Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/eZ-qq8UEivXlia82GkHNYMPZiXw.roa
File: eZ-qq8UEivXlia82GkHNYMPZiXw.roa (raw, json)
Hash identifier: S3yESaK4QVfwLMU01iQoHAezdzyP+BSrYwDySatjQp0=
Subject key identifier: 79:9F:AA:AB:C5:04:8A:F5:E5:89:AF:36:1A:41:CD:60:C3:D9:89:7C
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 04A2
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eZ-qq8UEivXlia82GkHNYMPZiXw.roa
Signing time: Wed 19 Jun 2024 23:55:03 +0000
ROA not before: Wed 19 Jun 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1186 (0x4a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 19 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=799FAAABC5048AF5E589AF361A41CD60C3D9897C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7a:da:7f:74:7d:f5:82:36:fc:2e:f6:92:54:
e8:c7:2d:df:34:6f:e7:49:ae:26:8c:41:5c:8e:96:
24:64:a2:b1:94:af:67:82:3c:40:b6:36:fc:7c:ab:
3a:74:a1:31:47:1b:a8:44:21:18:3e:54:e4:ba:95:
b5:5d:c9:2f:28:67:72:05:80:8b:08:ae:34:bb:04:
05:72:60:b3:8b:2b:41:af:44:b3:7a:4f:d8:40:4c:
2f:31:e6:cb:1e:69:e7:4d:45:6e:43:78:39:1f:96:
d2:5d:b5:f3:02:10:8b:45:f9:7d:e4:fd:92:a1:f2:
fb:dd:06:1a:8a:30:1b:7d:fb:69:a2:19:78:a8:e1:
6d:31:fa:22:4e:0e:a7:fb:ae:89:f8:c6:dc:80:0a:
cd:d3:28:3a:59:d8:2f:90:24:8e:5e:f0:6e:55:b7:
79:49:6f:04:5f:96:97:8d:93:be:12:00:d7:39:f8:
4b:8a:40:39:99:23:22:da:18:44:22:35:f2:4b:53:
bd:a4:35:62:c3:ca:99:2c:f3:73:ac:60:52:a9:3a:
b0:48:70:84:a3:d6:82:fe:df:d1:b6:ec:8a:c7:12:
f1:31:4e:06:53:94:5c:86:94:64:6c:cf:ed:f6:26:
2a:92:df:d5:86:a2:75:1d:2f:d4:77:02:6b:1e:0c:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9F:AA:AB:C5:04:8A:F5:E5:89:AF:36:1A:41:CD:60:C3:D9:89:7C
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eZ-qq8UEivXlia82GkHNYMPZiXw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
21:14:56:98:6d:a9:73:ba:dc:d2:39:ae:1f:45:9c:88:f0:ce:
5c:73:de:bf:40:20:c4:07:5b:25:c9:51:c5:5f:8e:e2:41:a6:
f2:d6:1d:17:e1:64:4b:b9:6f:70:28:e7:66:87:e9:18:c5:e4:
c3:97:f8:6d:b6:22:8e:4c:cf:bc:8d:90:b1:9a:32:0a:1b:6f:
bb:17:9f:1c:24:50:a1:74:52:73:c5:20:de:61:c4:0e:da:46:
11:1f:b1:ec:c5:33:65:7f:1d:b3:3e:e7:dd:9e:6f:c4:0a:d5:
cf:f8:22:a7:a1:ac:71:63:2f:57:0f:97:76:06:ca:a3:f4:ec:
7d:b3:e1:db:67:04:e5:9a:76:74:29:9c:ff:31:88:8d:d5:f7:
50:67:5b:04:d5:b5:68:2f:02:cf:c8:44:a6:aa:c1:6c:ec:38:
6a:fd:6d:92:0c:bb:96:f4:a8:a0:4d:a1:c7:ad:f3:e5:52:7f:
0f:8d:7f:95:18:5a:c3:7e:4f:64:53:69:7f:e4:f8:e0:ec:04:
cd:9b:39:a0:5c:29:54:67:ce:77:84:8a:0c:3a:0f:4d:1b:41:
79:1d:49:ca:f6:b4:4e:a7:fc:37:f7:56:e6:62:ec:f2:b6:f6:
9a:2f:af:8d:57:6a:f7:eb:6e:4d:ab:20:d1:e3:e3:c9:a5:c3:
da:c0:9d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 04:59:58 2024 by rpki-client on console-ams.rpki-client.org