Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/b29g6lyh-Zl7xRWyMUSDdlyHRtk.roa
File: b29g6lyh-Zl7xRWyMUSDdlyHRtk.roa (raw, json)
Hash identifier: 0MZC6+tvaTmk4VT63AKtSPsTXbzu4hD1VhJOzr/A9j0=
Subject key identifier: 6F:6F:60:EA:5C:A1:F9:99:7B:C5:15:B2:31:44:83:76:5C:87:46:D9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0487
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/b29g6lyh-Zl7xRWyMUSDdlyHRtk.roa
Signing time: Sun 16 Jun 2024 23:55:03 +0000
ROA not before: Sun 16 Jun 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jun 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1159 (0x487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 16 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6F6F60EA5CA1F9997BC515B2314483765C8746D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e5:9b:6d:99:b2:cd:22:92:06:a1:b3:f0:93:
a7:ad:c3:f2:86:c9:d4:a9:9a:fa:28:ad:ff:b1:e8:
1a:37:cf:d0:49:27:26:d4:66:05:31:7b:03:54:91:
6f:aa:3f:c8:7c:4f:78:5e:90:4b:0c:83:07:f6:f2:
5c:b9:81:2c:69:f0:10:3e:11:fa:6b:54:ff:17:f7:
58:c9:e0:39:61:13:91:5a:48:80:fc:09:cd:90:ac:
ed:c3:e3:47:08:a8:ac:7f:7e:f5:db:49:bc:cf:95:
05:00:ec:61:3a:ad:f0:2f:20:d2:53:48:45:0b:e2:
4c:4e:81:63:dc:da:19:5c:5f:16:c0:0f:09:f7:74:
f5:95:a2:74:c2:e7:1c:d1:b4:61:cc:06:b9:46:92:
ef:16:64:6f:c1:b3:d8:e1:f5:85:4d:9c:c4:fc:e8:
69:c3:36:21:49:3b:71:fd:23:51:06:50:40:cc:49:
d3:18:49:43:15:d1:9a:f8:b0:be:ea:84:16:16:2b:
30:30:8d:78:7e:0c:98:82:e4:de:fa:75:ab:81:2d:
7f:e0:bc:79:c2:79:95:e1:ba:c4:94:29:63:42:0f:
b0:d2:6f:ea:60:bb:91:f3:29:d1:87:be:07:91:2f:
10:b4:09:ed:55:b8:29:34:ec:7d:ec:bf:6c:ae:20:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6F:60:EA:5C:A1:F9:99:7B:C5:15:B2:31:44:83:76:5C:87:46:D9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/b29g6lyh-Zl7xRWyMUSDdlyHRtk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:c3:72:5b:58:8c:c7:77:c8:f8:ff:65:61:fe:2b:61:42:00:
cf:98:ca:f7:11:9e:3b:77:31:5c:9e:78:58:81:a3:71:f3:8f:
f6:91:13:14:11:b1:32:16:eb:5f:96:0a:6c:4d:3b:23:3f:a9:
9b:e1:4f:d0:1a:0a:ec:ca:03:51:ca:44:e0:ec:a5:c9:0c:e4:
80:36:c0:c6:12:f0:93:3e:8e:12:63:cf:5d:27:1d:dc:3c:06:
95:ea:7c:2e:d9:5a:e4:40:16:e0:32:ed:51:37:a3:8a:c3:64:
10:0c:cf:33:9f:98:4e:f1:c1:f5:74:70:75:77:07:51:28:c3:
23:8e:88:17:5a:4c:2b:37:65:a1:c9:96:c8:e6:1b:13:a9:14:
3a:92:65:a1:a5:50:c8:1a:d9:d2:6b:0b:16:4c:37:da:fe:70:
85:d6:61:c2:4a:c7:9e:7d:01:07:9c:dd:87:fd:c9:2e:69:07:
6d:ae:f7:b3:91:00:bf:fb:a8:f7:31:2b:23:81:4d:29:41:31:
60:06:f1:88:bf:79:9f:82:7b:ff:ab:d2:74:af:f7:07:21:e0:
7e:a8:d4:f1:81:3a:38:f7:a7:7c:f4:5e:f4:61:69:8f:26:29:
78:b1:a5:ce:81:3f:6e:ef:25:c3:c3:df:2f:30:36:7e:7c:d1:
b9:a2:79:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 05:00:58 2024 by rpki-client on console-ams.rpki-client.org