Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/XXKIh54KXqmL0KlOt11YlA0Kqdw.roa
File: XXKIh54KXqmL0KlOt11YlA0Kqdw.roa (raw, json)
Hash identifier: gOqtME94bXyYPHfnCk1lVw4A02nbDmPNMUnp+1hqUGU=
Subject key identifier: 5D:72:88:87:9E:0A:5E:A9:8B:D0:A9:4E:B7:5D:58:94:0D:0A:A9:DC
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0331
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/XXKIh54KXqmL0KlOt11YlA0Kqdw.roa
Signing time: Thu 09 May 2024 23:55:04 +0000
ROA not before: Thu 09 May 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817 (0x331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 9 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5D7288879E0A5EA98BD0A94EB75D58940D0AA9DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:df:54:00:4a:e7:62:47:92:7b:80:b3:3b:
d5:fc:ce:4c:68:37:46:14:92:36:bb:43:da:6b:65:
28:b7:2b:8f:23:20:ca:74:36:60:36:49:73:82:43:
7a:a0:dd:c0:1e:00:53:d9:3b:86:75:6a:04:b8:d9:
1b:8d:b3:bc:35:8a:ea:cb:72:7f:f0:e8:25:c0:4b:
bd:7f:b7:af:98:81:85:7c:d6:67:1a:ea:3c:60:73:
8b:23:26:1b:08:f6:dd:74:8e:bb:55:a8:a3:7c:b2:
cf:a3:22:75:f5:49:6e:b0:4a:36:66:bd:76:96:27:
85:7b:5b:fc:2c:f1:51:18:ae:3c:a2:da:8b:67:82:
b0:3c:f0:a8:a1:8d:6d:34:be:dc:9d:87:9e:92:00:
d1:9d:f6:da:26:84:32:ec:0a:69:ff:74:bf:c5:19:
71:7d:0b:3b:3f:ab:77:fe:6e:e5:2f:8f:41:a6:9e:
66:c2:4f:58:35:f4:f1:e7:27:03:30:ae:a4:b7:95:
d0:aa:3c:b8:17:53:ce:c8:48:73:8f:07:7b:ab:0b:
05:71:c2:4d:dd:b4:80:00:42:cd:3a:a2:6f:5b:66:
d5:2d:8f:a5:8f:42:74:2d:a1:90:73:34:6c:26:d7:
09:54:fd:36:f7:90:00:2d:11:a4:84:d1:bc:ee:df:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:72:88:87:9E:0A:5E:A9:8B:D0:A9:4E:B7:5D:58:94:0D:0A:A9:DC
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/XXKIh54KXqmL0KlOt11YlA0Kqdw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1a:69:01:9e:60:16:28:3d:37:41:31:09:e5:3e:0e:6b:96:
70:c1:f7:34:72:47:67:3c:ab:6e:97:3d:83:30:fb:5b:f9:bc:
1c:81:0e:01:94:cc:4e:44:47:a1:c2:12:3d:43:88:e1:3a:bb:
be:2b:1a:d2:62:02:33:38:2b:70:b8:0e:8a:e5:2b:c0:c2:2e:
02:23:14:9f:20:91:83:9b:a7:c6:92:f9:d3:3c:ce:27:9e:25:
3c:1e:f4:9c:00:6e:e1:49:6b:4f:49:89:82:14:0e:cc:78:46:
76:5c:88:7e:79:5e:98:07:5a:e5:fb:ca:97:72:48:08:11:8b:
bf:54:14:89:a1:8c:ed:df:ac:ef:d3:ad:ce:b3:e5:55:25:17:
c5:d0:74:47:04:88:92:f5:e9:2d:53:c8:20:53:48:9c:13:56:
33:6a:4e:39:ce:51:0e:16:47:7d:ab:b0:f0:2a:49:72:b5:7e:
b9:d9:59:cd:c7:e2:d5:31:00:e8:78:16:e6:fc:2a:3d:e8:2a:
88:b5:89:c5:84:c5:f1:2c:e9:08:e6:ab:bc:7c:c6:88:db:60:
25:19:15:b3:b3:47:f6:c1:52:96:70:27:51:7d:53:2e:d4:0f:
1c:e7:7f:2d:13:c4:c4:4a:54:ac:5d:33:68:3c:45:41:26:79:
71:1f:2d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 04:58:19 2024 by rpki-client on console-ams.rpki-client.org