Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/mjx_zlEc__ycT0u6RQvghWloeuc.roa
File: mjx_zlEc__ycT0u6RQvghWloeuc.roa (raw, json)
Hash identifier: px99SU7vlNVrqJQegRQGiNflUjYzj1Ay5GYG5VsdhbM=
Subject key identifier: 9A:3C:7F:CE:51:1C:FF:FC:9C:4F:4B:BA:45:0B:E0:85:69:68:7A:E7
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 08B9
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mjx_zlEc__ycT0u6RQvghWloeuc.roa
Signing time: Mon 14 Oct 2024 07:55:03 +0000
ROA not before: Mon 14 Oct 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2233 (0x8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 14 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9A3C7FCE511CFFFC9C4F4BBA450BE08569687AE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:66:49:2e:a5:d1:33:26:12:9e:78:0f:14:7f:
d2:37:53:ed:32:1d:e3:0e:0f:86:9c:53:e1:bb:97:
33:31:63:e8:00:9d:8a:be:28:ca:c8:1c:80:aa:fa:
81:08:3c:15:a8:a4:fc:80:37:77:49:82:43:41:14:
21:78:fb:03:61:b8:41:ea:13:18:79:35:0d:6e:37:
be:fa:4b:9d:f2:2e:88:88:42:a2:b2:2d:99:92:62:
41:6e:80:87:3d:e6:ff:5a:21:06:fa:8d:ed:23:22:
10:b1:f0:17:53:1f:57:1d:e4:7f:e6:01:f2:e7:64:
19:36:76:96:fd:75:38:ed:8b:ef:96:88:46:98:aa:
d9:26:e6:52:5f:32:6b:6b:60:e4:a1:c5:8c:83:7b:
55:92:43:75:ec:b5:63:60:d0:d8:5d:82:e5:d5:b8:
1a:ad:4c:7d:48:53:be:16:5b:e8:6f:89:9c:c0:94:
76:19:72:9e:30:5a:43:24:1f:49:ed:fe:9d:59:ba:
9f:e3:38:de:dc:cf:1c:93:36:e8:6f:6a:33:ad:4e:
e5:d6:15:46:0e:2d:59:00:c0:3f:04:69:3b:cf:b8:
29:ad:96:0b:85:92:4d:55:95:0d:af:d6:e9:05:eb:
f9:9e:b3:6f:6b:fb:64:af:54:66:ba:5f:e6:7f:6d:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3C:7F:CE:51:1C:FF:FC:9C:4F:4B:BA:45:0B:E0:85:69:68:7A:E7
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mjx_zlEc__ycT0u6RQvghWloeuc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e9:7b:c8:d8:a9:fc:8f:69:38:05:6d:06:c9:d6:b5:67:5d:
ee:04:91:4a:40:ad:a7:ac:be:d6:53:ce:82:bb:4d:71:0f:43:
b3:2d:03:51:e4:47:c5:12:db:0a:03:ad:0b:d4:43:44:57:96:
6b:b2:7d:f6:7c:87:1a:a4:6d:03:1b:67:84:78:6f:8e:a8:88:
67:3c:22:ca:6e:ea:0b:28:55:37:19:f8:28:7d:6e:f5:25:7e:
4d:6a:66:24:a3:41:0a:62:45:38:8d:c6:45:c0:86:33:0d:34:
e7:3d:aa:a6:b8:8a:51:ba:a5:c3:bb:86:ce:b6:b8:14:0d:1e:
f3:ca:99:b7:e0:56:51:24:9e:3f:f7:a9:81:1b:5f:30:bf:70:
3a:e0:10:07:12:e0:ed:bd:89:f1:4f:0e:f4:92:27:ee:36:79:
c5:16:8a:63:c4:74:4a:05:14:87:3b:4f:4c:b3:59:88:b3:30:
b9:30:f3:9c:e5:8f:d5:a0:48:7d:21:53:20:80:c0:8a:67:f8:
50:24:23:bd:bb:58:50:09:84:60:46:9f:96:e3:5a:35:72:81:
94:24:73:02:b2:ac:20:2c:44:24:f9:19:ab:61:79:3d:1c:7d:
6d:96:32:c2:38:96:1c:6c:6c:c7:e9:6d:88:6c:f4:75:31:42:
60:46:87:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 14:17:45 2024 by rpki-client on console-ams.rpki-client.org