Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/YKBeKTmD6RsXEdvx43iaOHjqbtA.roa
File: YKBeKTmD6RsXEdvx43iaOHjqbtA.roa (raw, json)
Hash identifier: u7N/6+oC0lk5mkqd92XoEOs0+IzdG0ZfQoaM6HUkOPo=
Subject key identifier: 60:A0:5E:29:39:83:E9:1B:17:11:DB:F1:E3:78:9A:38:78:EA:6E:D0
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: E8
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/YKBeKTmD6RsXEdvx43iaOHjqbtA.roa
Signing time: Tue 05 Mar 2024 23:55:04 +0000
ROA not before: Tue 05 Mar 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 5 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60A05E293983E91B1711DBF1E3789A3878EA6ED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:9b:bc:ab:a2:bd:64:7f:d2:a4:cd:af:e1:
55:be:96:4f:04:40:be:5b:1c:b3:17:ce:bb:30:39:
83:5c:1a:6b:e6:fa:f7:0e:e2:ad:ea:e8:e3:a2:3c:
ce:51:e4:06:66:4d:fc:34:4c:1d:54:22:f7:59:31:
f6:07:a7:32:7a:f2:fc:c8:2e:3f:d6:3c:08:57:33:
d6:a5:a0:58:22:23:8d:8d:90:27:0a:88:f9:19:32:
c6:12:45:38:e5:36:9c:11:de:15:87:19:84:2a:0c:
ac:af:07:46:9e:42:a7:ca:c0:38:2a:16:30:c8:dd:
38:ee:bf:cc:f4:30:67:f3:31:02:f2:96:a7:38:aa:
72:82:56:63:ca:37:9c:31:de:e5:d0:ab:ae:f3:53:
93:e4:08:7d:00:8f:f9:6a:09:ec:92:03:60:35:b5:
6f:0b:e0:d9:8e:a5:38:65:bb:2e:15:89:b0:91:c5:
1d:46:ed:a8:b2:d8:e9:88:35:5c:07:26:54:fb:62:
ec:7b:bf:53:c5:a7:4c:e3:53:a0:d1:bf:e3:84:60:
e5:79:39:9d:0c:1b:98:33:17:54:ad:85:97:5b:18:
bb:1b:25:c6:0a:83:d6:e8:58:23:d1:d6:a8:f8:73:
eb:1c:01:43:38:03:61:75:a5:bf:cc:d8:12:bc:a1:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A0:5E:29:39:83:E9:1B:17:11:DB:F1:E3:78:9A:38:78:EA:6E:D0
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/YKBeKTmD6RsXEdvx43iaOHjqbtA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:db:c7:ff:94:ad:c5:48:98:2a:17:c5:cc:1c:73:4e:b4:0c:
2c:21:fa:5f:67:a0:62:ca:3f:27:ec:54:3a:4b:b2:0e:49:0f:
c2:02:7a:85:15:58:a5:8c:ea:3c:b9:ff:1c:41:f0:de:41:23:
cc:c8:dc:01:54:56:48:01:48:01:bb:fd:a4:6b:a2:3a:09:f4:
2e:89:ef:25:f1:8d:ac:ac:83:c9:0a:86:04:8c:c3:31:3b:05:
b0:b8:18:50:68:55:0c:c0:54:d6:a3:36:f1:41:30:11:90:f4:
1c:f8:3e:f3:05:95:8c:05:99:f3:d0:93:5d:af:04:03:a3:a8:
74:32:fa:a8:48:d4:50:1c:d1:ef:41:04:c0:18:fb:60:68:b2:
d0:7c:be:86:2c:38:09:4f:19:cf:c5:5b:ee:5e:aa:1b:35:27:
7c:c5:a7:cd:13:11:29:e7:84:31:65:55:3f:8e:79:5a:3b:fc:
3f:61:bf:5e:5c:2b:8c:9f:62:41:64:e3:c6:48:41:6c:de:8f:
cc:93:b4:16:83:19:66:74:2e:66:70:5d:b6:44:51:79:72:cb:
23:8a:a1:0e:de:c8:de:9c:7a:c9:21:95:0a:27:b4:ca:48:01:
88:c7:89:34:82:f6:6b:d0:91:0c:7e:47:80:34:40:71:ed:52:
aa:0a:92:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 06:44:00 2024 by rpki-client on console-ams.rpki-client.org