Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lcjzmpHwyoQdpcYZ_WeiQtLqvWI.roa
File: lcjzmpHwyoQdpcYZ_WeiQtLqvWI.roa (raw, json)
Hash identifier: WDkQU6w8EeZTKH9D7vMuKlxa+0NsLMMYF0bsFeJ6RSI=
Subject key identifier: 95:C8:F3:9A:91:F0:CA:84:1D:A5:C6:19:FD:67:A2:42:D2:EA:BD:62
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0418
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lcjzmpHwyoQdpcYZ_WeiQtLqvWI.roa
Signing time: Tue 04 Jun 2024 15:55:03 +0000
ROA not before: Tue 04 Jun 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1048 (0x418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 4 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95C8F39A91F0CA841DA5C619FD67A242D2EABD62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d9:f2:e5:d2:5f:28:a5:2a:17:aa:7c:27:7d:
0a:91:00:9b:39:97:94:f8:8b:af:32:6d:54:9f:ba:
d1:39:57:2f:a8:df:62:34:f6:6e:55:1e:d9:dd:ed:
b3:30:4a:03:97:45:65:f9:42:c2:03:35:81:2d:b4:
a5:44:f7:35:58:01:0d:24:f8:de:33:6c:a9:bf:93:
2e:4e:ec:df:77:d7:39:b3:8f:c0:4e:30:f5:75:a0:
cc:6a:0b:71:e5:d0:61:d7:f0:f5:af:bb:c7:13:47:
ba:fa:ea:4a:50:00:9a:46:cf:e4:5e:ab:16:d4:bc:
58:28:63:6e:ac:2f:6b:98:7f:6d:3a:62:6e:a0:29:
bd:24:2f:98:7c:20:29:fc:dd:39:08:db:13:84:4a:
68:a0:31:25:a3:a7:19:87:65:a2:18:e8:96:5d:7d:
0f:62:6b:48:a6:a9:db:79:53:98:1b:08:27:83:82:
6b:73:7d:06:b7:68:72:05:32:6f:4a:40:75:4f:ed:
36:f1:6d:c7:06:68:1a:6b:0c:c4:03:8b:65:10:04:
96:59:87:2f:91:48:c5:48:87:be:28:8b:0d:9d:f4:
7a:b3:07:1f:65:b5:a0:23:64:8c:04:50:11:22:25:
8b:1f:dc:1c:f5:47:4d:e6:e3:f5:1c:8e:fb:7d:49:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C8:F3:9A:91:F0:CA:84:1D:A5:C6:19:FD:67:A2:42:D2:EA:BD:62
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lcjzmpHwyoQdpcYZ_WeiQtLqvWI.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c0:5f:15:c4:50:d4:85:c8:54:9f:af:05:8d:bc:21:db:8d:
74:c2:46:a3:1e:09:0c:f2:b7:e9:50:27:2f:93:97:52:da:af:
2d:2c:65:5a:c5:b2:26:69:27:93:74:aa:94:d2:8c:c5:b8:af:
00:76:c8:7c:07:bb:68:af:09:91:9c:cc:f4:9b:20:34:e2:da:
15:68:af:87:3d:7b:da:e7:3b:46:1d:6e:b0:cb:94:4d:a9:6c:
fd:92:9d:de:f2:08:2b:fb:e9:f0:0c:c3:0e:0b:98:61:a9:26:
d7:b2:48:f6:15:61:2b:5a:29:3f:2d:f8:29:89:a0:84:6a:17:
6a:f1:d8:86:8a:c2:f4:19:dc:d2:59:3d:38:b5:0a:7d:b8:56:
89:5e:91:11:56:cd:71:6c:63:06:cd:9c:dd:7f:cb:64:5b:56:
2c:8e:03:64:ca:53:34:14:17:e4:79:4a:28:3f:b8:f5:86:a4:
ab:8f:2d:1c:14:b2:04:ef:48:09:51:67:3b:ba:bf:b4:c4:e1:
cc:da:de:6f:d1:3c:85:3d:e0:a1:23:17:1e:e6:fc:53:de:76:
78:d0:50:27:e6:1a:a6:e0:4a:68:8e:f5:e4:ba:d1:16:b7:37:
0f:6d:9c:a0:87:7b:83:71:b5:34:4e:f5:cf:2e:9d:0d:ba:87:
9b:cf:86:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 23:12:52 2024 by rpki-client on console-ams.rpki-client.org