Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/iwZe_N5v8VniAvKivQgA2gU7SqE.roa
File: iwZe_N5v8VniAvKivQgA2gU7SqE.roa (raw, json)
Hash identifier: oHvBWgMTho1UrHx/wWsKRFwbE04+zoj7Tf2ymArD9Yc=
Subject key identifier: 8B:06:5E:FC:DE:6F:F1:59:E2:02:F2:A2:BD:08:00:DA:05:3B:4A:A1
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0763
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/iwZe_N5v8VniAvKivQgA2gU7SqE.roa
Signing time: Fri 06 Sep 2024 07:55:03 +0000
ROA not before: Fri 06 Sep 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1891 (0x763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 6 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8B065EFCDE6FF159E202F2A2BD0800DA053B4AA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:c8:ef:b6:2d:24:16:c7:96:a4:50:e9:0a:
fb:28:a4:a2:76:da:56:40:4f:2f:52:3a:5b:c3:7c:
4b:4d:d1:12:d1:ca:b5:c4:8c:0d:10:3a:f6:7f:2f:
79:7c:f9:1e:a6:b8:5a:e2:b6:b0:0f:77:8d:db:d0:
4a:d0:8a:ec:4a:f7:cc:9a:a7:62:9a:66:6e:5f:a7:
4c:f8:c6:fb:dc:a5:ec:d7:45:5e:e5:c2:91:94:39:
b7:06:72:3c:bc:ae:a5:53:40:3f:ae:c4:77:19:68:
77:da:14:d3:38:5d:21:1b:18:ed:86:dd:89:43:f1:
49:46:71:ec:69:fd:9b:2b:47:62:f5:53:8f:3e:31:
b4:d3:59:a7:b2:da:6a:b9:d9:0a:e1:44:91:7a:25:
8b:6d:9d:81:66:12:41:73:a8:50:e9:f9:b5:96:65:
8e:47:8a:b9:34:b5:9c:10:5a:7b:ac:bf:c7:0f:a4:
35:3f:13:37:26:dc:5b:c3:cc:78:7a:75:18:e3:c5:
2f:e5:2c:56:fd:f3:b8:29:2a:36:98:66:5c:5c:14:
f2:6f:84:ed:29:b6:5d:3b:d5:a0:82:f1:3d:f7:b8:
67:fd:55:9e:71:b5:d1:c4:5e:98:b3:e4:7f:1e:58:
7d:6d:b6:d6:87:05:d3:7d:4b:86:3d:e2:f2:56:55:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:06:5E:FC:DE:6F:F1:59:E2:02:F2:A2:BD:08:00:DA:05:3B:4A:A1
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/iwZe_N5v8VniAvKivQgA2gU7SqE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:01:64:5a:66:10:ae:9f:ee:07:7d:9a:a3:0e:b8:96:b2:41:
1f:70:df:3d:2c:45:bb:b2:58:3e:ca:9d:47:a0:51:eb:9a:a5:
e1:d3:e4:62:b4:84:ad:c6:42:d7:7e:33:e9:fc:5e:9e:ae:b3:
a3:41:61:28:a9:dc:b0:26:d8:22:18:1f:fa:59:e1:a5:e2:d2:
41:5a:90:b8:5d:28:d4:ea:56:ec:06:53:89:32:32:50:bc:7e:
79:54:b0:5f:bb:8b:46:02:f5:fc:6c:61:58:cd:28:e2:53:8b:
22:a0:78:9a:20:60:ec:61:78:c6:f2:8e:e7:d4:1a:39:ed:86:
f7:7c:93:84:98:ac:4e:5f:fb:31:42:57:92:83:dc:18:c0:2f:
a2:52:5e:2d:a1:49:33:b4:4c:d9:bb:5b:c4:a7:48:09:1b:32:
51:54:bc:32:9c:9f:d8:c7:44:0d:28:42:a9:af:7a:85:24:b6:
5a:9b:08:3d:81:17:c5:ed:74:2b:89:e5:00:63:a4:c8:a0:35:
aa:b3:2c:4d:52:de:98:44:af:28:ad:e5:2a:f6:9c:71:22:31:
95:ed:0d:c2:fa:ec:8d:e7:2e:e5:d0:bd:89:a8:37:ea:77:d3:
17:1e:3b:93:9c:82:70:cb:da:67:c2:8e:a3:1e:d0:7c:ce:18:
92:68:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 15:05:25 2024 by rpki-client on console-ams.rpki-client.org