Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/XSiM6WefyePpK8Kf0MsYX_1DxMk.roa
File: XSiM6WefyePpK8Kf0MsYX_1DxMk.roa (raw, json)
Hash identifier: amhqdtYL//bKVhPqAt5VPaqJQNA9w5Y8TP1Bzq1afx0=
Subject key identifier: 5D:28:8C:E9:67:9F:C9:E3:E9:2B:C2:9F:D0:CB:18:5F:FD:43:C4:C9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 03A6
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/XSiM6WefyePpK8Kf0MsYX_1DxMk.roa
Signing time: Wed 22 May 2024 23:55:04 +0000
ROA not before: Wed 22 May 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934 (0x3a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 22 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5D288CE9679FC9E3E92BC29FD0CB185FFD43C4C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:52:ae:f6:80:37:a1:d1:92:51:b2:27:a3:
b1:91:d1:ff:b1:2b:94:57:0b:9c:10:82:7a:cc:98:
36:db:60:40:83:f8:0e:f5:3a:44:6b:2c:26:84:8e:
55:dc:0b:1f:1b:dd:9d:54:9f:13:9b:70:f0:83:ad:
a5:32:5a:22:03:ab:e1:f4:80:e3:73:48:f2:26:d4:
f6:5a:c6:46:27:c8:ec:88:fb:32:01:c1:05:79:72:
32:38:39:fb:c1:99:6a:d1:9b:8f:83:f1:a2:5e:8f:
6f:16:7c:b0:be:c4:3a:b0:dc:2b:9f:e0:c1:79:04:
33:3d:c5:49:91:ec:7c:56:40:5e:61:54:16:6e:a2:
35:2e:41:19:4f:4e:f4:50:5f:ca:f5:38:fc:e1:5a:
38:db:b5:57:82:d7:42:3b:4c:79:5f:48:80:d4:0a:
5a:13:00:db:55:26:94:fc:bf:62:ec:f8:e2:e3:b6:
58:d5:93:a5:23:4e:94:c6:ce:af:65:3b:33:22:1a:
c3:26:77:95:43:95:e6:e4:48:bd:0c:19:62:e2:de:
c3:58:1e:6c:a9:a0:9e:ca:48:65:e5:89:19:b5:bb:
ef:20:ff:42:84:1f:3b:d9:3e:14:3d:7b:f1:80:3d:
2c:35:5c:a8:0f:3a:c4:e6:66:b2:9b:c5:8b:bf:35:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:28:8C:E9:67:9F:C9:E3:E9:2B:C2:9F:D0:CB:18:5F:FD:43:C4:C9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/XSiM6WefyePpK8Kf0MsYX_1DxMk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:42:27:d1:59:58:d7:21:47:ae:ed:c6:47:13:56:47:9d:3a:
91:48:69:fa:78:a9:77:91:1c:85:be:cd:18:36:13:0f:8d:61:
39:9b:76:ae:b0:b3:9b:0f:50:a7:5b:17:a0:5c:cd:30:fd:19:
70:a8:cf:1f:19:32:4e:79:a9:bd:dc:d2:91:11:93:b1:96:a4:
9b:5d:fe:d5:ba:3b:e2:f5:97:77:01:7a:43:9c:3d:64:c7:8f:
5a:2e:c7:c6:b3:02:c9:68:5a:50:a5:f7:82:54:f3:4a:7c:6f:
dd:94:98:7f:57:b9:fb:65:a1:40:d4:ed:61:9b:09:ba:9f:5d:
63:4e:d4:fb:b4:5d:22:cf:22:6f:a2:94:21:93:45:e5:09:2f:
24:b4:e8:72:f8:5e:17:9f:a2:9e:3e:81:a3:3e:cf:2d:3a:fa:
d6:27:24:c2:a9:fd:88:07:e9:66:8c:96:ee:c7:5b:64:b7:2d:
fe:f4:42:8e:eb:30:f5:80:67:80:ba:1f:97:c4:ce:2d:e8:02:
47:f8:45:5a:78:5a:0b:17:d7:a1:a1:a5:1e:ae:91:c2:53:0e:
0c:58:06:46:0a:a5:52:4f:65:27:94:03:8e:66:a3:9e:71:30:
eb:87:c9:c5:c9:ba:67:3e:fc:a4:0b:85:97:0f:19:44:88:f8:
fe:68:24:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 05:51:25 2024 by rpki-client on console-ams.rpki-client.org