Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/bIrOF4ysQpz3-OFE1kJO73x9Xk8.roa
File: bIrOF4ysQpz3-OFE1kJO73x9Xk8.roa (raw, json)
Hash identifier: dQz+OBGtoQdsWl6tl2R4ukuoqXS7jyx2jbPq/p+TO38=
Subject key identifier: 6C:8A:CE:17:8C:AC:42:9C:F7:F8:E1:44:D6:42:4E:EF:7C:7D:5E:4F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0986
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/bIrOF4ysQpz3-OFE1kJO73x9Xk8.roa
Signing time: Tue 05 Nov 2024 23:55:02 +0000
ROA not before: Tue 05 Nov 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2438 (0x986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 5 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6C8ACE178CAC429CF7F8E144D6424EEF7C7D5E4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:83:52:b8:b6:a4:11:0c:51:a6:5c:cb:cd:
19:bf:30:aa:79:e2:d8:a7:c9:9c:98:ed:bc:4b:32:
75:41:86:63:5e:87:67:fb:7f:2a:9b:90:b9:18:c0:
93:e3:63:20:82:ff:fc:fe:45:b6:7f:18:f1:d6:c3:
57:67:46:9a:4c:a3:ee:01:aa:5d:27:e5:6f:11:91:
3b:ff:b2:72:f9:a9:ce:70:f0:f5:fb:8e:d0:c4:8f:
0e:34:8d:75:0b:c5:f9:1c:65:1c:ac:17:2f:98:8d:
32:97:9e:ae:f5:50:39:ba:3d:dd:34:17:78:56:6c:
e8:87:0c:b1:fc:ac:fe:0d:47:b4:fa:5e:87:c1:73:
7d:71:1d:4c:df:fe:aa:57:3d:dd:41:44:da:6f:bb:
6a:43:e3:ab:53:cf:a4:32:ea:15:5a:0b:6f:99:29:
ae:86:d1:4b:f5:58:f2:24:26:bb:44:cc:55:b4:9a:
aa:4d:fc:b3:8c:0c:6b:2b:9a:f5:aa:af:ed:cc:a6:
06:34:a2:cc:05:cf:f6:ab:3b:dd:77:24:7b:fb:b1:
b4:28:57:5d:e7:cc:59:f3:a7:dd:fc:e7:69:02:84:
a2:dc:65:eb:59:7a:44:77:04:cb:d9:9b:d9:f7:10:
09:df:86:85:bb:3d:0d:20:e4:d8:1b:ce:98:03:7f:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8A:CE:17:8C:AC:42:9C:F7:F8:E1:44:D6:42:4E:EF:7C:7D:5E:4F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/bIrOF4ysQpz3-OFE1kJO73x9Xk8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
29:10:a0:b5:78:15:d9:ae:f6:71:a7:2d:f2:91:16:a6:0d:8f:
7b:aa:57:bd:08:db:b7:56:de:25:82:f0:b9:d2:b2:17:35:fd:
a2:0a:b6:c8:a6:17:1d:83:4d:fe:e3:e0:9e:98:b0:90:85:8a:
65:83:6f:cd:cd:c8:f5:6c:52:0d:2d:68:56:18:69:88:97:8c:
f3:67:4e:db:f5:21:94:86:a2:86:a8:21:56:30:14:8c:a0:c2:
7c:80:59:41:44:b3:88:7e:f1:04:e3:38:df:78:e3:d5:48:3e:
74:3d:88:53:30:4a:8b:26:dc:ba:47:18:d5:d9:7c:ee:a6:01:
06:51:9f:18:ce:b4:1b:07:c9:e2:d6:23:f5:f7:fd:83:11:a3:
ef:95:f2:e4:1b:0c:7e:d2:b1:b3:2e:56:f0:92:4a:18:aa:f3:
13:5c:6c:d7:c7:c5:de:91:81:bc:8e:ad:8b:d9:86:4f:b9:09:
80:be:d3:52:10:c6:c7:ee:8f:44:0d:55:72:77:33:1d:e9:4e:
a5:76:5f:88:43:2f:c4:0e:58:9d:a0:c6:9f:3a:02:5e:ce:04:
c4:2e:9c:78:ac:1d:63:e2:ed:f0:82:da:82:60:eb:f0:6b:3f:
b4:54:7a:aa:cb:68:79:14:72:f3:09:ad:b2:0a:2d:00:44:f4:
1e:97:89:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:54 2024 by rpki-client on console-ams.rpki-client.org