Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/oMV4Ikeh0oOs7kjZFhz5Q9MqRO0.roa
File: oMV4Ikeh0oOs7kjZFhz5Q9MqRO0.roa (raw, json)
Hash identifier: 2wNAV0fDypbtsq7JpBlhNy153shDKM74JxlFdO+yveY=
Subject key identifier: A0:C5:78:22:47:A1:D2:83:AC:EE:48:D9:16:1C:F9:43:D3:2A:44:ED
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 46
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/oMV4Ikeh0oOs7kjZFhz5Q9MqRO0.roa
Signing time: Fri 16 Feb 2024 23:55:03 +0000
ROA not before: Fri 16 Feb 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Feb 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 16 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A0C5782247A1D283ACEE48D9161CF943D32A44ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:b5:e4:a4:40:f2:d0:61:d8:dd:4d:f3:02:
b2:f1:53:d7:d1:f4:3e:86:8a:3a:d5:fd:30:61:3f:
13:96:f0:26:4a:0c:ce:6a:39:df:36:24:2b:22:27:
8e:4b:38:f1:01:50:44:14:21:39:c6:84:68:8e:47:
00:06:ac:4b:1c:58:4b:24:c3:b1:06:45:fd:7f:91:
cc:91:fe:ff:ac:cb:45:e6:bf:33:6d:f4:76:3e:53:
1a:df:0e:bc:39:3e:70:80:a0:6d:1e:fb:c6:73:0b:
ce:16:9c:c2:af:8f:9b:f3:fb:6b:96:83:97:be:4f:
9c:2d:86:18:66:b5:48:79:d8:e0:1b:ce:99:5f:26:
c5:15:d9:a6:a9:27:d0:ac:bc:a2:ae:3b:0f:3a:13:
40:dd:a9:a5:93:8c:e6:06:9d:d4:4c:e6:e3:6a:70:
71:db:9b:85:40:6f:d2:db:19:d6:1c:d7:a8:3a:2e:
32:2e:b7:50:57:c0:62:20:f8:45:69:bf:ed:34:af:
0c:c7:35:be:e6:14:a1:c9:68:b4:36:a1:62:a9:28:
eb:80:ae:14:3d:f9:04:11:9a:0e:ad:98:3d:21:4a:
4d:cc:5b:f9:20:22:97:a8:f2:b0:27:72:20:41:28:
91:22:9d:c4:59:7a:d9:62:8c:0c:59:1d:f2:11:ff:
72:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C5:78:22:47:A1:D2:83:AC:EE:48:D9:16:1C:F9:43:D3:2A:44:ED
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/oMV4Ikeh0oOs7kjZFhz5Q9MqRO0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a9:e4:38:86:c5:da:48:a5:c9:a4:fa:bc:2f:81:84:e7:bb:
ce:dc:0e:91:51:ea:e7:5b:9c:d6:58:a1:b4:18:03:91:89:76:
df:b9:c0:61:90:83:10:d4:97:9d:d9:69:9d:ab:8a:1d:e3:32:
0f:c6:e7:04:8f:c3:92:05:1a:9c:d5:44:e2:dc:a4:3a:88:f9:
c2:0e:b8:2e:35:be:7c:fe:f2:94:32:e9:dd:6b:62:a6:4a:a2:
4f:39:fb:73:74:93:36:7e:02:5f:99:35:38:2b:c9:5d:43:15:
52:b4:de:4f:21:b8:23:86:e1:6b:3f:a0:ee:96:cc:11:b2:8e:
70:57:cc:e8:7c:bf:1e:31:62:d9:2c:b9:7a:83:17:0c:a5:c4:
90:3c:d7:30:1b:89:5c:e3:69:0d:81:c7:44:77:c1:1e:8e:63:
8f:d3:d3:3f:f0:8d:c9:d1:ff:aa:44:b5:f5:90:64:9f:c9:b0:
5c:75:85:74:ee:b8:a6:d4:ee:38:22:ba:64:bd:76:37:7a:f6:
71:11:1b:57:47:78:17:0b:80:7e:ff:44:cf:e3:6e:27:78:7b:
33:fa:f0:76:27:52:bd:6e:2c:45:7d:cb:91:d6:c4:f5:d5:ed:
a1:a2:8a:47:a6:da:80:d9:ce:01:a2:05:83:bc:26:9e:4b:a0:
a7:71:bd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 17 08:18:32 2024 by rpki-client on console-ams.rpki-client.org