Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/dNzs39xdL9yqXZu0bx64ExVOqkc.roa
File: dNzs39xdL9yqXZu0bx64ExVOqkc.roa (raw, json)
Hash identifier: m+l5AyA9l88Kvao5f0MNpFUJY1Ox8T9xZZEQPqZMZgc=
Subject key identifier: 74:DC:EC:DF:DC:5D:2F:DC:AA:5D:9B:B4:6F:1E:B8:13:15:4E:AA:47
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0646
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/dNzs39xdL9yqXZu0bx64ExVOqkc.roa
Signing time: Mon 05 Aug 2024 15:55:03 +0000
ROA not before: Mon 05 Aug 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1606 (0x646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 5 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74DCECDFDC5D2FDCAA5D9BB46F1EB813154EAA47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:1e:71:44:2f:48:bc:03:2a:37:80:63:5e:
9a:02:c0:61:ff:f8:78:31:13:02:93:a1:43:c9:cf:
ff:cc:7b:d9:5a:8e:e9:41:52:86:ec:2e:7f:d3:58:
68:b7:26:8e:bb:9e:2a:30:0e:23:08:49:dc:96:53:
e6:80:a9:d4:51:6d:de:d6:59:aa:ab:cc:f7:e8:e6:
ec:c7:13:4d:97:49:09:ae:ae:e9:54:de:b7:da:d5:
32:9b:38:eb:f9:aa:61:25:43:93:6e:67:63:94:fb:
f2:c6:bd:a4:b1:a8:9f:d7:97:ef:47:83:7c:fa:d8:
94:dc:8f:e4:8e:d1:c6:58:7f:9e:4b:1b:67:6c:2e:
82:a8:ba:38:7f:a5:d4:f7:49:17:ed:19:84:8a:65:
be:5a:6b:50:a2:3c:4d:0b:5e:5a:7b:b7:52:b7:a6:
8d:bf:0c:5e:af:99:dd:fe:01:8b:c7:ee:b8:1d:da:
39:0c:2f:ca:3c:ed:53:9c:23:7a:52:de:fc:b3:cd:
54:9d:90:76:6a:e0:29:dd:68:d8:ee:52:55:a2:d1:
a3:c6:3e:2d:68:5b:c9:ba:09:61:a6:df:8a:48:be:
38:a4:77:45:27:00:09:ec:05:51:1e:ba:3a:7d:77:
4c:80:ea:31:f1:d0:81:c3:6a:cb:88:47:d8:e1:e0:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DC:EC:DF:DC:5D:2F:DC:AA:5D:9B:B4:6F:1E:B8:13:15:4E:AA:47
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/dNzs39xdL9yqXZu0bx64ExVOqkc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:91:24:15:45:62:5d:1b:37:52:08:d7:cd:ee:9f:4e:cf:a2:
0b:b5:d8:52:3d:54:d0:41:76:f1:3f:9c:3e:f5:66:1a:97:1a:
57:3a:14:c3:47:f2:0f:32:f9:dc:b7:00:4a:ef:fa:fd:76:d9:
f7:7d:a1:f8:bd:07:55:c0:b2:5d:52:51:20:a0:7c:d3:d7:6d:
4d:c1:d8:f5:f5:5c:ae:56:b4:21:f7:46:c8:7a:16:ee:58:4a:
50:d8:b0:af:a9:12:05:3d:d9:57:de:e7:f7:0a:f4:44:ea:fc:
82:8f:05:ba:7b:37:fd:2e:da:a2:ec:19:bd:94:86:b0:e9:49:
8e:de:16:24:61:c1:75:fd:05:41:4d:ef:38:12:58:ac:04:88:
5b:9b:59:a1:a1:c5:4c:ed:16:14:5c:11:dc:b6:13:76:82:56:
5d:aa:79:7b:20:f3:37:7a:85:09:9c:30:d2:cc:65:cd:ea:63:
43:f1:e5:5f:e5:a5:80:2a:ce:fd:44:f2:9f:68:d1:fc:66:a7:
99:eb:86:38:53:c5:ba:0c:a2:e4:56:2b:f4:a7:5d:23:a9:8e:
fb:fc:81:97:92:7b:dd:ce:5e:6a:ba:68:67:43:3e:8d:bb:15:
0e:89:c1:a3:72:7c:f0:88:06:38:30:04:61:95:d0:9f:66:0b:
c3:e7:ff:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 21:32:36 2024 by rpki-client on console-ams.rpki-client.org