Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/qg_4Eq6Chdkfm8kG7Cj4YDNzD0s.roa
File: qg_4Eq6Chdkfm8kG7Cj4YDNzD0s.roa (raw, json)
Hash identifier: 6pCb1dgv4Cp5+9cUxbJHDRAdYKO1eGKCFphaBWhxW2g=
Subject key identifier: AA:0F:F8:12:AE:82:85:D9:1F:9B:C9:06:EC:28:F8:60:33:73:0F:4B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0415
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/qg_4Eq6Chdkfm8kG7Cj4YDNzD0s.roa
Signing time: Tue 04 Jun 2024 07:55:03 +0000
ROA not before: Tue 04 Jun 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1045 (0x415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 4 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=AA0FF812AE8285D91F9BC906EC28F86033730F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f0:7f:a9:1c:9f:f4:c2:86:23:f4:9a:13:c4:
9a:7e:5a:87:1a:35:2f:ca:a4:34:82:df:70:df:21:
7e:2b:eb:cb:c5:85:dd:73:30:4d:4f:1d:fd:0e:b9:
74:13:26:ea:08:6b:23:6a:cf:28:c8:70:9b:e8:55:
a0:01:a9:7e:83:49:ac:6d:76:f2:3f:d9:7d:01:68:
6a:f7:42:63:98:5a:5c:c4:75:52:1c:19:f6:ec:34:
ac:83:3f:c3:5b:bc:7f:3a:3d:ff:ba:a9:70:c2:be:
35:1a:cd:c2:a4:cd:0c:4b:7d:16:f2:70:45:f0:91:
83:32:25:d9:db:4b:c1:aa:73:ea:79:4c:d4:25:37:
29:45:6b:14:87:c5:bd:50:e0:cf:a6:9a:f2:9e:f8:
8d:ca:bf:5e:ff:9d:22:17:f9:55:54:17:6a:43:a4:
bb:b3:3d:ef:11:69:4c:6c:7c:38:dc:a7:5f:d3:7e:
1c:16:a7:e9:dd:ae:7e:c2:bb:e1:fa:ce:48:61:fb:
6e:50:9e:4e:32:76:5f:46:8b:a6:7a:e8:0e:6c:d6:
4c:37:bb:c7:dc:8d:3b:d2:c3:79:65:2c:5b:71:b8:
8c:89:08:02:7c:66:3f:39:69:67:8d:b0:fa:c0:a6:
c9:08:cc:de:6a:3e:06:68:7e:90:ff:77:63:d1:bf:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0F:F8:12:AE:82:85:D9:1F:9B:C9:06:EC:28:F8:60:33:73:0F:4B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/qg_4Eq6Chdkfm8kG7Cj4YDNzD0s.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:7c:8d:b6:19:38:5b:2e:22:76:d9:7f:63:89:d7:fb:7e:24:
e8:ea:9e:1c:63:ca:74:db:bc:27:3d:8b:d5:da:ec:40:1f:99:
0a:56:8d:ea:ed:31:29:18:68:14:78:71:1f:4a:be:89:84:13:
90:69:81:07:c8:bb:1b:fe:0f:dd:22:7a:88:72:9e:da:d8:45:
b3:35:7f:cd:5d:db:10:62:4a:d1:97:52:c0:e8:bd:55:a8:b2:
d5:57:56:bc:8b:fa:4f:0b:1c:69:2d:52:32:72:23:f8:a7:dd:
6a:10:0b:d2:c7:fd:01:c5:88:60:36:87:e9:e2:ec:46:ae:06:
f1:fd:82:42:fe:c4:e3:70:7b:aa:93:d8:55:ab:5d:d6:c5:53:
d2:39:67:60:05:ec:90:11:d2:fa:d2:05:f9:e3:27:90:fb:cd:
39:56:37:cc:94:5c:07:3a:c2:d5:8e:cc:34:33:bf:a9:9c:94:
bc:86:09:79:e5:0a:c9:a7:9a:55:a9:3e:82:d0:e8:48:22:92:
59:a4:fa:03:45:1b:3b:c5:93:46:d4:0a:8c:e6:61:05:80:58:
7b:a6:b8:2b:b9:5d:86:e1:4c:c1:6d:c1:83:14:fb:2a:dd:92:
74:ac:56:1a:64:28:77:d2:70:c8:82:60:12:98:bb:e2:a6:5d:
23:80:09:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 16:06:20 2024 by rpki-client on console-ams.rpki-client.org