Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/mvfbHpIF9GYv8jCnn_iaYUpY1Wo.roa
File: mvfbHpIF9GYv8jCnn_iaYUpY1Wo.roa (raw, json)
Hash identifier: ECAZc4ngs7Q9nDbJI/mqes/yfszLH39fMiykfX5HgfM=
Subject key identifier: 9A:F7:DB:1E:92:05:F4:66:2F:F2:30:A7:9F:F8:9A:61:4A:58:D5:6A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09DD
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mvfbHpIF9GYv8jCnn_iaYUpY1Wo.roa
Signing time: Fri 15 Nov 2024 15:55:03 +0000
ROA not before: Fri 15 Nov 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2525 (0x9dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 15 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9AF7DB1E9205F4662FF230A79FF89A614A58D56A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:d8:72:23:1c:02:27:48:e0:a0:63:db:1c:
18:c1:d9:71:06:a9:72:60:94:3d:5e:65:e6:0a:d3:
49:88:c4:a5:59:f5:3f:3c:98:b9:49:5d:55:09:55:
40:46:70:b8:b0:6e:ac:a5:48:f8:ab:4c:04:0f:3e:
04:c6:3e:3e:36:32:cc:76:d4:36:d9:79:fa:52:a9:
77:fa:ad:37:13:89:ea:1a:1d:ea:69:b2:3b:db:86:
21:08:e0:1e:33:b5:58:a0:eb:7d:5a:dd:8a:b2:a5:
27:ea:1e:46:b6:2c:69:28:08:2c:20:8c:14:cf:8e:
bb:85:64:d7:a3:01:f2:74:4f:bd:4a:29:2d:7e:e5:
02:15:df:1f:58:61:cd:33:5b:4d:52:62:f8:ba:e5:
af:f6:2e:bf:07:69:e1:5a:34:91:f5:e5:84:82:ce:
9f:90:56:64:e8:43:df:5a:9d:2c:0a:24:00:66:aa:
07:b0:7c:66:fe:a4:9e:10:a6:d9:06:4d:c7:5f:d0:
f4:9d:c6:d1:8e:2b:c8:c0:40:a0:d6:c6:84:d9:16:
87:40:46:73:0b:25:de:36:1b:9d:b9:8f:58:e4:e1:
67:59:20:7d:98:97:9e:32:42:84:25:2a:37:ba:65:
0d:22:20:bd:ac:d3:ba:a8:eb:cc:a9:d1:77:f4:7d:
3b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F7:DB:1E:92:05:F4:66:2F:F2:30:A7:9F:F8:9A:61:4A:58:D5:6A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mvfbHpIF9GYv8jCnn_iaYUpY1Wo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1f:f3:6f:f1:3f:08:7d:29:0d:6a:d3:77:09:7e:ce:99:18:
65:df:9a:b9:27:f6:b6:02:08:38:77:9e:53:72:1e:bf:cb:b7:
94:30:ca:18:1e:bd:f5:2c:3f:ed:21:81:b6:54:96:77:62:c3:
b7:e1:bf:e8:ed:e3:a5:51:26:07:e3:e4:24:55:c7:70:1f:80:
13:a9:be:ae:1e:53:91:51:88:bc:ab:6a:a7:6c:7d:a4:53:35:
64:45:c6:2c:54:65:52:8c:d8:eb:76:14:1b:f4:7e:c5:72:93:
9d:67:94:c3:ed:74:e2:a2:3a:ba:00:bc:87:63:6d:9c:a9:6b:
7f:8b:eb:21:5c:94:30:8c:72:88:7e:64:7a:f5:e0:98:46:f5:
c7:cf:f2:38:22:e4:61:c4:79:0e:fc:8c:ed:87:8c:7d:b0:7b:
b8:37:7e:dd:68:4c:10:18:13:ef:5f:c5:b5:af:59:23:0a:1a:
fc:ea:6d:ea:11:2a:b4:82:87:c0:9d:93:a3:a6:e7:c5:00:df:
d1:47:e7:80:5f:58:ae:bb:49:8c:f4:e9:49:b1:2a:c2:db:c3:
7a:4e:4d:2b:0c:91:7b:36:21:77:f6:81:71:f3:97:f4:85:68:
6b:11:d1:71:e2:d5:14:ee:cf:ad:82:7d:dd:a6:60:ec:02:15:
09:bb:c1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 22:18:37 2024 by rpki-client on console-ams.rpki-client.org