Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/mqz80nfWhUwVb3ilVgtU9DG-W7M.roa
File: mqz80nfWhUwVb3ilVgtU9DG-W7M.roa (raw, json)
Hash identifier: CqTjT7lj0Yj3sMBzjElti1+12zWwIjoDIcqHbqRM/BI=
Subject key identifier: 9A:AC:FC:D2:77:D6:85:4C:15:6F:78:A5:56:0B:54:F4:31:BE:5B:B3
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 094D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mqz80nfWhUwVb3ilVgtU9DG-W7M.roa
Signing time: Wed 30 Oct 2024 15:55:03 +0000
ROA not before: Wed 30 Oct 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2381 (0x94d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 30 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9AACFCD277D6854C156F78A5560B54F431BE5BB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:0d:b0:06:35:67:b0:e9:e3:f3:3f:d8:f4:
a1:46:a5:fc:88:af:c1:bc:51:91:f6:23:8c:d5:41:
a2:27:72:55:f6:ee:d0:f4:76:e6:02:83:54:07:aa:
98:30:6c:4c:7e:01:c8:da:ad:59:b8:9e:7f:87:1b:
c0:08:51:bc:19:4c:a5:fc:db:83:94:78:c9:4a:be:
98:77:6b:75:ad:40:07:68:5f:4f:30:e8:1c:d3:4d:
f8:eb:ab:c4:ea:90:72:83:d6:f5:f8:bc:29:71:19:
1a:40:36:4b:e8:d9:7d:2b:71:68:c6:82:e0:e5:3a:
3d:6c:0e:99:1f:6e:71:70:ca:f4:ea:77:32:3b:da:
61:d9:d9:cb:db:99:8d:dc:0d:f7:5b:b0:9d:db:61:
44:32:87:85:e9:4f:b7:13:33:0c:fe:3a:0a:69:65:
4f:46:db:26:0c:b6:02:b0:e4:9f:8b:5a:97:e9:99:
39:15:00:95:6a:1d:3f:db:9f:a1:5b:5b:49:5b:cc:
ae:09:e4:a4:44:5a:6b:44:9d:df:19:de:ca:c9:68:
d8:1f:e2:1d:14:aa:5b:9e:96:68:f7:39:80:a9:82:
fa:5c:86:af:49:d9:7b:dc:45:0a:fc:00:7f:f3:14:
ee:6c:36:f1:bb:4a:77:2a:6f:fb:90:ec:b2:b7:dc:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AC:FC:D2:77:D6:85:4C:15:6F:78:A5:56:0B:54:F4:31:BE:5B:B3
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mqz80nfWhUwVb3ilVgtU9DG-W7M.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:4e:39:6a:2d:13:04:a6:95:8c:0e:68:9f:3a:f1:85:1c:be:
d1:d2:e2:e7:a6:a7:d6:dc:11:70:94:60:f0:58:ba:b6:84:ca:
a2:ca:c1:5e:5b:72:87:0b:cf:0c:7d:01:7f:c0:4d:dd:09:1c:
b5:0f:79:f1:83:03:a1:20:7a:c6:a2:c5:b3:d9:65:e5:bf:a1:
03:3a:96:c6:e9:81:ec:8d:b9:84:39:a4:41:31:f6:b3:12:2e:
d8:b4:66:26:43:41:ae:43:29:e9:dd:d7:76:b0:ae:f8:a8:76:
13:66:c7:f8:7f:c0:c9:36:34:a7:b5:49:fc:7a:46:1d:6b:25:
30:65:38:48:92:06:6e:a2:02:8b:3f:b6:3e:79:44:4c:b3:b2:
18:a8:41:cd:e0:ff:c7:0c:8f:1a:0a:a3:ad:fa:67:78:a8:30:
10:f9:79:94:ba:e5:46:4e:c2:a4:d3:46:18:d8:bd:15:f8:62:
22:bf:cb:00:71:fd:ba:15:b7:02:5a:29:9b:96:2a:46:bf:07:
c8:93:80:18:eb:dd:70:ff:d9:51:7c:1d:b0:0d:e7:c5:75:e2:
20:aa:92:6a:6a:70:58:cd:a0:32:b1:39:a4:c8:e8:6b:e2:71:
ac:41:69:c8:60:4c:02:f6:24:ff:64:24:ba:b8:5d:10:ff:2c:
b5:59:0e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 22:19:28 2024 by rpki-client on console-ams.rpki-client.org