Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/U3AHchMKftNKrHufxTd4EYxBXIo.roa
File: U3AHchMKftNKrHufxTd4EYxBXIo.roa (raw, json)
Hash identifier: +3UCmgWqoWlsW0ah9j8tIgt/TD/+nAukcQCMrkllp8E=
Subject key identifier: 53:70:07:72:13:0A:7E:D3:4A:AC:7B:9F:C5:37:78:11:8C:41:5C:8A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 069D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/U3AHchMKftNKrHufxTd4EYxBXIo.roa
Signing time: Thu 15 Aug 2024 07:55:03 +0000
ROA not before: Thu 15 Aug 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1693 (0x69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 15 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53700772130A7ED34AAC7B9FC53778118C415C8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:17:9e:d8:12:fe:d8:73:65:0b:69:38:3b:
ba:a0:d0:d7:42:c9:06:57:90:db:bc:9f:9f:22:77:
a6:86:a2:a7:c3:3a:9d:97:3d:2a:da:a0:6d:33:e4:
71:c9:c8:62:55:76:b8:65:87:1e:44:89:b2:05:d5:
15:10:03:9d:da:b1:b3:60:c3:c8:7e:1c:57:e0:4c:
27:e0:02:80:03:7e:1c:62:3e:f6:0b:c9:bb:cf:43:
44:6c:c2:91:83:8e:3b:5d:ee:f2:dd:97:ad:53:0d:
8f:9c:47:97:6a:85:b8:ce:dc:99:7b:e4:b7:3e:eb:
33:dd:f5:ef:be:bb:20:95:2d:eb:ca:1c:97:4a:5d:
a4:5f:4b:29:f9:ce:f2:2f:9a:8d:54:ff:65:3c:a3:
14:3d:b7:91:c9:e0:e5:3e:7d:e5:ed:1a:ff:a5:6c:
8d:fa:b7:5e:cc:9c:5f:48:be:a1:e9:68:9e:f0:53:
71:79:01:f0:55:4b:3c:b3:98:e2:c0:df:ec:aa:94:
10:81:9d:48:d1:66:91:77:30:1f:91:f5:df:a5:0b:
8c:1a:e6:0a:cb:6d:15:2c:f3:fb:0b:4c:91:b4:37:
dc:1b:fb:29:e8:64:95:2a:67:62:d9:5b:46:8e:41:
cf:ee:d1:28:da:93:5d:2d:4b:00:87:ff:6f:7b:fb:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:70:07:72:13:0A:7E:D3:4A:AC:7B:9F:C5:37:78:11:8C:41:5C:8A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/U3AHchMKftNKrHufxTd4EYxBXIo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ff:5b:ef:44:b3:69:57:b6:8a:33:1f:0a:bb:32:cf:b7:7f:
4d:f4:69:b7:db:73:03:8e:81:cb:83:42:20:a4:31:c3:8c:45:
ef:9a:80:a8:da:28:4e:55:24:f6:95:a9:61:f3:73:4d:fe:2b:
25:71:7f:5c:b4:a0:55:5a:b3:6f:19:e2:ab:e8:99:d6:cb:c5:
84:41:d8:0e:f0:62:fb:27:fa:7d:8d:a6:cf:bd:e7:a9:44:59:
57:fd:37:09:c5:c5:e8:0b:ba:9f:bf:b7:13:a2:4e:eb:a6:30:
33:ee:ef:ac:5f:85:03:e6:66:04:4e:e2:7e:7e:fc:70:c0:1b:
d0:7a:77:94:0b:32:35:a4:98:93:29:2a:ad:0e:96:ee:e5:6d:
6c:f3:d9:1f:9a:d5:15:38:89:90:b6:bf:ba:86:96:ee:c6:2a:
05:54:41:ef:64:3d:dc:2b:2d:84:b6:f8:a4:7d:a4:ea:80:11:
3a:16:19:d4:2c:7e:15:bb:a2:a1:12:df:75:1d:3e:1d:d4:10:
76:80:29:6a:2e:56:0c:c7:e2:65:95:07:09:11:96:db:27:d8:
fa:ea:ea:ab:0e:7c:93:28:9c:42:69:3b:e0:bd:e8:27:93:17:
37:75:4e:d2:2e:99:1c:be:6b:01:8a:ef:52:3f:5a:15:cb:82:
49:69:ac:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 17:31:34 2024 by rpki-client on console-ams.rpki-client.org