Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/i5IvZuxQnct41RDvl5mwuj594ns.roa
File: i5IvZuxQnct41RDvl5mwuj594ns.roa (raw, json)
Hash identifier: NcSvfVJP48FM8yS+edV8nfW/0P0CSCb5Gf+KpZlMbHA=
Subject key identifier: 8B:92:2F:66:EC:50:9D:CB:78:D5:10:EF:97:99:B0:BA:3E:7D:E2:7B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0136
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/i5IvZuxQnct41RDvl5mwuj594ns.roa
Signing time: Thu 14 Mar 2024 15:55:03 +0000
ROA not before: Thu 14 Mar 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 14 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8B922F66EC509DCB78D510EF9799B0BA3E7DE27B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:af:36:56:da:d6:d0:6a:5d:67:0d:95:a1:
c0:b3:72:68:0e:bb:9b:fc:b7:48:1c:80:28:51:fb:
08:25:ce:7a:fb:06:5b:e3:17:13:a9:76:95:7f:63:
ab:0c:2e:77:80:ba:83:35:6a:d2:ed:8b:6a:f3:98:
6a:f0:51:7a:7d:3b:10:84:e5:f9:c2:4a:94:c2:bc:
6f:fb:e7:53:f2:69:01:48:14:af:e3:f9:f2:6b:b4:
8c:ec:93:ee:69:ea:b1:5f:18:d2:06:e1:51:0a:70:
aa:61:bd:e4:23:23:fa:ec:85:c7:cd:fe:df:4f:71:
26:50:aa:58:7d:94:a4:30:ee:bd:80:fc:12:1a:a7:
7e:57:51:45:70:cd:51:52:40:9f:9a:e7:96:17:11:
fb:39:12:c1:07:88:29:90:2d:11:20:1b:72:83:c8:
58:86:8c:49:b4:34:da:4f:81:97:ee:7d:06:25:54:
d7:5b:77:ec:0f:4e:de:fd:9f:c3:02:6f:d7:9c:b7:
80:81:5c:57:61:52:16:92:32:e6:78:d2:18:13:eb:
53:9c:05:7c:fd:cd:a0:d2:73:f1:38:2e:31:2d:f7:
d7:6a:a9:91:af:a1:8b:08:97:a3:ed:22:d0:63:a9:
1e:74:99:88:9e:ae:65:e6:7b:0c:27:3f:33:14:ec:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:92:2F:66:EC:50:9D:CB:78:D5:10:EF:97:99:B0:BA:3E:7D:E2:7B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/i5IvZuxQnct41RDvl5mwuj594ns.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2b:72:66:30:a2:b3:29:2b:5b:4b:0b:4b:5f:2a:b2:e1:07:
8c:ab:3c:ae:c8:48:33:dc:2b:c5:d6:11:28:b8:e1:5c:03:cf:
ba:65:ad:9c:a2:f9:37:58:0f:e7:b0:00:51:95:a2:01:28:e2:
e7:2e:07:e1:7d:6b:75:a8:38:6f:9c:c2:d8:cd:6d:a1:b3:ab:
13:cb:33:03:e8:8b:8b:c8:18:d5:60:d4:c0:a2:aa:4a:94:ac:
ab:8b:d7:94:d9:ce:f0:ef:b8:72:44:86:35:72:6f:d7:84:1a:
ad:be:e5:12:2f:ce:0f:5d:f9:d3:99:14:72:58:bb:bd:15:a1:
68:1b:ab:19:3d:2c:c6:e6:98:d8:85:a3:4c:ea:f2:0c:8e:4f:
72:9b:57:e2:0e:fe:78:3b:fc:23:14:5a:69:0c:32:ba:73:5e:
78:3d:e8:57:94:41:16:39:71:2e:a1:01:c3:61:d2:fb:9e:26:
39:83:76:cf:bc:b7:e4:1b:fb:05:67:a5:42:28:39:55:b7:d9:
1c:3a:dc:44:c8:66:df:76:cb:90:a7:15:b4:44:e5:7a:8f:2f:
ec:af:34:cf:b8:eb:e6:5a:ec:7a:62:2e:23:5d:3f:ec:bd:28:
c3:66:10:4a:0d:10:56:f6:fb:ac:94:43:87:03:bd:cd:fb:5e:
14:3f:57:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 21:21:04 2024 by rpki-client on console-ams.rpki-client.org