Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/o9rKSsRZA63gLV7c-NbO6nTvXAs.roa
File: o9rKSsRZA63gLV7c-NbO6nTvXAs.roa (raw, json)
Hash identifier: ORiogK+AeOUge8ebZy6//5a4oN7fZQ5yH00lrxIYgkA=
Subject key identifier: A3:DA:CA:4A:C4:59:03:AD:E0:2D:5E:DC:F8:D6:CE:EA:74:EF:5C:0B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 03A0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/o9rKSsRZA63gLV7c-NbO6nTvXAs.roa
Signing time: Wed 22 May 2024 07:55:03 +0000
ROA not before: Wed 22 May 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928 (0x3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 22 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A3DACA4AC45903ADE02D5EDCF8D6CEEA74EF5C0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:e0:f5:d4:ea:99:d9:cf:cf:41:f0:2f:7a:
f9:4a:2c:1d:dd:af:41:bb:20:26:c0:66:0b:55:4c:
e5:b5:62:ca:96:52:2f:00:56:49:b0:1b:ef:4c:22:
e6:72:ca:f5:86:32:df:e7:93:09:d0:0f:6e:01:68:
b9:be:62:d1:bd:e6:17:e8:f6:03:61:aa:c3:87:e2:
b7:7a:bb:cc:7c:83:07:43:fe:2b:f9:29:7a:3c:d2:
09:92:7f:34:00:01:e5:e6:72:cb:06:76:00:19:89:
5d:f9:91:81:74:9b:0d:23:c7:a3:f4:c2:87:98:41:
72:dc:3d:f0:88:f7:27:4c:f7:b0:54:a6:c8:e8:e9:
71:da:f4:11:e1:d1:19:31:f0:d0:17:88:15:4b:4d:
b0:60:67:22:1c:6b:24:3a:ac:40:c4:1e:58:4b:f5:
54:88:2b:5d:b5:13:f5:bd:67:6d:d7:3d:1b:bf:95:
1e:a3:72:55:b1:1c:cc:7a:d4:5d:8c:f7:a8:43:c2:
57:e0:8f:2a:6c:5f:7d:0b:90:71:42:c9:bf:2a:e7:
38:8a:67:59:f2:da:e5:6e:c3:7d:b7:63:c3:0e:13:
14:df:77:79:36:62:66:34:9d:c4:4f:c3:76:9c:c5:
09:f0:5a:ea:23:bd:c3:f5:30:71:7e:84:b7:47:7b:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DA:CA:4A:C4:59:03:AD:E0:2D:5E:DC:F8:D6:CE:EA:74:EF:5C:0B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/o9rKSsRZA63gLV7c-NbO6nTvXAs.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c4:ee:66:4f:44:45:05:9f:62:a3:48:f6:83:7c:4f:6d:3a:
ca:fb:33:fa:5e:fc:38:e0:c0:20:fa:96:11:51:d1:c7:8a:82:
26:a5:fb:11:ba:07:b3:92:b1:08:aa:fd:51:e6:ef:cb:46:22:
b7:4f:f3:fe:1b:8f:20:1f:47:c9:16:4e:d8:cb:38:1b:19:77:
25:4b:c6:63:67:39:d7:d0:cd:8f:a9:c3:ac:0e:d5:96:eb:8f:
78:fe:7d:a3:f8:b7:fc:7f:10:28:f0:6e:2b:37:5e:da:c1:65:
d9:48:b2:ef:02:82:91:8e:40:a1:35:0f:41:32:df:0d:4f:f1:
a2:eb:45:53:ba:4a:77:f5:20:df:48:03:74:35:87:52:06:69:
30:9d:46:05:f4:75:f8:e0:b4:b1:e0:18:e9:8d:23:9f:e8:37:
2b:bf:45:8e:e7:2f:62:f3:d1:4e:47:4a:fc:73:f3:75:45:09:
13:5e:d7:c3:81:6f:c3:3b:eb:e6:6c:c7:36:41:80:44:0f:bb:
db:b4:d7:4a:9a:50:da:a1:b7:52:86:88:b8:d3:a6:6f:c5:94:
04:a3:09:48:6a:80:a7:10:a9:24:d5:72:f3:34:9d:a1:eb:c4:
dc:0c:41:96:20:c6:cc:48:45:da:bc:77:75:17:90:33:9f:bd:
2f:af:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org