Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/t3rdnPQWDFU3JsfOx4fW8dyKIWo.roa
File: t3rdnPQWDFU3JsfOx4fW8dyKIWo.roa (raw, json)
Hash identifier: 5g9m6P9+Xs/H8SKcI3sRO4AKoIAoe6WfuoQrni5/86Y=
Subject key identifier: B7:7A:DD:9C:F4:16:0C:55:37:26:C7:CE:C7:87:D6:F1:DC:8A:21:6A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A22
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/t3rdnPQWDFU3JsfOx4fW8dyKIWo.roa
Signing time: Sat 23 Nov 2024 07:55:03 +0000
ROA not before: Sat 23 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Nov 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2594 (0xa22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 23 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B77ADD9CF4160C553726C7CEC787D6F1DC8A216A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:43:80:ab:0e:f3:ca:bc:c2:47:bb:93:eb:f8:
41:7c:04:6d:29:6b:5c:50:f0:49:20:81:03:de:7e:
ed:78:fe:35:e8:02:73:ca:81:cc:42:ef:7b:99:66:
c4:40:f4:d5:e0:9e:ff:61:3b:b6:5f:55:84:f8:a5:
46:d3:cd:31:24:65:b7:e9:7d:ac:5f:b9:d6:47:e8:
7a:93:18:40:8a:a5:ac:52:04:49:b7:fa:81:86:21:
ad:41:15:dd:75:39:88:ba:2a:43:2a:1b:a4:e5:eb:
bc:bb:5f:1b:fb:36:dd:be:30:70:a5:9c:83:08:4d:
92:d3:fe:e7:6d:80:77:86:74:21:ca:31:dd:b8:65:
52:44:71:b8:05:d6:7e:7d:7f:dd:3e:9d:70:d4:62:
3b:80:24:c6:43:67:a3:19:17:c9:3f:a9:d6:05:7f:
be:8b:17:e5:bd:1e:d8:f0:8c:fc:3e:0d:15:63:e4:
dc:5d:da:c3:ed:2b:ac:c4:5e:e0:24:dc:9a:e7:54:
42:ac:d0:47:aa:3d:64:4e:ef:1f:8b:88:f1:2a:84:
92:19:0e:5d:12:72:53:e3:16:57:26:4d:9f:6a:ae:
3d:11:e5:9a:aa:f3:79:be:50:a9:94:19:6e:45:d2:
30:a8:ea:ae:04:ac:17:49:45:ca:a3:30:b6:c6:be:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7A:DD:9C:F4:16:0C:55:37:26:C7:CE:C7:87:D6:F1:DC:8A:21:6A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/t3rdnPQWDFU3JsfOx4fW8dyKIWo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b9:70:88:8e:19:59:fb:e4:e2:f0:7d:3a:1e:88:e4:3e:79:
4d:fc:7f:bd:6d:e1:2a:90:17:f9:f0:b0:3f:a6:4b:d7:b6:89:
18:91:5a:a4:1b:5a:e7:97:f9:66:7c:57:eb:b4:4a:77:be:95:
b9:da:16:88:be:30:7c:3f:60:e7:b9:b1:9f:8e:72:6a:62:09:
87:d6:3c:92:e9:20:c9:db:ba:25:0d:9d:5c:40:6e:5a:1a:c6:
d2:f0:af:62:a0:85:d4:88:bb:2c:9e:4a:a3:9e:90:9d:47:06:
e8:e5:3e:4d:d6:0e:82:4c:b7:e2:07:9e:71:fa:d7:9a:e9:5a:
21:76:20:b3:24:65:dd:37:bc:c8:a8:2d:57:9c:a4:5f:94:f0:
2e:b9:bf:42:98:1f:52:c2:c5:71:47:d2:a3:d7:69:34:f0:89:
9b:7b:e2:cc:08:f2:71:58:26:fc:e6:97:d9:c7:80:3d:39:9c:
50:38:de:ed:4b:c4:45:b3:1b:cd:88:1b:8a:a4:40:64:83:75:
8f:b5:bd:32:b9:82:05:6b:b3:ca:8c:89:79:2d:13:e3:0d:1d:
89:09:e1:89:40:51:b3:a9:ba:69:0a:58:2b:50:01:0a:0b:66:
00:5a:24:3d:5d:33:e8:e6:fe:87:a8:fb:b2:b1:19:53:3b:d4:
17:05:25:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:56:46 2024 by rpki-client on console-ams.rpki-client.org