Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/VOzSfo9B7Yo8_0CkEqqZg-dS9kc.roa
File: VOzSfo9B7Yo8_0CkEqqZg-dS9kc.roa (raw, json)
Hash identifier: 5wMjz6r4N1hnLer1IEaHSNeG+kz4v0z+wdntXRKME/A=
Subject key identifier: 54:EC:D2:7E:8F:41:ED:8A:3C:FF:40:A4:12:AA:99:83:E7:52:F6:47
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 01FC
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VOzSfo9B7Yo8_0CkEqqZg-dS9kc.roa
Signing time: Fri 05 Apr 2024 15:55:04 +0000
ROA not before: Fri 05 Apr 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 5 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54ECD27E8F41ED8A3CFF40A412AA9983E752F647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:8a:57:e5:be:ed:23:9a:fd:b1:6f:a0:a4:
f2:dd:9e:67:f5:06:5a:cd:63:38:e0:6e:4c:ac:5c:
20:5c:fe:e9:4c:e3:b1:92:21:d8:fc:19:f1:3d:d9:
92:82:01:16:8d:73:de:b7:2a:42:c3:b9:97:57:ff:
dd:28:09:43:33:03:52:d5:71:aa:77:f0:df:30:9a:
19:bf:f0:9d:a3:22:e7:7a:ce:30:15:91:10:c3:9d:
89:95:c5:28:b8:34:d7:9b:03:f8:75:fb:24:8b:29:
b7:27:01:f8:08:90:30:53:4b:2a:08:55:02:f7:b8:
9e:d2:de:15:57:6a:c6:1a:8d:4b:dc:42:21:8c:1d:
d5:5d:67:41:b7:d2:06:1f:03:4a:a8:fc:ce:72:df:
2a:73:8f:94:83:20:03:32:cc:9e:44:8f:44:96:56:
77:83:dd:e4:17:5c:9e:ac:e1:1b:0a:07:5f:08:56:
e2:3a:f0:a2:2a:ff:18:5e:dd:9c:fd:59:4c:57:e2:
84:ea:2f:2c:e0:6c:ca:01:6b:d6:48:81:35:ab:ca:
96:54:8c:3d:43:57:c0:86:cc:28:7e:1c:9c:8e:ff:
90:35:78:fe:a5:19:21:be:c1:d1:4e:d0:e0:a8:67:
ed:b6:33:c3:9c:d1:2e:f1:ac:b4:02:49:2b:97:93:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EC:D2:7E:8F:41:ED:8A:3C:FF:40:A4:12:AA:99:83:E7:52:F6:47
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VOzSfo9B7Yo8_0CkEqqZg-dS9kc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
37:51:fa:6d:52:d1:83:aa:52:e2:50:f5:e7:1d:40:f6:a2:fe:
40:24:b0:05:e6:b1:95:c9:9d:92:d3:49:80:a4:3e:91:1e:d1:
38:f4:96:f6:c8:10:9c:56:ff:02:57:9a:b6:ae:a7:6f:37:dc:
b9:7a:4c:ef:d4:d4:df:c7:7d:a5:2b:ca:ae:6d:91:66:8b:db:
ac:22:b9:91:46:f3:d7:7d:da:5a:59:9a:d1:c2:0d:06:32:34:
6a:9f:0a:07:ef:d0:e5:d8:3a:a6:a6:0f:04:46:f7:bb:e8:ef:
70:94:f8:9c:7f:ab:4f:ed:d7:4e:60:b7:c2:02:a6:27:99:dd:
14:ed:18:f1:bb:47:66:0b:1d:d0:31:72:aa:0f:aa:dd:ad:f6:
cf:66:88:3a:20:9e:99:4d:6c:e9:36:b5:86:9f:92:fd:e0:6f:
7f:ee:76:7e:ba:bd:d8:59:e4:a8:9f:3a:3e:0e:3a:b7:bc:83:
c8:64:95:d9:e1:a6:59:53:84:78:0c:29:54:12:b8:58:7d:5a:
4c:63:c8:46:90:84:71:8b:5c:b6:d3:c0:ec:7d:c0:71:0d:a3:
c6:fe:26:db:a4:99:c1:9d:94:29:ba:4f:63:41:3f:7d:f6:e3:
4a:b6:9f:5e:f8:5e:19:60:9a:58:02:0e:63:21:9b:44:b5:d9:
a3:c8:07:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 00:37:14 2024 by rpki-client on console-ams.rpki-client.org