Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/kzxx9DhK-aTCsg9o_3lM2LX7IBo.roa
File: kzxx9DhK-aTCsg9o_3lM2LX7IBo.roa (raw, json)
Hash identifier: b5/cjliyO2iO0Mzx3loKLnf7TIllxImaBaJsyfPa4hA=
Subject key identifier: 93:3C:71:F4:38:4A:F9:A4:C2:B2:0F:68:FF:79:4C:D8:B5:FB:20:1A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 036A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/kzxx9DhK-aTCsg9o_3lM2LX7IBo.roa
Signing time: Thu 16 May 2024 07:55:04 +0000
ROA not before: Thu 16 May 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874 (0x36a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 16 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=933C71F4384AF9A4C2B20F68FF794CD8B5FB201A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:d6:30:61:2f:da:d7:9b:52:3b:c0:db:59:
e7:97:1a:42:22:c8:72:48:f3:91:f3:cf:d5:74:92:
0f:12:97:34:0d:84:01:0f:a0:ca:e7:f5:70:cf:7f:
e5:f3:3f:8c:8f:e2:ed:c1:62:ce:68:f5:13:4d:67:
eb:ab:71:4d:f2:d0:4f:dc:86:a2:84:20:9f:f6:d3:
ae:6b:95:f5:7e:76:9b:c7:9b:cc:32:23:80:e9:7e:
6d:cd:4f:fa:ca:2a:8b:07:a3:d3:94:ea:e1:ca:5e:
eb:05:17:73:5b:34:71:d7:b1:67:0c:e3:a5:9f:5e:
d0:8e:4e:87:0d:70:61:d8:d4:6b:67:32:6d:74:ea:
54:d1:a8:f8:51:91:41:d6:c8:90:11:c0:88:25:4c:
a4:d7:ed:6d:8a:4b:ff:10:5a:d3:79:d5:4b:7c:0d:
d1:20:ab:17:5e:ca:f8:91:a8:dc:55:6c:23:d8:ed:
b2:38:b0:7d:e0:bc:7a:0e:78:c4:52:29:9e:89:da:
f7:66:01:4d:1c:a9:44:b3:10:32:8b:d3:ea:50:24:
53:80:f7:e3:c5:97:27:44:56:13:d0:a1:82:68:2b:
eb:c8:37:5c:b2:1b:79:cd:1d:0f:eb:3a:55:01:f8:
80:22:f5:81:df:f8:7e:15:e2:93:af:81:a6:a2:48:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3C:71:F4:38:4A:F9:A4:C2:B2:0F:68:FF:79:4C:D8:B5:FB:20:1A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/kzxx9DhK-aTCsg9o_3lM2LX7IBo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:b9:87:6c:b9:83:73:78:a7:9b:db:e0:9e:3b:1b:da:24:23:
40:72:11:17:f8:3f:cd:3f:0e:e7:1f:ee:38:1f:33:c4:27:2c:
0c:22:95:70:2d:de:32:62:99:ae:38:dd:37:50:73:bb:b5:38:
4d:65:f2:76:ed:39:db:54:68:33:e8:ca:d6:a5:10:07:d7:da:
f9:10:5c:0a:9a:20:77:af:52:57:e6:73:cf:50:cd:9b:80:03:
ab:ea:0c:28:a5:f2:16:f6:ee:9d:aa:66:99:57:c0:02:56:48:
97:b6:bb:d7:c1:3f:f6:ec:f7:02:31:93:1b:f2:46:d8:de:98:
e4:08:62:ee:5e:8a:98:dd:b1:7b:95:5c:26:b3:23:c9:d3:53:
93:7d:1f:f3:61:09:b6:67:01:f0:10:62:29:31:25:c2:8a:42:
e9:3e:89:cf:a1:3d:bf:ae:b9:84:94:0b:62:98:72:6a:70:9b:
4e:12:13:91:f3:8b:a3:f4:03:22:bd:b4:c4:0e:67:cb:bf:57:
6d:16:86:44:6f:3b:f6:ab:25:e1:b2:8d:59:6c:9f:05:d9:5e:
02:6d:57:a0:9f:d2:d4:9c:64:a9:86:42:0b:0c:b9:f2:95:15:
0f:a6:9f:66:55:6d:f2:eb:f7:76:ac:6e:a7:af:47:1a:48:8b:
73:26:f0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 14:27:32 2024 by rpki-client on console-ams.rpki-client.org