Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/uE64hEZwxaq5iADitM9Ln1UWkI4.roa
File: uE64hEZwxaq5iADitM9Ln1UWkI4.roa (raw, json)
Hash identifier: iWQ27pQ6lkBtPay1kQMuT/N7s6LkJnSeGcyVunuky0c=
Subject key identifier: B8:4E:B8:84:46:70:C5:AA:B9:88:00:E2:B4:CF:4B:9F:55:16:90:8E
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 024A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uE64hEZwxaq5iADitM9Ln1UWkI4.roa
Signing time: Sun 14 Apr 2024 07:55:04 +0000
ROA not before: Sun 14 Apr 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 14 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B84EB8844670C5AAB98800E2B4CF4B9F5516908E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:a1:66:69:69:6c:45:c0:fc:f8:29:97:68:
5a:9e:4d:fd:b1:09:9e:6c:af:98:fa:16:ea:4e:42:
cf:a9:6c:2b:f3:b3:c9:f2:52:40:03:88:76:e8:53:
89:0f:11:f3:4c:83:0d:2e:41:81:36:4e:d3:51:47:
05:e4:51:f5:23:8f:b5:c5:52:37:91:7d:7b:0d:a8:
6e:a1:7f:ce:9d:a5:d4:b8:1d:ea:74:1c:91:8e:6d:
5a:82:7c:8c:b1:f3:c2:33:c2:7d:7f:f8:51:91:89:
40:2d:36:bf:34:29:c4:20:7a:b0:e6:12:96:64:40:
de:d4:da:79:0f:16:6c:c5:32:b1:b6:32:56:2f:16:
92:5e:32:28:8d:d5:b6:32:c5:2c:5e:a4:6d:68:9d:
ac:e4:95:b9:f7:ff:80:d7:41:6e:d5:6a:ec:59:f8:
3e:67:85:4c:30:60:03:d3:9d:76:7f:97:58:c6:a4:
b8:4c:64:f5:27:36:74:39:52:06:94:b3:2c:b4:a5:
87:00:4c:9d:44:0a:bc:81:21:99:01:8a:b5:83:43:
1a:05:3b:84:22:1b:72:7d:f7:09:bb:13:11:16:3b:
56:b2:d7:ca:1c:3b:f6:45:40:7d:44:03:4e:74:88:
01:73:17:bf:7c:05:2f:47:db:b1:11:2b:98:a2:52:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4E:B8:84:46:70:C5:AA:B9:88:00:E2:B4:CF:4B:9F:55:16:90:8E
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uE64hEZwxaq5iADitM9Ln1UWkI4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:21:70:52:fe:d1:6d:4a:02:7a:2e:16:41:29:dc:d2:e8:cb:
93:ae:cb:5d:fe:c7:83:20:78:50:8c:24:ac:56:45:4b:27:51:
04:8a:44:32:d5:6d:64:a9:54:53:ec:b8:c3:87:97:c2:13:f8:
83:27:e9:7c:be:4b:ac:d8:41:b2:fb:e0:72:96:e9:f9:a1:2a:
88:39:24:e6:5e:14:38:aa:c7:dd:30:37:b5:e4:2b:32:d5:e7:
aa:ba:d9:f0:77:26:2d:6c:38:35:9f:c0:09:51:c9:a3:96:fb:
06:41:9f:20:87:e8:30:e3:46:33:cf:a0:84:58:42:30:11:93:
83:0d:84:d5:1e:20:e3:b6:cc:5f:d0:74:43:bc:77:c5:28:a4:
b5:b6:95:2c:6a:ab:b9:fd:76:91:f9:81:49:6c:50:88:70:02:
9e:57:4a:03:b2:b8:bd:7f:d9:9e:c1:67:39:cb:bb:c0:20:e3:
04:6f:a0:d4:9d:29:0b:a0:38:02:bc:57:24:75:5c:86:a3:35:
61:28:8a:84:00:d1:60:62:9d:c2:e0:e6:ea:dc:4f:f0:cc:a3:
67:7f:37:94:bd:0b:7c:87:55:89:98:ee:c3:78:f0:28:d9:8a:
7d:f6:75:16:88:b9:6e:11:05:61:0c:c0:ee:0f:32:f9:b3:79:
5d:8c:4d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org