Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/tb3eQWN3FfTM3Ouoj3tgZv0jCTc.roa
File: tb3eQWN3FfTM3Ouoj3tgZv0jCTc.roa (raw, json)
Hash identifier: gJrct/5WIt25CZBCaYWplP92c+I1cIChrVrsm/6Z71o=
Subject key identifier: B5:BD:DE:41:63:77:15:F4:CC:DC:EB:A8:8F:7B:60:66:FD:23:09:37
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: A0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/tb3eQWN3FfTM3Ouoj3tgZv0jCTc.roa
Signing time: Mon 26 Feb 2024 23:55:04 +0000
ROA not before: Mon 26 Feb 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 26 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B5BDDE41637715F4CCDCEBA88F7B6066FD230937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:56:ae:f5:93:af:63:0c:a1:44:f0:e3:81:
e6:8c:1c:59:c3:d8:ac:b6:7a:28:3b:a0:49:fa:26:
02:d7:e2:2d:2c:a5:7e:bc:a2:4e:6b:09:4b:35:f1:
f0:fb:48:00:b6:3b:a9:6d:7b:de:6a:b8:b6:c4:7e:
42:19:db:0a:dc:da:7a:78:82:0e:ce:ed:44:09:df:
5e:11:fd:46:95:94:c3:40:a8:65:50:72:92:ea:4a:
00:e4:60:db:90:47:a1:ce:6b:e2:f0:d2:a2:29:e7:
d8:0f:31:bf:36:df:2f:bb:c7:e3:6b:50:7b:ab:74:
5b:94:cf:4c:f8:56:aa:20:5d:e3:04:55:dd:19:d2:
0f:da:64:30:d6:e4:3a:2f:52:76:23:44:bf:f7:2f:
91:ac:ab:16:a4:2c:66:c8:4d:13:b0:66:f0:53:87:
13:6f:aa:61:6d:46:f0:8a:fa:75:d4:46:90:10:cb:
04:90:bc:cc:6d:10:09:43:db:d4:d8:65:50:c2:cd:
ed:cc:b8:3c:70:c5:ce:7d:e1:82:48:ab:d2:92:c3:
78:2f:eb:1f:5d:24:4e:2c:08:c3:51:5a:73:8f:4e:
0b:b5:30:32:6a:f7:35:5c:ea:f9:da:bd:45:cb:b1:
4b:1b:a0:a4:a6:66:03:e0:86:4d:91:8d:68:29:11:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BD:DE:41:63:77:15:F4:CC:DC:EB:A8:8F:7B:60:66:FD:23:09:37
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/tb3eQWN3FfTM3Ouoj3tgZv0jCTc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
07:3e:37:21:c5:96:05:0f:e5:ac:d3:fc:68:9c:b9:e5:74:d7:
87:ea:9a:48:ea:0e:ba:cf:16:fa:77:1d:a3:09:5a:1d:96:c0:
05:da:7e:0f:37:63:1f:5d:56:a7:67:bf:ca:b8:a3:15:5d:7d:
32:21:91:45:11:5e:01:69:39:bf:07:95:27:46:39:9c:b0:bf:
e2:0d:48:9a:93:bd:72:62:cc:c5:43:2b:4f:a9:bf:0f:79:37:
21:d1:9b:50:a4:b9:36:1d:a7:98:a7:45:f0:21:9d:41:e7:17:
ce:74:c3:34:25:93:9e:41:da:e6:4b:69:21:58:0c:f2:f2:c1:
f2:4b:c0:66:4a:0d:a7:b3:6a:7f:9f:24:a0:cf:1f:0a:56:58:
68:f7:c2:b9:08:28:79:6d:ed:91:c6:fe:05:0e:1f:d6:fd:5c:
de:e3:27:97:be:41:45:06:64:57:e8:d0:57:0a:71:5c:e6:f1:
36:35:f9:79:07:35:2f:01:06:65:da:51:5f:39:29:c6:20:2a:
bc:fd:40:18:72:bc:93:47:18:0a:0e:15:8d:9a:dc:da:46:1a:
29:0c:ef:c5:3f:1e:2d:57:e2:c3:53:da:14:d1:c8:18:53:0b:
22:1a:4c:a3:21:b5:a5:89:5b:fc:eb:b4:db:0c:b7:55:6b:b1:
db:22:de:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 05:57:19 2024 by rpki-client on console-ams.rpki-client.org