Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/jdmz3Hl_8wUm0EkntMtG0nVVz1E.roa
File: jdmz3Hl_8wUm0EkntMtG0nVVz1E.roa (raw, json)
Hash identifier: aWyEwarASyUVrxssaaXCa7Ed5g5DGQR4FWy02kwza64=
Subject key identifier: 8D:D9:B3:DC:79:7F:F3:05:26:D0:49:27:B4:CB:46:D2:75:55:CF:51
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0478
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/jdmz3Hl_8wUm0EkntMtG0nVVz1E.roa
Signing time: Sat 15 Jun 2024 07:55:02 +0000
ROA not before: Sat 15 Jun 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jun 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1144 (0x478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 15 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8DD9B3DC797FF30526D04927B4CB46D27555CF51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:03:e9:4d:86:fa:e4:54:17:7f:fa:db:84:
c1:c6:28:28:bc:31:a7:cd:78:34:38:5e:4b:17:19:
9d:cc:96:fa:ca:83:16:34:d7:42:79:f8:83:cf:ef:
c9:3f:3e:78:ff:89:ab:42:d9:74:0e:57:cc:71:f0:
01:00:3f:bc:0b:bf:f2:f2:3c:0f:15:6c:74:7d:39:
91:52:33:9b:ed:eb:f3:ea:c5:85:b8:48:f9:97:63:
38:b4:c1:a4:b2:e9:1d:08:15:6a:c3:84:42:d6:ee:
75:ab:86:ed:a7:6d:7a:94:16:5d:5e:41:c4:32:55:
37:06:ed:09:61:c5:28:67:09:56:cd:bb:b9:15:68:
a7:20:04:cd:51:6c:a8:1c:69:33:e9:82:8a:7e:d7:
d1:fb:46:ac:76:93:e9:54:2e:3a:f9:9e:14:87:e0:
89:6b:d8:d0:ea:65:39:1d:30:9a:39:e7:bd:a1:b3:
93:5f:8d:6d:92:ff:b7:13:bf:f9:49:68:16:86:f4:
ca:5f:10:35:fc:2c:10:76:ba:93:b1:d7:d7:81:2d:
99:22:3c:64:0a:b9:99:ae:60:79:3e:47:fa:1c:c9:
05:23:7f:11:df:63:26:fc:bb:70:04:6e:85:69:46:
aa:40:0a:40:26:c8:d1:8f:d9:5d:e1:c5:28:92:96:
11:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D9:B3:DC:79:7F:F3:05:26:D0:49:27:B4:CB:46:D2:75:55:CF:51
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/jdmz3Hl_8wUm0EkntMtG0nVVz1E.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
86:59:2d:65:a7:67:91:03:a7:75:0a:87:f0:0c:06:20:2e:1c:
67:69:6a:39:59:aa:1b:56:a0:a8:ff:57:88:0b:a4:f8:d8:3f:
e6:0d:97:5b:c2:ad:2d:a3:e2:db:46:68:10:6c:55:6a:ca:30:
86:95:05:84:d9:c7:68:40:b8:98:ae:ac:55:5b:ba:0a:4d:6c:
20:9f:68:2c:8c:1f:3c:9e:f4:44:0e:5b:a4:c1:98:41:a7:96:
c5:09:3b:e2:8b:6b:d6:77:79:59:b4:9e:6e:20:b9:fe:fc:db:
25:2c:f8:78:11:2a:06:bc:f2:e0:2f:d0:91:2d:48:e6:54:3c:
bd:18:38:ac:f1:4f:26:46:96:a7:a5:c2:47:1b:a9:cf:16:16:
08:f6:ef:de:c7:52:59:59:47:d2:db:c8:ee:52:10:55:c1:f7:
b1:7c:1e:61:8d:c8:4f:3d:88:f8:05:7c:11:e4:a4:7e:ba:7e:
e0:7e:65:3a:74:93:bf:ff:11:4f:22:8e:db:dc:73:5a:32:ee:
35:20:de:97:7b:3d:e6:a1:c5:87:f0:c3:0f:1b:d2:e5:56:b9:
fc:7a:43:1f:86:34:32:98:3a:b9:62:06:ac:09:0f:fd:67:06:
8d:94:d1:3c:55:12:30:bf:27:1f:af:4e:c7:b4:d7:08:3d:81:
8b:f6:5f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:41:17 2024 by rpki-client on console-ams.rpki-client.org