Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ikeyeyRfMgCZ7mwHLSS3Yv56CXU.roa
File: ikeyeyRfMgCZ7mwHLSS3Yv56CXU.roa (raw, json)
Hash identifier: ALk8c4bNub9tERK/76UkFR+YRUE12tgmMlZJdJQeAt8=
Subject key identifier: 8A:47:B2:7B:24:5F:32:00:99:EE:6C:07:2D:24:B7:62:FE:7A:09:75
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 01F0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ikeyeyRfMgCZ7mwHLSS3Yv56CXU.roa
Signing time: Thu 04 Apr 2024 07:55:04 +0000
ROA not before: Thu 04 Apr 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496 (0x1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 4 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8A47B27B245F320099EE6C072D24B762FE7A0975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:14:94:58:c9:e3:39:7c:7c:3a:92:57:11:b2:
65:66:79:bb:48:73:1e:6a:d1:bb:22:9a:9a:4b:16:
18:d0:ee:5c:ec:23:3b:9a:c3:d9:03:30:de:c0:81:
f2:4e:81:8f:af:c0:a3:e2:80:0b:a3:96:1a:8c:02:
c4:50:31:01:6a:17:04:e2:26:a9:1d:1e:e3:8a:81:
52:69:d6:25:8a:87:fb:35:b9:57:7f:9e:53:a5:d4:
2e:c4:41:94:c4:2b:e6:ad:65:70:ae:17:c0:35:df:
ae:63:50:7c:b9:13:86:38:d5:5e:4f:ee:05:f6:8a:
4b:89:50:51:aa:e9:8e:75:6d:3e:f8:8c:e7:f5:ba:
64:98:f2:b4:45:c0:de:50:cc:b8:d2:1e:38:08:15:
91:24:5e:32:69:32:12:03:51:91:31:72:2c:3f:9e:
42:de:f4:94:6f:50:30:46:3c:d1:1f:ee:ce:1a:01:
ae:c2:a8:bc:d5:61:66:b9:bb:5a:b7:4b:7b:ac:37:
4a:0f:80:3b:9b:26:d2:7a:f3:d6:f7:1c:a8:8d:f2:
55:8c:f4:90:cc:89:09:8c:1b:3d:c2:48:29:6b:4e:
60:6d:d9:29:01:1d:02:d3:e8:f4:18:30:0c:56:79:
57:c7:a7:04:7c:de:05:47:7b:e7:57:2e:9a:cc:04:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:47:B2:7B:24:5F:32:00:99:EE:6C:07:2D:24:B7:62:FE:7A:09:75
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ikeyeyRfMgCZ7mwHLSS3Yv56CXU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:e1:30:db:ef:ae:d6:48:eb:3a:98:28:71:af:6f:11:57:6c:
69:6a:26:40:b8:c8:1a:48:e5:58:10:38:49:7a:46:00:c5:9f:
dd:f2:e6:02:02:ad:b1:0a:7f:55:59:6a:b3:91:b3:26:f1:c9:
0d:cd:c3:f1:87:ed:cf:48:cc:e5:08:a9:df:53:26:43:c7:b5:
3a:1d:f2:3c:76:7c:01:90:9c:d3:bb:b2:3f:c2:af:e3:b0:3d:
2e:15:a9:9d:8f:ba:37:7d:9d:d4:8c:d2:38:8c:ab:55:63:9f:
14:64:c6:0d:cb:90:f5:44:37:04:e1:de:be:6f:c2:da:b9:98:
43:02:e4:af:65:73:ef:15:52:96:b5:78:6a:62:42:60:e2:6f:
8e:7c:3a:35:c6:91:35:53:90:dc:6e:2f:da:3f:6f:3e:35:e1:
79:59:a8:17:41:34:8b:3c:94:74:b7:a7:13:0f:9c:f8:7c:0f:
aa:c1:cc:05:b1:60:1a:af:d3:50:1c:af:7b:25:81:5e:2a:a8:
cd:81:de:ff:f5:38:13:cb:40:dd:57:ba:a5:4a:d6:c7:70:e9:
55:8b:de:bf:be:e6:d9:51:1f:a8:27:92:0b:1a:0d:5f:ee:3d:
3d:46:70:bd:bd:ab:05:30:a8:98:46:05:c5:1a:9a:f9:ea:f3:
0d:00:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 14:38:29 2024 by rpki-client on console-ams.rpki-client.org