Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/raRHK5brlSltFTzHVB-vVfhTrCo.roa
File: raRHK5brlSltFTzHVB-vVfhTrCo.roa (raw, json)
Hash identifier: 43EihwX6JNBzx9eyU8yx9BGPjMmlbYme8j+YLNoHmao=
Subject key identifier: AD:A4:47:2B:96:EB:95:29:6D:15:3C:C7:54:1F:AF:55:F8:53:AC:2A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0190
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/raRHK5brlSltFTzHVB-vVfhTrCo.roa
Signing time: Sun 24 Mar 2024 15:55:03 +0000
ROA not before: Sun 24 Mar 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Mar 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 24 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ADA4472B96EB95296D153CC7541FAF55F853AC2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:0f:a6:2f:04:1d:dc:44:9f:1d:83:03:d2:
35:56:1b:3f:44:bb:f5:09:eb:73:82:aa:15:67:3f:
35:18:ae:3f:65:61:3c:69:a4:15:b1:5e:67:36:19:
a0:9b:c7:37:b8:0e:84:1c:0f:f6:90:37:70:41:79:
19:d6:e0:e3:00:61:f1:2b:ba:e3:37:a3:df:4f:b0:
7e:a2:9b:3d:79:b0:04:87:d5:13:07:e3:07:cc:88:
59:18:7f:d8:f1:e5:5a:99:42:7f:9b:49:4b:7f:35:
3e:e6:09:06:a3:87:03:8a:06:c5:07:09:b7:25:40:
91:19:50:be:f4:ba:10:ee:0a:f2:52:ec:55:8a:bd:
d9:72:a0:01:02:1e:6e:5a:a7:70:a9:53:d3:4e:19:
86:70:fd:fe:63:c5:be:2f:02:a4:c9:9e:4e:0b:a4:
0f:67:da:25:39:db:c7:57:ae:48:a0:7f:7e:60:f8:
5c:d4:e2:99:11:ed:4e:c7:c2:f5:9e:76:6c:e0:43:
3d:ff:e7:d6:2c:d1:15:79:d7:e7:b8:62:c8:6a:90:
03:6d:f1:73:55:36:52:dc:8f:52:69:2b:2f:10:dd:
27:91:0e:88:eb:5a:1d:72:54:1b:06:f4:9d:2d:4e:
40:2c:7d:14:1a:e5:74:d1:d0:f1:20:83:71:64:99:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A4:47:2B:96:EB:95:29:6D:15:3C:C7:54:1F:AF:55:F8:53:AC:2A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/raRHK5brlSltFTzHVB-vVfhTrCo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:3f:dd:04:a3:06:e1:d4:63:13:f2:0b:5f:08:3f:6f:27:0b:
ec:79:bc:ef:15:f2:47:e4:05:9c:42:90:ac:73:16:17:00:4c:
d7:16:5a:d6:26:fa:d0:95:16:cc:e8:48:33:72:c4:af:ce:15:
df:1d:63:c4:ad:5a:e9:90:d5:8e:2f:72:b6:d9:b2:f9:5b:d6:
b2:f7:9d:f2:a2:f6:01:0e:7e:f7:5c:45:3b:af:3e:0b:84:8f:
00:8b:14:8f:8a:b8:f5:8c:f8:46:06:8d:69:33:00:b1:ff:32:
db:82:2f:cc:00:32:82:59:1d:f9:0f:db:d4:d7:2b:8b:ad:8f:
e5:ac:67:88:65:6a:0e:f4:b5:19:dc:b7:50:96:3b:c9:46:84:
5e:d4:c4:bd:e6:d7:74:b7:5e:c3:55:b7:c4:e0:4c:63:47:d5:
62:95:7e:88:6f:a7:57:5d:ca:a0:02:3f:36:8d:53:05:0e:aa:
bc:6d:2e:37:7a:aa:4d:35:01:ae:93:eb:68:2a:97:97:6b:09:
da:bc:55:20:b3:7a:f4:82:24:6d:a8:a6:40:1c:15:ac:35:42:
7a:aa:dd:c9:a0:9e:11:8d:a2:c4:36:0d:23:cf:df:bf:ff:30:
b3:e3:b0:60:46:a8:68:4e:c2:a9:7b:71:bb:e0:90:94:a4:36:
05:6e:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 24 20:38:52 2024 by rpki-client on console-ams.rpki-client.org