Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Z26RB87iweB9w4-oqmWPI4mouds.roa
File: Z26RB87iweB9w4-oqmWPI4mouds.roa (raw, json)
Hash identifier: +EBsflfgPXkrY9KEsW790fhfwIAxBrdrk71paxKA5u8=
Subject key identifier: 67:6E:91:07:CE:E2:C1:E0:7D:C3:8F:A8:AA:65:8F:23:89:A8:B9:DB
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0766
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Z26RB87iweB9w4-oqmWPI4mouds.roa
Signing time: Fri 06 Sep 2024 15:55:04 +0000
ROA not before: Fri 06 Sep 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1894 (0x766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 6 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=676E9107CEE2C1E07DC38FA8AA658F2389A8B9DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:7c:85:58:ef:5a:bf:ac:e4:91:33:90:42:
9c:fa:0f:f9:8c:4a:25:03:db:fa:03:6b:eb:98:2f:
69:27:b5:ce:68:1d:a7:54:96:d0:ee:28:3c:83:90:
df:76:b9:68:79:bd:5a:6f:1b:27:37:0c:62:ec:9a:
c0:2f:e5:54:1d:6c:f5:36:7a:d8:31:bd:aa:84:d7:
38:f5:4a:24:e7:cc:ce:23:26:5c:42:25:c7:e3:d0:
c2:3f:fe:71:4a:a7:7b:50:23:5f:c3:06:f9:f7:b1:
12:47:54:e7:3f:70:26:78:6d:2b:85:59:4b:23:7e:
7b:64:d6:14:da:65:8e:d5:65:84:b3:33:0b:1b:3e:
a0:b0:0d:ab:b8:d0:d1:3c:00:84:89:02:01:57:5b:
05:e7:c1:ba:49:e8:f2:e4:21:6e:cc:4f:fa:59:fc:
5f:8c:c0:c3:74:9e:f6:30:a9:02:a2:b3:43:24:93:
74:f6:05:df:cf:70:b6:cd:ad:b3:df:7c:91:d8:34:
23:8f:82:dd:e3:88:bf:ca:d7:15:3c:f1:0f:31:e8:
5a:57:28:8c:d3:e9:47:20:ed:64:11:61:3f:8a:2e:
af:a7:87:c4:cc:ac:04:56:d7:30:43:bb:ff:cc:94:
fa:39:cc:27:c5:62:3f:b8:47:55:3b:13:91:dd:7d:
3a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6E:91:07:CE:E2:C1:E0:7D:C3:8F:A8:AA:65:8F:23:89:A8:B9:DB
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Z26RB87iweB9w4-oqmWPI4mouds.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:74:07:39:47:5f:2b:c3:e0:73:be:fa:2c:4d:c7:64:a3:e4:
f3:0e:d1:04:58:2a:e6:75:3f:5a:fa:6f:fd:f3:05:a5:39:4f:
5d:d7:40:aa:68:5b:50:9b:88:8a:4f:76:19:11:da:7b:4b:07:
82:5a:56:42:02:ed:38:fe:e2:12:cc:14:a6:6e:af:ef:26:b9:
5f:d4:b6:ba:7d:19:95:81:36:1c:44:82:e4:3a:70:b3:23:04:
db:34:73:af:5c:00:22:62:88:62:73:3e:e0:f1:72:98:21:53:
0f:5f:30:d6:1d:d9:af:f7:59:27:7c:d6:e6:be:d7:3f:7a:08:
b1:23:85:2b:ac:55:53:8f:87:21:9b:1e:a0:c2:fb:0f:ad:e7:
b5:49:50:78:09:80:1c:31:9b:6f:2e:c9:4f:f0:44:43:a5:ea:
b5:df:c0:22:35:e8:19:97:5c:77:3f:66:61:16:9c:74:c1:ee:
5a:64:cd:62:f9:5c:52:9b:70:c7:db:94:63:03:63:99:8d:a6:
76:78:b8:5c:56:8c:36:2d:76:6f:a5:14:11:6d:b4:4d:8f:b1:
9b:a3:1a:f3:11:b9:64:b0:b8:af:b5:25:f2:bb:e0:56:28:ec:
f2:33:41:70:92:10:c6:95:f9:de:3f:9f:91:35:cd:9c:03:99:
74:f1:de:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 23:12:44 2024 by rpki-client on console-ams.rpki-client.org