Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/qlu5Xtz5yfDkO2VDBNWAcUoNOt0.roa
File: qlu5Xtz5yfDkO2VDBNWAcUoNOt0.roa (raw, json)
Hash identifier: 0BAczwKKCwjMtbj+jLBsYavz0IGGZaI7iR7+2ruYh9w=
Subject key identifier: AA:5B:B9:5E:DC:F9:C9:F0:E4:3B:65:43:04:D5:80:71:4A:0D:3A:DD
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 79
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/qlu5Xtz5yfDkO2VDBNWAcUoNOt0.roa
Signing time: Thu 22 Feb 2024 15:55:03 +0000
ROA not before: Thu 22 Feb 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 22 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=AA5BB95EDCF9C9F0E43B654304D580714A0D3ADD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1a:51:42:50:7a:49:11:50:cd:40:07:e0:93:
8a:b1:7b:ac:8e:17:48:8c:16:f9:4c:1e:2d:0e:8a:
0e:70:e5:01:18:eb:1e:73:8a:78:d1:3a:21:6d:00:
07:79:c0:1a:cf:55:c1:58:14:32:d4:ea:ab:f2:f1:
ae:5b:c5:66:e7:d4:84:be:1b:b5:ec:64:e4:f1:97:
49:f6:dd:09:e3:93:b0:99:8c:7a:50:d6:f5:d3:b2:
61:0e:84:ab:7b:93:76:b7:9d:de:d5:c1:e2:8a:d8:
91:6e:5c:66:16:76:4e:06:b5:47:1f:a2:eb:c1:9b:
9b:fc:fa:da:eb:df:3b:c3:1d:a3:74:21:1e:f5:40:
0d:8f:02:5d:4c:ce:74:63:f7:1a:99:51:43:40:aa:
46:0e:47:b9:b8:44:31:ac:07:6f:82:44:77:a0:15:
78:37:78:cf:5b:20:4b:a0:6c:84:42:0d:4e:e6:cc:
92:ab:8b:40:5b:c7:6e:dd:44:49:4e:5b:c6:19:9b:
d4:8b:92:8e:03:51:6b:c4:70:1c:b5:6a:7e:d8:d7:
b2:64:b5:e2:9a:30:16:e9:18:22:2b:e4:4f:43:0b:
00:25:55:a4:c6:e2:ba:c2:1d:01:cc:2e:9d:e1:12:
16:f2:f1:ab:8c:7d:0c:b7:f4:67:99:3a:39:f1:8d:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5B:B9:5E:DC:F9:C9:F0:E4:3B:65:43:04:D5:80:71:4A:0D:3A:DD
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/qlu5Xtz5yfDkO2VDBNWAcUoNOt0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:be:e7:c1:42:40:92:0e:36:6c:6f:da:25:41:5c:12:6b:e9:
e8:02:63:14:ec:47:c6:2d:db:84:e4:e8:09:b3:f7:71:b9:47:
26:55:50:bb:da:21:f3:fb:cd:63:4a:c0:5f:2d:96:e0:ac:ac:
72:8a:81:d6:f7:f8:ee:20:a5:b7:e7:6f:59:f7:74:62:dc:e5:
a5:59:6d:c5:ae:c8:d7:15:59:42:1c:aa:9e:10:58:36:84:64:
6c:45:4a:30:f3:49:be:8d:44:c6:69:93:5a:e4:f1:74:22:7b:
04:22:fb:d6:e8:44:b7:99:1f:37:74:a2:ae:b9:be:c3:15:ee:
e8:5c:40:8f:cf:95:59:7c:81:f9:bd:7d:c9:ab:6d:21:b6:11:
7e:2c:0e:8e:8b:9a:ae:16:38:81:5c:b7:d4:16:46:54:b9:79:
61:35:f8:22:97:08:38:9c:3c:e1:bb:2b:f0:f3:9d:34:a1:93:
fc:26:e9:c4:41:6a:c1:21:f7:74:65:e8:96:e1:9f:a5:46:52:
16:b2:05:99:00:8d:74:79:6f:53:f8:86:1b:bc:73:af:b9:3c:
6a:6b:4f:6c:30:11:a8:fd:83:4d:80:cb:29:35:9e:77:4a:7b:
11:8f:d4:66:41:c9:0b:e4:59:04:fe:4a:61:48:22:38:43:88:
b3:75:57:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 20:50:30 2024 by rpki-client on console-ams.rpki-client.org