: Sun 05 May 2024 15:55:04 +0000
ROA not before: Sun 05 May 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 May 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778 (0x30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 5 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4EECA38F62BBF87A8733353DAC8BAC278B8106E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:32:1c:f6:27:44:09:b2:91:9e:62:08:44:
53:a3:a9:db:cf:8b:fa:5d:81:d1:98:a8:78:25:ff:
af:c6:a8:ab:b6:6a:09:f7:42:e0:49:38:a7:63:f3:
26:bb:8b:62:91:35:a9:94:1a:0e:cb:e3:1d:0a:ab:
69:86:db:a6:6c:d5:62:2d:da:7b:e8:d4:82:bd:14:
77:ab:07:95:2c:d4:53:4a:71:84:2e:46:6e:c2:83:
26:66:4a:cb:05:47:4f:ec:36:61:06:24:1b:36:f4:
b3:b8:fe:ce:35:78:e1:64:bd:94:7f:51:9c:cd:ed:
2b:fa:bf:45:a8:4c:75:57:c7:e6:ea:50:cd:9e:53:
f0:a2:c4:0b:32:2e:b0:e4:43:6b:76:01:59:bf:ac:
7f:76:d5:90:f6:92:cd:5a:ef:97:7d:86:7f:56:27:
87:26:f0:d8:29:a2:63:ca:f5:64:36:95:cc:b2:01:
e4:36:d6:e0:c1:bb:3c:c6:5a:78:91:df:39:18:40:
c8:3d:c3:50:5a:60:18:00:c5:1d:39:f5:df:03:2a:
25:c4:a5:c4:12:d5:ab:3b:a0:54:7a:72:d7:9d:7d:
de:4c:6e:96:7d:a4:3d:84:85:a8:87:f4:9e:22:e9:
15:47:e3:6d:1a:e0:69:05:bc:e8:46:57:0d:65:ed:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EC:A3:8F:62:BB:F8:7A:87:33:35:3D:AC:8B:AC:27:8B:81:06:E4
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Tuyjj2K7-HqHMzU9rIusJ4uBBuQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e5:bc:aa:41:93:6d:2c:24:93:79:b5:7d:07:f8:9c:42:9c:
ad:de:d7:1f:10:2d:aa:4e:07:f5:5d:9a:b0:1e:22:1f:f4:3d:
eb:0e:c8:86:e0:9b:c1:1e:9d:ca:cd:1c:64:ea:df:08:72:6f:
b4:76:91:c6:b1:2e:86:ff:da:ac:0d:aa:a0:ed:9d:98:d8:fb:
75:ef:01:19:e5:58:68:a7:7f:0d:15:8b:91:44:86:fb:07:8f:
3d:2c:15:3d:9d:72:8a:7c:90:a5:e2:98:fa:59:44:99:ab:c9:
5b:fd:71:85:27:b4:61:b1:87:bf:73:d1:19:58:08:79:d9:a0:
35:65:4f:99:bc:16:9f:3b:2f:7c:1b:f7:f4:83:0d:cd:d1:34:
9e:9b:88:45:10:d6:fb:e0:59:48:b1:4f:ce:d0:1d:2a:06:56:
6c:5d:30:6f:5b:20:8d:b0:86:6c:0a:35:b2:fa:98:cc:be:34:
8d:4f:15:02:19:e9:00:58:5b:6e:df:2c:21:f9:58:84:fb:b5:
36:c7:7a:ac:38:d5:0c:3c:58:69:60:b1:80:f5:f9:ce:d4:ef:
97:86:89:cb:8b:e8:a4:bf:9a:be:9a:df:b2:39:0b:f3:e1:c3:
f2:6e:50:2b:03:be:86:d5:de:31:6a:89:75:9d:c7:24:8a:a3:
df:f3:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:30:41 2024 by rpki-client on console-ams.rpki-client.org