Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/jidcHVvnX32FGUHJgEem5O-QGf4.roa
File: jidcHVvnX32FGUHJgEem5O-QGf4.roa (raw, json)
Hash identifier: 4CkaDy6dB7R0KoYAGKBlVGD3ARGDVvNrk4CKNAGL0E4=
Subject key identifier: 8E:27:5C:1D:5B:E7:5F:7D:85:19:41:C9:80:47:A6:E4:EF:90:19:FE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 034C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/jidcHVvnX32FGUHJgEem5O-QGf4.roa
Signing time: Sun 12 May 2024 23:55:03 +0000
ROA not before: Sun 12 May 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 844 (0x34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 12 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8E275C1D5BE75F7D851941C98047A6E4EF9019FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:69:de:92:76:9d:3f:f9:c9:d5:de:93:c5:
8e:c1:b3:25:7a:b8:e7:36:8d:ce:a0:d5:b5:0a:7d:
c6:82:d7:c6:22:bd:35:d8:5f:59:2b:37:9f:fc:7f:
0e:8c:ac:8b:77:f8:7f:f7:41:66:e3:22:7c:af:ea:
bf:9c:55:d9:73:08:c9:a0:9e:82:d3:bb:8f:d8:62:
32:e9:8d:7f:13:48:14:a9:db:48:ab:59:36:2e:da:
3c:a3:27:1e:1b:d2:17:0e:02:f5:bc:83:fd:44:17:
db:d2:e9:6a:2f:9f:37:c5:2d:52:c9:70:93:0c:8e:
1f:7f:a8:61:e3:16:67:04:ac:65:a0:cd:3f:5b:fb:
9b:f1:0d:b3:a7:d8:9b:03:fa:26:b0:35:7c:bc:cf:
58:a1:3f:b6:74:d0:55:d6:3c:40:a4:db:2b:47:0e:
6e:d1:3d:28:f5:55:a0:c4:60:f5:6a:7e:73:86:34:
60:d3:04:5c:5f:01:5a:17:9a:1a:da:93:40:c0:62:
bd:2a:a2:08:1a:0a:77:c9:5f:c7:55:df:b3:0f:60:
ab:47:f4:a6:e6:93:f7:23:db:86:68:35:22:22:9f:
dd:1c:68:7d:42:b5:de:9f:db:d8:66:de:b9:f0:cd:
ad:c5:68:b4:ff:74:81:84:f9:7b:55:36:9c:8f:54:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:27:5C:1D:5B:E7:5F:7D:85:19:41:C9:80:47:A6:E4:EF:90:19:FE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/jidcHVvnX32FGUHJgEem5O-QGf4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
11:6b:b9:82:4e:3c:51:37:e7:c4:b3:b7:0a:f6:74:6a:7f:bc:
ae:86:cd:c4:83:b5:b9:8e:d0:57:1e:69:d3:81:8c:73:d2:7a:
89:6c:16:46:f5:bc:bf:98:22:eb:5d:15:ee:dc:dd:ae:5e:35:
16:0a:b4:d7:33:5c:0a:63:6d:58:80:71:e3:d8:6b:2b:a5:17:
a8:85:0a:40:4b:32:a3:3e:f4:d3:28:56:db:6d:b5:cf:51:50:
b9:51:c1:63:21:b5:5b:37:cb:77:5f:bf:77:ee:a7:35:b7:41:
c9:8c:ba:4a:5f:c3:29:e8:82:d5:23:4a:ad:0f:3b:c5:b1:59:
bc:d7:19:7c:f2:5f:7f:3f:38:32:c5:26:8f:37:ef:61:1b:30:
75:fe:06:00:98:4a:0e:6d:d7:be:7a:4c:9f:e4:ca:62:22:29:
73:30:5d:9e:87:20:ca:7e:3e:d1:1a:19:b2:4a:54:3d:e8:d8:
36:b8:53:b6:7b:6e:d5:78:c6:33:04:f0:7f:36:a8:72:ba:62:
06:96:47:91:3c:ac:7e:77:e2:0a:75:fe:e1:63:e5:a1:bf:cd:
cc:db:8e:46:48:79:aa:9f:75:2b:89:17:37:2d:5f:83:27:73:
9d:d4:86:8a:ea:65:f4:bc:85:da:d5:60:84:01:17:18:72:9d:
44:b1:3e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org