Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/_p6NNpa_cSGwz2Xmbnua3dpomLs.roa
File: _p6NNpa_cSGwz2Xmbnua3dpomLs.roa (raw, json)
Hash identifier: YoAX4DKl1WnhmcezNHeZxP7oOageJ4Cu4WfmEqFeIco=
Subject key identifier: FE:9E:8D:36:96:BF:71:21:B0:CF:65:E6:6E:7B:9A:DD:DA:68:98:BB
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 040F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_p6NNpa_cSGwz2Xmbnua3dpomLs.roa
Signing time: Mon 03 Jun 2024 15:55:04 +0000
ROA not before: Mon 03 Jun 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1039 (0x40f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 3 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=FE9E8D3696BF7121B0CF65E66E7B9ADDDA6898BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:11:c7:fc:b2:63:ef:47:e3:de:84:c0:98:
3e:c7:9c:4f:82:32:6d:45:ad:db:11:86:37:21:c9:
8c:ce:e6:9e:68:53:12:4b:3d:d7:e3:14:c9:69:7a:
00:b2:87:b0:0d:d3:88:a3:7d:fb:5e:14:77:ec:43:
e9:0e:7f:8e:88:e8:1f:c4:f1:21:4b:0f:96:fb:12:
bc:e0:f0:51:67:a2:46:1f:94:d0:52:64:29:bf:26:
88:4a:11:ea:c3:6a:a4:ea:45:c3:ab:31:14:e8:f2:
d1:0c:03:f1:30:e5:41:c3:3c:fa:11:69:c8:89:e2:
6f:5f:5d:3e:96:a5:47:56:49:bb:f6:ed:b8:85:06:
be:1b:ae:3c:11:63:dc:65:69:30:4c:7e:84:3c:99:
e7:ca:f6:9c:e9:6e:ee:e7:ac:d0:10:fc:73:50:c4:
5f:ad:55:6d:17:e8:28:2e:cb:8d:4c:8c:de:97:fa:
12:aa:d1:e5:5a:96:c5:aa:5b:73:a2:b3:c1:d6:f5:
02:a3:11:f5:ed:dd:73:7a:49:fa:5f:8b:3b:e6:18:
36:21:8d:fe:9b:df:5c:61:a7:0d:25:84:7a:18:22:
af:07:80:74:0f:b1:44:91:cc:84:1a:09:91:74:f7:
d7:1b:e6:c7:fd:ab:09:e2:f0:4e:e1:df:fd:c5:5f:
66:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9E:8D:36:96:BF:71:21:B0:CF:65:E6:6E:7B:9A:DD:DA:68:98:BB
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_p6NNpa_cSGwz2Xmbnua3dpomLs.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:eb:81:1f:a0:d4:3d:11:47:a7:1e:49:30:b6:f5:10:6c:ad:
d3:98:9e:25:8b:f4:5a:2c:94:32:b6:c8:e4:9f:a4:0b:85:c3:
d0:b0:db:e1:cf:28:5f:a6:b0:2d:71:5c:65:dc:92:ac:ad:c6:
63:4c:0d:57:56:21:43:10:e6:34:7b:aa:37:16:9d:e9:24:5c:
14:94:a8:e6:1e:4f:ad:b0:0b:a1:3f:aa:30:62:11:71:0a:59:
33:4a:36:38:2f:1f:27:66:7c:e4:1a:eb:04:e6:be:bb:b3:0b:
a4:a1:93:af:e3:0c:25:4c:81:e0:16:14:a2:0f:e5:16:c2:47:
4c:a0:a8:d8:8d:ca:f3:d6:ba:45:64:2e:6c:74:aa:89:05:6b:
df:56:2b:ec:44:ca:c7:1a:6e:64:1c:4d:df:5b:37:4a:dd:1d:
27:0b:78:d0:36:6f:65:09:5a:b3:f6:3b:c1:c7:fa:78:57:9c:
19:bb:83:22:15:ea:1c:38:f7:28:42:a5:15:2e:42:f1:1b:34:
09:56:f4:80:5e:e4:09:7a:50:4d:21:b6:c0:c7:8b:2f:0f:24:
da:3c:0f:b6:cf:a0:99:13:19:d4:09:33:33:9a:d0:a0:52:45:
de:7b:e9:66:98:bf:f6:ea:97:e3:9e:ed:3b:d8:6e:cd:fc:b7:
4d:00:93:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 23:11:04 2024 by rpki-client on console-ams.rpki-client.org