Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/g9Ww0T2KUE3e63Aj4Fg49M-qfwU.roa
File: g9Ww0T2KUE3e63Aj4Fg49M-qfwU.roa (raw, json)
Hash identifier: U9zm1wKH1d/z0dyXzJyvzWJnuIERTkcZPkgg/80PLYY=
Subject key identifier: 83:D5:B0:D1:3D:8A:50:4D:DE:EB:70:23:E0:58:38:F4:CF:AA:7F:05
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: E2
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/g9Ww0T2KUE3e63Aj4Fg49M-qfwU.roa
Signing time: Tue 05 Mar 2024 07:55:04 +0000
ROA not before: Tue 05 Mar 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 5 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83D5B0D13D8A504DDEEB7023E05838F4CFAA7F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:74:8e:b9:0b:dc:a4:43:85:2c:d1:89:f7:
57:cc:7a:62:2e:b3:8f:6d:1e:c0:33:00:a8:1a:69:
79:ca:9f:ea:e5:1b:b5:48:31:b0:e0:e1:9f:6d:25:
6d:06:e2:fe:e5:b0:c8:01:8b:e8:a7:a3:4d:23:98:
8e:bd:cf:97:5b:81:7c:42:f3:84:8c:82:8f:18:aa:
45:ce:03:17:a8:18:b8:d4:b5:bd:c9:a1:ab:95:f8:
7a:d3:5e:5d:39:4b:5e:ee:8f:65:19:fb:71:c7:bb:
10:e5:9d:9b:5a:19:c4:91:89:d8:b2:c8:5d:2f:a0:
40:a5:7b:ab:a7:d6:7e:3d:03:c3:51:00:15:43:d9:
66:21:97:4e:29:b6:f5:22:87:34:1f:8f:5d:5d:7e:
6b:5f:2c:8e:5c:81:44:3b:41:77:83:24:8a:ea:a9:
11:f4:55:64:a4:06:77:02:8a:93:cb:9d:35:9e:37:
f2:af:10:e3:72:05:aa:78:7b:89:c7:97:f7:ab:b0:
e2:ca:5f:a7:1c:38:0e:23:1d:87:5e:50:16:11:f8:
84:b7:29:25:1c:53:c2:0b:2f:37:f4:4f:26:5e:db:
0b:5f:19:e1:f4:b6:9e:23:92:5b:ba:10:9c:f7:e5:
72:cc:67:03:b6:5e:76:51:67:6f:be:e3:bb:06:2c:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D5:B0:D1:3D:8A:50:4D:DE:EB:70:23:E0:58:38:F4:CF:AA:7F:05
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/g9Ww0T2KUE3e63Aj4Fg49M-qfwU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b7:94:ac:22:83:d9:7d:5d:1c:c8:2f:99:f5:dc:98:3c:14:
ce:03:86:c5:6e:52:36:9f:8f:45:9c:fd:6c:7d:0f:39:1a:78:
1c:6f:94:e5:a0:e3:41:4b:84:6d:1f:11:90:a8:df:d1:c9:d1:
54:01:4f:fa:1b:5a:96:0c:cf:2f:00:f1:9f:8d:d5:38:5e:a2:
0e:90:f0:aa:97:ec:c2:a5:f9:37:83:9b:0a:b2:a9:4c:8e:4d:
80:33:7b:7b:24:9a:ff:8a:49:00:43:cb:26:b1:7c:cf:ae:0a:
7c:19:f8:0d:cb:4e:8d:80:11:ad:8a:39:a6:bc:fa:dd:59:9d:
b5:88:d6:bb:e5:14:b7:d3:f8:87:62:0c:13:61:7e:b8:5e:48:
9a:30:9e:d7:c9:a9:40:00:75:46:dc:56:51:43:cb:66:b0:11:
74:f8:32:1c:13:85:7e:0e:a1:cf:7d:10:bc:d0:82:a3:35:9d:
67:4d:71:6b:47:6e:ba:44:17:4f:7c:d1:51:4e:e9:2c:29:46:
f3:6f:04:bd:2a:e6:a7:54:71:f3:2b:a5:68:5c:4b:f8:90:b0:
f0:4f:92:54:ea:07:6d:53:a1:81:25:0e:c6:72:11:35:cf:1e:
24:86:9c:b0:2e:d8:6d:9c:3d:0c:f3:32:dc:34:05:2c:3b:bc:
3d:92:44:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org