Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/huuZTkKINR22-9nwmB4WdGRYMgE.roa
File: huuZTkKINR22-9nwmB4WdGRYMgE.roa (raw, json)
Hash identifier: cGsEFg5gwTzkYoM6flZQpVtoejGUEXdsxKBHmGEqJBg=
Subject key identifier: 86:EB:99:4E:42:88:35:1D:B6:FB:D9:F0:98:1E:16:74:64:58:32:01
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0310
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/huuZTkKINR22-9nwmB4WdGRYMgE.roa
Signing time: Mon 06 May 2024 07:55:04 +0000
ROA not before: Mon 06 May 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 784 (0x310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 6 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86EB994E4288351DB6FBD9F0981E167464583201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:f3:92:8f:8a:bc:f3:6e:eb:73:62:4b:7e:
76:c7:58:1f:c6:2b:19:ea:ba:b1:25:bb:5d:ef:c9:
8e:3c:ca:06:39:e0:dd:5b:36:7c:eb:a8:ef:cf:05:
90:02:70:a6:d2:d2:e6:c2:97:75:95:63:63:83:0a:
8d:b4:d1:c6:ed:78:c3:ab:4e:c1:ff:36:d6:15:8c:
c8:c9:50:c1:2e:39:7b:02:90:d1:32:af:4f:15:5c:
eb:39:56:98:47:43:99:8d:85:6e:4c:a8:e0:6b:82:
15:c4:93:7a:7a:59:ba:3d:83:4c:0f:25:ef:8c:4f:
e3:a0:1e:cb:f2:30:08:c8:af:3b:04:8b:fd:78:e9:
c8:0d:2c:24:59:57:4e:8f:88:3d:17:0b:53:64:5b:
28:cf:35:ac:fa:c9:c4:6d:27:e6:03:a4:89:e0:ad:
7e:5e:1a:7d:84:ed:fe:a8:97:97:bb:e4:5d:f7:2b:
9f:36:6b:cf:18:fb:06:33:47:31:cb:4b:9c:6d:99:
5a:1d:69:5b:d1:3b:58:d2:26:6f:a4:44:34:ee:d9:
ca:ea:dc:31:c0:77:e7:de:00:d5:53:94:7c:0b:8f:
81:d9:92:62:01:30:5a:5f:aa:be:4f:6b:40:0e:ad:
01:c5:4d:bb:5e:81:70:6a:6d:2a:17:80:21:cc:7d:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EB:99:4E:42:88:35:1D:B6:FB:D9:F0:98:1E:16:74:64:58:32:01
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/huuZTkKINR22-9nwmB4WdGRYMgE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:11:fa:fe:d3:89:ca:0b:5a:3a:ee:12:33:40:25:30:3c:61:
1b:78:5e:2d:f1:a9:40:a6:b0:3f:03:1f:ff:b5:aa:38:38:00:
ca:ef:7e:62:4d:1f:0b:5e:9c:7c:4f:ee:c3:7c:81:54:a3:0d:
b1:3b:6c:73:e5:59:36:25:c7:1a:3d:a4:12:c5:fe:f8:70:cb:
73:29:53:ca:c4:32:63:d5:4f:82:16:b8:f8:ff:b1:25:2e:58:
9c:a2:37:71:d2:65:4c:aa:a1:7a:9b:d4:5b:89:9e:64:24:f9:
1f:ca:84:2a:a3:44:97:a9:86:29:61:aa:80:4b:29:5e:14:af:
7d:d5:5d:7a:46:78:64:2a:12:aa:fc:ac:41:21:34:6b:8c:87:
2c:69:37:b7:3b:1c:3d:a7:48:d3:b5:54:3c:c5:e9:8d:3a:d7:
a0:2d:4a:9b:13:69:0e:1e:20:a0:2a:3d:92:23:c6:fd:c8:8a:
44:2e:ab:df:05:7b:5e:fd:47:69:f5:69:f2:2a:f6:c4:78:ac:
dd:46:5f:25:e6:d7:ff:88:e8:05:35:e7:5d:ab:9a:ef:a9:54:
cf:f7:e3:c8:d3:db:33:17:5a:3a:1e:92:32:1d:eb:e0:c6:fe:
bf:ad:59:3f:e8:81:d0:d8:30:18:71:63:58:02:15:bf:f9:80:
b1:ff:f7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org