Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/jPBoBqwWS5KdVqK5s36eBXRbwns.roa
File: jPBoBqwWS5KdVqK5s36eBXRbwns.roa (raw, json)
Hash identifier: 5ERW9Ch+FUKh2IISXimJjbUkIRSRmpzS4g6bgeZ9IsQ=
Subject key identifier: 8C:F0:68:06:AC:16:4B:92:9D:56:A2:B9:B3:7E:9E:05:74:5B:C2:7B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 055F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/jPBoBqwWS5KdVqK5s36eBXRbwns.roa
Signing time: Wed 10 Jul 2024 23:55:03 +0000
ROA not before: Wed 10 Jul 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1375 (0x55f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 10 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8CF06806AC164B929D56A2B9B37E9E05745BC27B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:02:ec:a9:34:2f:a6:f4:6b:a1:a5:65:d7:
14:b5:12:93:f8:8c:d6:bf:2f:c9:fc:b9:0e:32:69:
a8:6e:a6:7a:63:5a:1a:f8:19:5e:ca:40:4e:84:14:
a6:34:52:a4:36:a3:59:b9:8c:e0:e1:ce:7c:8b:4d:
0d:5d:b7:e1:b9:26:82:91:4a:ee:a9:01:c8:c3:2e:
16:3e:06:1d:33:af:d5:bb:73:66:3a:c4:38:f2:bc:
63:8f:cf:28:a4:1f:b0:1d:67:33:ec:e2:2a:aa:33:
e9:eb:04:2c:e3:3c:2e:d8:e1:15:da:bb:9e:03:e7:
70:b2:77:de:91:f0:26:36:8a:09:75:2c:6e:49:c0:
45:1e:70:97:cd:4a:d3:e8:43:71:4c:1f:8e:f0:ec:
99:5c:76:e0:96:2c:93:9e:98:e8:87:31:63:4f:aa:
b9:dd:96:b3:a2:e0:21:21:78:65:49:26:50:a4:96:
b4:2c:45:d7:74:08:d9:46:3c:8d:13:6a:56:46:f7:
79:3c:37:a1:fe:a6:a3:08:95:4b:0a:6e:13:f9:c8:
bd:57:3b:46:23:01:80:14:b0:65:7f:07:b6:51:95:
a8:c2:6b:81:ff:f7:a0:66:c8:22:7a:8b:71:d9:e3:
f3:ab:47:93:21:28:1e:d8:c8:49:2f:0f:bf:e6:51:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F0:68:06:AC:16:4B:92:9D:56:A2:B9:B3:7E:9E:05:74:5B:C2:7B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/jPBoBqwWS5KdVqK5s36eBXRbwns.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:34:e8:77:60:bc:4a:f1:e8:56:72:f1:59:f2:97:88:8b:65:
75:f4:82:88:75:37:52:7d:f8:d3:84:ab:76:39:73:8a:ba:8b:
f9:0a:47:90:de:68:88:ed:09:3a:f4:8a:e8:3b:8a:20:78:60:
51:14:ba:4e:71:a9:e1:e6:42:bf:10:2e:9c:70:fc:36:e0:0d:
f7:64:3c:dd:63:19:cd:13:68:0b:10:16:2c:98:48:ab:7b:8b:
18:cf:c1:45:54:07:f1:f3:4f:de:0a:05:e3:75:19:3c:bc:b4:
df:66:d7:d5:d6:31:8d:c9:14:c7:58:a7:be:59:c3:91:50:c3:
c2:31:06:ad:5a:cd:84:11:11:4b:39:80:d4:8c:65:22:3d:33:
7e:00:be:a4:b5:dd:d7:84:7d:c5:e0:04:47:71:2c:d6:05:32:
0d:18:9c:c3:90:d8:24:5e:a1:75:eb:c9:c9:b4:5d:31:49:c9:
c8:db:6c:6e:5a:0d:79:22:32:69:18:f0:77:14:ce:86:f7:ad:
a4:38:bc:95:3e:9a:d7:26:df:98:4e:b3:24:70:88:d9:9b:da:
c2:d0:39:1a:bf:28:e1:57:a6:60:9d:bf:fe:2c:8b:b1:fd:37:
6d:4a:e3:5a:a2:86:be:f8:d4:af:ea:34:99:ef:32:6b:69:26:
1b:66:74:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 05:19:49 2024 by rpki-client on console-ams.rpki-client.org