Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/fWb2SG-aLgBdJpW0eahfXynjmsc.roa
File: fWb2SG-aLgBdJpW0eahfXynjmsc.roa (raw, json)
Hash identifier: 8eHMgZYZDuUEEI/CNcr7XAQvmepB1Xc/XSEQcAJcqNw=
Subject key identifier: 7D:66:F6:48:6F:9A:2E:00:5D:26:95:B4:79:A8:5F:5F:29:E3:9A:C7
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0376
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/fWb2SG-aLgBdJpW0eahfXynjmsc.roa
Signing time: Fri 17 May 2024 15:55:02 +0000
ROA not before: Fri 17 May 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886 (0x376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 17 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7D66F6486F9A2E005D2695B479A85F5F29E39AC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:90:b0:d7:fb:ce:fb:8d:71:9c:42:5b:02:
c0:94:30:ff:93:f4:af:0f:dd:fe:b9:88:52:5d:24:
2e:2b:73:45:72:42:e0:e5:b9:df:12:e0:8a:fa:82:
75:ce:29:c8:46:85:22:fe:05:db:00:2b:bb:80:f2:
16:84:e8:e5:08:83:f8:df:4b:a4:41:3b:60:a3:1a:
ae:f4:38:64:ff:26:97:38:14:46:72:0d:fb:d2:4b:
0e:f9:81:b9:d0:59:7f:b1:0b:b6:1a:ec:01:9f:c3:
6e:29:02:65:08:00:74:81:fc:2a:22:74:b0:18:14:
a9:44:14:e7:3e:7c:0c:94:d4:36:8c:35:2f:23:30:
fd:78:a5:93:5f:06:57:c9:e9:8c:ab:3f:d0:f5:3b:
c2:f0:fb:4a:bb:e4:1e:b9:2b:2a:74:22:a7:c4:68:
42:ec:30:a4:4f:1d:6e:79:04:7b:3b:68:3f:b2:5d:
4a:31:92:6d:1a:d1:f3:21:6e:b7:da:f0:2e:76:9c:
be:5b:c0:97:ab:39:0e:2e:f2:be:5a:d8:f9:37:2e:
97:70:9a:04:89:2e:b3:94:25:78:67:44:f5:86:dd:
e5:af:f9:78:19:61:86:a2:2f:fd:09:f5:5d:d5:ce:
09:4c:d4:f5:76:44:00:49:b6:ec:7f:7a:5d:2a:d9:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:66:F6:48:6F:9A:2E:00:5D:26:95:B4:79:A8:5F:5F:29:E3:9A:C7
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/fWb2SG-aLgBdJpW0eahfXynjmsc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ae:2e:7f:0d:67:8a:8c:f5:fc:ca:d6:1d:1c:17:72:04:09:
52:bd:e2:91:2e:fc:bc:a8:f6:4f:42:5c:e2:4a:d5:94:4a:3e:
06:6f:af:dc:9c:ba:1c:c8:9b:42:84:91:0a:d2:74:35:34:2b:
22:9f:0e:21:2b:0a:91:46:7c:c4:d2:05:8f:99:25:fb:a0:da:
97:42:df:8a:bf:03:e2:1c:e4:5c:c1:43:da:4c:78:5d:91:56:
84:95:61:78:2e:f5:bd:dd:d9:f0:01:0d:a1:5c:8a:4e:53:8f:
b8:f2:c5:bd:d7:e7:99:0d:67:b4:92:5e:c9:16:44:12:0d:33:
a1:2b:30:19:2b:e6:72:50:42:b1:64:4e:a1:96:24:9b:32:f9:
bb:c2:5e:d2:7b:24:3b:c5:34:19:f3:4e:dc:c0:68:fb:56:ef:
28:b3:59:d2:c9:df:e0:57:ea:39:61:db:69:f6:f7:2e:16:5b:
e2:e2:c5:da:31:73:8e:3f:d0:be:ce:85:e0:fd:f0:0a:dc:ec:
38:07:13:06:65:4f:ef:26:48:42:fe:76:b1:27:e5:29:a8:b5:
e4:61:47:b4:eb:b3:f7:ff:64:87:c8:09:2d:84:6e:75:23:df:
60:3b:72:10:2c:89:56:71:11:23:62:0c:97:90:2f:ff:61:f4:
65:ce:eb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:15:29 2024 by rpki-client on console-ams.rpki-client.org