Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ed3-war2jkMgYMFYEDzNqKd3QI8.roa
File: ed3-war2jkMgYMFYEDzNqKd3QI8.roa (raw, json)
Hash identifier: FHGJosaRNAvPJSfTYegI5wZBmQSAdGnOjgM098WkK+4=
Subject key identifier: 79:DD:FE:C1:AA:F6:8E:43:20:60:C1:58:10:3C:CD:A8:A7:77:40:8F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0883
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ed3-war2jkMgYMFYEDzNqKd3QI8.roa
Signing time: Tue 08 Oct 2024 07:55:02 +0000
ROA not before: Tue 08 Oct 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2179 (0x883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 8 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79DDFEC1AAF68E432060C158103CCDA8A777408F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:ae:0c:81:96:20:53:ce:4f:39:a1:3e:c9:
11:47:85:2d:9e:80:42:88:01:ec:a8:93:0a:5e:67:
8f:09:50:54:fa:44:72:6f:c4:c3:01:e8:07:d6:9b:
f5:6e:8e:69:e3:bb:5a:fc:d0:cc:3e:4c:1a:d7:6b:
b6:f9:7d:b0:9b:48:0c:3b:d2:15:b4:e8:74:74:7d:
9e:96:7a:36:7d:65:6d:29:04:d7:8e:d7:8e:e2:59:
c0:27:6a:a7:48:a3:22:fe:09:75:0d:6f:fa:dc:9a:
66:e8:ba:76:f1:75:c6:7a:08:8b:2f:7e:a1:27:2e:
ed:c7:ab:eb:c3:d3:ce:2e:a3:29:76:05:45:d6:22:
8c:0e:1f:bf:4e:75:16:69:91:4a:b8:0b:e2:cd:e0:
0a:20:97:52:56:0c:d6:4c:bb:5a:ef:25:29:9e:3f:
aa:9d:72:7f:b5:ae:cd:c2:76:60:0a:9d:a9:09:91:
b4:7c:3f:77:c6:0b:f6:18:00:97:3b:1e:e7:45:bb:
9a:66:1c:75:3f:d6:39:cd:01:1c:31:b8:2d:22:94:
ee:91:cd:39:f4:cb:e8:72:02:02:8b:65:ca:da:ad:
1d:62:a0:b8:33:be:dd:e3:0b:88:ce:bb:fc:72:c9:
57:fc:40:d8:b5:ad:50:3e:fd:50:45:91:0f:ab:50:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DD:FE:C1:AA:F6:8E:43:20:60:C1:58:10:3C:CD:A8:A7:77:40:8F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ed3-war2jkMgYMFYEDzNqKd3QI8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:8d:d1:5d:cc:f8:fe:53:a2:ee:00:69:76:31:59:68:52:34:
ce:7b:04:2c:e0:6b:ec:79:16:02:f7:5e:9a:46:e5:0f:72:5a:
92:20:81:27:d5:3e:52:75:f6:dd:4d:a4:1e:aa:29:4a:81:c9:
1f:1e:99:24:4d:f5:46:07:39:d1:fb:b3:b3:2a:a0:cc:9a:8a:
04:5c:4e:81:17:3c:7d:2b:ba:05:bb:15:12:20:1b:ff:1f:09:
7a:d2:09:dc:c9:98:1d:a0:7b:de:79:fa:db:32:93:6c:f3:f4:
41:00:8a:5d:a6:9d:21:56:a6:38:4e:2f:33:04:29:ee:99:c3:
88:f2:29:b1:5c:58:a9:b7:c8:0d:bc:6d:6f:22:e0:a9:f3:ac:
04:0b:2c:54:8a:f1:44:bb:38:51:ba:24:e4:c9:0a:46:5b:f0:
cb:13:8c:85:41:2b:42:22:57:d5:d6:82:38:ef:be:e6:04:00:
1d:93:0e:6e:29:76:8e:b7:57:78:62:63:1c:00:99:0e:4f:09:
d1:8d:d9:30:99:c6:be:18:23:87:6a:05:1f:97:6b:0c:f8:11:
98:e3:b2:cc:cb:5e:f7:64:6f:f0:d6:d9:24:23:37:57:c6:80:
7b:e4:33:c7:3a:d8:47:e2:d2:0a:f8:52:f7:63:c7:41:f3:e1:
08:1f:d5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 18:03:43 2024 by rpki-client on console-ams.rpki-client.org