Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/eDFprL98ObIwFOOoesD9orxZ4cA.roa
File: eDFprL98ObIwFOOoesD9orxZ4cA.roa (raw, json)
Hash identifier: OEEgSBBXcFllnDKYwukh8fuJ8GBcR+JiJU31Pvz/okE=
Subject key identifier: 78:31:69:AC:BF:7C:39:B2:30:14:E3:A8:7A:C0:FD:A2:BC:59:E1:C0
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 1C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eDFprL98ObIwFOOoesD9orxZ4cA.roa
Signing time: Mon 12 Feb 2024 07:55:03 +0000
ROA not before: Mon 12 Feb 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 12 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=783169ACBF7C39B23014E3A87AC0FDA2BC59E1C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:ff:06:22:19:6c:69:9e:52:f6:6b:03:19:
4b:dd:71:3c:09:4f:57:42:e3:25:90:39:98:e6:87:
0c:f7:cb:3c:15:a5:d7:da:21:fa:f7:20:aa:52:bb:
dc:fa:70:75:45:1d:99:45:34:bf:a4:15:c7:e4:69:
a9:40:de:e5:a5:dd:be:36:0e:c2:d0:f2:a9:4a:c3:
f7:0b:7f:55:fa:df:18:1c:6a:6b:20:02:30:f2:93:
5b:7c:d7:eb:f7:a8:cc:ba:e7:f7:b5:3a:99:e2:d4:
9d:c6:94:e0:cf:4d:58:6a:ef:df:2e:75:83:8e:77:
e1:7f:9a:4e:75:7c:e6:84:42:c8:94:26:f0:c2:96:
1c:8f:a7:f3:91:f2:60:59:fa:07:cf:f1:ca:22:4b:
82:18:98:77:03:95:f0:3b:00:f1:e2:8b:c4:9c:72:
2a:0f:e2:90:84:cc:cb:bd:59:04:90:c1:54:85:bc:
9b:af:81:2f:d8:e7:76:5c:e7:1f:2a:82:d3:19:12:
54:2d:52:35:33:a5:38:87:a7:7f:83:70:4c:78:8f:
c2:6d:22:35:7d:60:0e:8d:11:78:af:1b:c3:2f:70:
b4:88:a2:27:d5:2e:97:a9:41:b6:1c:66:95:2c:75:
4b:ef:73:b2:37:45:a7:ec:71:34:3f:a4:e2:f6:74:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:69:AC:BF:7C:39:B2:30:14:E3:A8:7A:C0:FD:A2:BC:59:E1:C0
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eDFprL98ObIwFOOoesD9orxZ4cA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
10:30:c8:b1:d6:0c:b0:b0:58:ef:4c:88:e5:4e:2b:5a:d9:c0:
c4:d3:20:2e:e8:27:78:31:56:5f:36:34:34:09:ba:a3:f2:99:
43:94:12:16:85:15:d7:85:61:56:81:f8:86:68:9f:1a:fe:14:
03:dd:67:ec:58:81:7c:0a:3b:86:45:7c:86:64:3c:f2:99:5f:
41:0b:d0:57:15:29:2b:3c:b9:94:ef:c5:37:6f:c6:83:7c:c6:
a5:e6:89:55:a5:42:28:4f:82:0e:07:dc:f6:3d:39:27:e7:62:
b2:4e:4f:9a:23:ee:e3:50:b7:a2:b2:59:f8:f6:9d:56:6c:03:
b2:8f:0c:f7:bd:7c:55:b8:df:4d:75:d9:f2:ea:b4:61:c7:db:
b5:c6:e2:69:47:ee:77:02:a5:c4:b7:61:19:d9:78:fa:11:98:
4d:c3:a2:de:28:e5:4c:0f:2c:58:70:ea:87:98:60:7a:0e:b1:
47:c7:4a:f6:a1:d9:63:2b:d5:28:0f:75:22:81:54:80:20:48:
99:55:08:07:0e:7f:7f:64:c0:bb:21:cb:e7:9f:9c:26:3b:37:
1c:c9:10:de:3b:7a:7c:b6:73:4a:22:2f:df:4f:c1:bc:f9:7e:
32:d1:83:03:29:99:56:c1:93:e8:0f:2f:3a:8e:2c:aa:12:a2:
0a:37:fd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 15:17:04 2024 by rpki-client on console-ams.rpki-client.org