Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/_ed--z5vyFiwy5Q4JV4OZCwFbzU.roa
File: _ed--z5vyFiwy5Q4JV4OZCwFbzU.roa (raw, json)
Hash identifier: HmB/me3ZFtcBXJbL+OIBiBVrcc2MB3hxuXOMTGuj0Ug=
Subject key identifier: FD:E7:7E:FB:3E:6F:C8:58:B0:CB:94:38:25:5E:0E:64:2C:05:6F:35
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 76
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_ed--z5vyFiwy5Q4JV4OZCwFbzU.roa
Signing time: Thu 22 Feb 2024 07:55:04 +0000
ROA not before: Thu 22 Feb 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 22 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=FDE77EFB3E6FC858B0CB9438255E0E642C056F35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:e0:fc:b4:ef:90:21:51:2b:3f:88:d3:93:
ef:92:59:1d:35:98:36:b3:f2:42:94:b2:1d:12:06:
c4:60:f8:58:41:97:9b:b9:19:4e:79:71:79:4f:1a:
9c:7d:47:61:32:2f:85:84:2a:51:fa:4b:8d:66:6c:
52:e3:63:1b:31:43:84:fa:5a:33:ed:21:78:99:95:
6d:ce:d3:56:7d:d1:ac:3b:b4:e3:4b:1b:9a:a4:ad:
8f:3a:03:7b:46:61:b0:1f:01:75:8c:48:93:16:30:
23:25:e2:c2:14:02:27:ea:67:e0:a1:a4:14:a6:27:
e1:fb:44:de:4b:6a:07:66:66:af:6a:2b:9a:9e:cc:
cc:3a:aa:17:fb:81:54:41:17:66:9c:95:f9:d2:c4:
be:e1:ef:5f:7b:91:c7:12:ba:5f:30:ba:d5:4a:f4:
ec:be:12:3d:65:dd:87:e3:89:83:39:01:b6:99:ed:
7c:52:d0:e6:fd:7d:85:97:01:3a:38:35:bd:3e:2a:
99:de:46:67:bb:c7:16:da:41:94:2e:42:56:50:6f:
96:10:66:a8:e0:87:f5:88:22:b1:ec:2b:0a:cd:6c:
97:f8:a3:7a:e9:2a:83:ff:cb:3e:cc:4f:d7:ee:0d:
0f:fb:a5:dd:43:fb:1d:ce:b8:c4:a4:12:00:3f:42:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E7:7E:FB:3E:6F:C8:58:B0:CB:94:38:25:5E:0E:64:2C:05:6F:35
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_ed--z5vyFiwy5Q4JV4OZCwFbzU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
93:34:63:d0:bf:61:7b:85:ae:e9:72:9b:ba:9d:e8:2d:2f:48:
af:79:38:c6:3b:18:a9:4c:72:54:cb:03:02:09:fe:39:55:b3:
25:25:45:89:04:fc:b6:35:b3:8f:33:2c:1f:7b:0e:49:67:66:
2e:4a:1e:f5:cb:e3:4e:71:32:04:6a:57:8d:8c:8c:4e:7c:67:
f4:14:b7:56:c4:6a:bf:e2:34:58:7b:04:84:37:67:5d:4f:02:
bf:42:10:74:fc:5e:8b:3b:47:28:44:15:36:ce:3b:fb:ac:23:
54:ce:a4:6e:aa:9a:2a:92:6f:67:25:c7:50:34:cb:21:01:0d:
b2:0f:ac:07:1a:a1:c9:55:48:3b:72:28:a3:e5:c3:5b:0a:92:
3d:c2:e6:b6:e1:dc:91:77:4c:7e:c0:a2:37:82:59:7a:2f:55:
50:dd:3f:48:aa:a4:76:c0:e1:cf:f9:95:c3:0d:07:3c:93:45:
f4:3c:b4:7d:16:e7:ba:2b:5f:09:18:2d:06:52:04:21:2b:92:
e3:f3:62:e3:e8:a2:f2:d9:ac:d1:a4:a1:3d:5c:c3:e5:21:34:
b5:86:bc:6b:94:3c:8e:9c:d9:30:1c:41:92:5f:43:4f:79:28:
1c:8d:66:40:e9:1c:00:09:1c:bd:d2:ca:c1:85:2e:a5:b5:38:
ae:08:f3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 15:54:47 2024 by rpki-client on console-ams.rpki-client.org