Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ZcKGqESlr1yb1NgMisknpwX5sus.roa
File: ZcKGqESlr1yb1NgMisknpwX5sus.roa (raw, json)
Hash identifier: TmhG2td8lOdWtCFjqzbj/5FW5Cja7mU1Zm4zrB96D98=
Subject key identifier: 65:C2:86:A8:44:A5:AF:5C:9B:D4:D8:0C:8A:C9:27:A7:05:F9:B2:EB
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0775
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ZcKGqESlr1yb1NgMisknpwX5sus.roa
Signing time: Sun 08 Sep 2024 07:55:03 +0000
ROA not before: Sun 08 Sep 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1909 (0x775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 8 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65C286A844A5AF5C9BD4D80C8AC927A705F9B2EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:6f:5c:3e:2b:a8:21:00:f0:1a:64:c0:ba:
31:b6:de:8a:b1:53:e3:0a:18:ea:8b:a3:bd:93:a4:
b8:0f:0a:61:97:e8:56:1a:b2:05:d3:aa:03:52:47:
02:4a:3f:af:eb:fd:c0:eb:e4:ff:bf:cd:45:99:f2:
0b:05:ca:92:68:6f:a8:c3:ab:2e:83:e0:8a:98:d4:
a7:7e:b7:12:d2:e5:29:bb:f6:b9:51:bb:c3:11:33:
67:e4:23:2d:6b:18:3a:c1:67:e4:27:08:9f:ad:63:
2a:12:6e:ed:0d:dd:5d:55:55:21:25:a1:3d:a6:e3:
48:68:56:63:93:aa:93:1a:8b:5b:c7:bf:49:bd:bb:
23:12:71:cc:a2:d3:1a:72:ba:ce:4e:c6:10:2a:62:
d6:63:d0:71:52:6c:c1:f9:3c:04:ed:4b:d0:6d:42:
99:39:71:fb:ed:ff:80:49:e2:02:1b:25:3b:f5:7f:
34:22:1f:93:5f:80:d6:e2:78:94:a0:28:4e:8a:a0:
44:05:76:ea:b6:de:ce:8b:59:05:95:71:d8:9a:e1:
e3:b7:cf:cf:3c:0d:30:e6:b5:15:b9:4a:4d:ca:59:
38:32:0b:8b:72:30:8e:68:92:85:17:aa:6b:9d:50:
41:14:4d:a4:29:d1:73:65:42:51:26:55:5a:f2:a6:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C2:86:A8:44:A5:AF:5C:9B:D4:D8:0C:8A:C9:27:A7:05:F9:B2:EB
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ZcKGqESlr1yb1NgMisknpwX5sus.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:ff:08:cf:0e:1a:02:b4:13:0d:39:48:47:4d:56:cc:48:68:
cd:df:cf:00:69:a9:83:dc:81:1d:0c:f3:6b:79:10:36:b5:41:
d2:15:d1:4f:fb:29:7f:55:5d:b9:6f:da:b4:3d:e8:e0:0f:a6:
0a:a5:21:53:e9:44:ce:a7:0b:19:3c:09:d1:51:ae:9f:29:00:
8e:fe:93:91:a0:52:ae:77:8e:36:9a:0e:9e:6e:ad:29:b2:28:
a7:17:82:06:ed:b7:89:20:3b:f8:db:92:ab:0a:4f:fb:5f:c0:
01:52:11:d4:bd:41:8c:ab:64:15:83:b5:fa:54:5f:b5:1e:00:
79:81:60:b6:1c:ac:01:3b:7f:ba:f2:27:b4:cb:3b:6e:c7:4e:
19:d4:4b:99:25:1e:49:c9:3c:d6:ba:e2:e8:ec:e6:10:d6:18:
e9:85:9d:b8:b5:21:81:05:3e:4d:af:7e:64:5a:72:79:db:c7:
53:cb:fc:1c:9a:24:71:e2:b4:d8:6c:62:97:99:ef:71:b8:75:
ec:02:91:71:68:dc:1c:13:2c:67:6d:32:67:47:3d:5c:64:ad:
3d:e9:2f:59:f7:58:4c:e6:ff:07:e9:9b:97:fe:3c:2b:98:b6:
06:b9:32:b9:31:5c:5e:90:92:7f:b6:76:dd:d3:4a:19:25:e5:
4c:a8:b3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 14:15:36 2024 by rpki-client on console-ams.rpki-client.org