Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/n41QTIU3Ea8dPZfL51OVf15iE-s.roa
File: n41QTIU3Ea8dPZfL51OVf15iE-s.roa (raw, json)
Hash identifier: 1wXgv/CtKsEwKY9YLO8lcUKDSNaz+OkljjW2G/mHu0Y=
Subject key identifier: 9F:8D:50:4C:85:37:11:AF:1D:3D:97:CB:E7:53:95:7F:5E:62:13:EB
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 02A1
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/n41QTIU3Ea8dPZfL51OVf15iE-s.roa
Signing time: Tue 23 Apr 2024 23:55:02 +0000
ROA not before: Tue 23 Apr 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 23 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9F8D504C853711AF1D3D97CBE753957F5E6213EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:f7:b2:ef:23:9f:3d:59:c5:bf:41:ec:70:
d8:a4:ae:8a:de:1d:de:cf:df:57:03:e0:5e:d5:23:
81:d2:60:4c:cf:9b:14:ad:80:4e:f6:5b:0f:6a:fc:
44:7f:95:46:cc:33:ae:22:74:a2:74:44:78:83:b3:
21:f8:a4:41:bd:15:62:a2:cc:4f:4c:d0:ba:59:d5:
78:73:0a:d4:b6:34:03:17:8d:55:8c:04:1e:d0:5c:
be:65:be:ce:6d:e3:c5:63:6a:2e:9a:ca:ee:ae:54:
ff:d7:22:4a:3f:23:05:7f:da:0e:b8:ea:49:0d:ea:
6f:d0:d6:10:bb:79:5e:37:bc:c7:7d:20:a3:43:30:
9a:e9:77:53:77:d4:cb:19:95:61:4a:64:3c:ee:aa:
0b:3d:4b:7b:f6:f7:c6:62:43:1f:7d:9b:c3:03:89:
87:d1:c0:7b:94:5a:02:59:3b:82:50:58:f1:6e:35:
33:4b:7f:88:eb:fe:f6:2f:be:8f:7c:d5:3a:40:10:
b8:41:45:55:f1:a8:7b:93:c3:eb:39:dc:93:25:a3:
d2:72:db:37:ad:59:52:ac:fa:95:52:40:29:ff:c0:
94:c4:68:ad:70:0d:a2:25:fc:13:ea:f7:f4:ac:0d:
61:96:c4:db:26:75:5d:cc:ce:d4:cd:f7:dc:1c:42:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8D:50:4C:85:37:11:AF:1D:3D:97:CB:E7:53:95:7F:5E:62:13:EB
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/n41QTIU3Ea8dPZfL51OVf15iE-s.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:f2:9d:1c:be:5b:1c:8e:2a:1e:c0:e3:c8:7b:04:c2:50:de:
c3:21:fd:aa:fe:d9:2d:0a:c2:f7:25:34:97:19:64:24:7e:f1:
b7:f6:1c:7f:d2:31:ed:06:f4:4c:78:da:e1:23:93:af:f5:7b:
6b:35:fc:c6:a5:de:e7:8d:cb:a8:76:4f:5e:60:8d:35:fe:2c:
1f:0d:93:59:5b:02:9f:05:c1:56:77:c5:f2:ce:e0:3f:e4:2d:
e5:4e:67:c5:5f:e9:b4:f3:a8:78:45:67:dc:34:16:88:dc:be:
1a:c9:c8:72:8e:0f:f9:f2:2f:43:96:7f:a6:1e:68:f0:4f:ea:
57:f4:55:c8:98:0f:df:4e:d3:a0:b4:d7:97:23:b5:dc:ea:9a:
74:1a:38:5a:9c:ba:05:5f:cd:67:f0:c2:df:0d:e1:2b:8f:be:
7b:42:91:d7:10:be:ff:81:d3:2c:30:2a:9f:a5:ad:d9:f4:43:
70:29:27:f1:31:bc:d3:0b:3c:6d:53:b8:c3:98:73:38:c8:77:
01:69:39:d0:66:15:1d:2f:68:cd:98:4c:97:d9:2b:40:6c:9b:
4c:01:3e:ea:ec:39:2b:9c:8f:31:81:58:13:35:d4:6f:f3:0f:
9d:54:ed:00:c1:6e:99:0e:08:f2:55:b3:e3:67:7d:a6:c0:4a:
84:24:bb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 05:47:19 2024 by rpki-client on console-ams.rpki-client.org