Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/uSruTcZXpw2i9Je2R1YEmx-iXX0.roa
File: uSruTcZXpw2i9Je2R1YEmx-iXX0.roa (raw, json)
Hash identifier: pCgD79FlRj9BMS/yruuMxN9fV+Fe3aIUwDYBvOxmtFo=
Subject key identifier: B9:2A:EE:4D:C6:57:A7:0D:A2:F4:97:B6:47:56:04:9B:1F:A2:5D:7D
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: FD
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uSruTcZXpw2i9Je2R1YEmx-iXX0.roa
Signing time: Fri 08 Mar 2024 07:55:03 +0000
ROA not before: Fri 08 Mar 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 8 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B92AEE4DC657A70DA2F497B64756049B1FA25D7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:62:51:24:1e:5f:2d:ff:31:8b:a4:ba:25:
b1:f0:eb:8f:41:d1:c6:ee:a3:e8:bf:a1:f5:bf:0a:
a5:24:aa:6c:67:e4:73:8f:6a:2a:4e:72:25:8d:dd:
2c:2f:aa:a2:6c:4a:43:3b:7d:ca:5c:ab:89:0d:d0:
92:dc:d7:f1:47:ce:59:3b:1f:d1:da:71:60:a7:45:
b3:c2:6d:25:fb:94:92:77:bd:04:5c:b9:11:83:59:
4d:77:c2:9b:b6:31:b1:e6:e3:b5:f4:82:a0:1e:93:
1f:38:c3:54:5c:ae:0d:a3:72:78:67:0c:ef:20:cc:
a5:c8:84:5e:ba:20:65:d8:80:92:25:15:ef:74:21:
cb:a5:da:41:63:89:2e:3a:36:58:b6:7b:d3:86:2c:
ee:7e:67:30:18:ac:7c:d5:64:c2:40:d2:dd:b7:31:
36:b4:72:e6:28:dc:1b:13:76:e7:2a:fa:df:b8:88:
39:45:69:81:74:16:de:29:05:af:cd:f1:ec:88:ca:
f1:11:5f:89:74:a2:dd:0f:18:b8:82:6f:b4:18:0a:
21:58:4b:c3:a4:63:32:79:22:ce:00:a2:f3:78:37:
0f:97:a7:e6:c0:76:ab:6a:ce:63:8b:bf:a7:ad:9b:
58:1f:5f:cc:e2:eb:01:0a:78:e7:a6:90:b6:dd:80:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:EE:4D:C6:57:A7:0D:A2:F4:97:B6:47:56:04:9B:1F:A2:5D:7D
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uSruTcZXpw2i9Je2R1YEmx-iXX0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:4c:1e:7f:2c:93:e1:97:f4:ec:24:45:69:bf:a9:4f:64:5e:
5b:66:1a:3d:e2:50:fd:a9:c7:34:eb:5c:ed:28:5a:0a:3a:63:
16:4a:71:76:c8:44:6e:29:b6:d7:88:d5:38:8b:71:7c:0e:bb:
17:58:ed:ea:b3:c0:e9:51:ba:a4:a7:f9:11:b9:06:4c:51:12:
5d:a0:62:cb:2b:73:fc:8e:11:68:e6:76:13:da:73:44:71:d2:
df:90:4e:21:d9:33:b5:f2:4a:65:41:d5:e7:61:ac:29:52:00:
c0:35:0c:6f:96:2f:5a:60:b2:af:c9:38:8c:0e:0f:0e:70:49:
58:c6:d9:18:1b:d2:69:2e:fe:04:d0:dd:46:5f:cf:6c:19:25:
06:27:a0:f1:d5:66:fd:ac:23:56:e1:3b:a2:f0:b4:2f:3a:dd:
88:0f:8a:1e:5e:b3:6f:f8:a1:90:d8:7c:08:a2:c4:97:c5:35:
81:cf:88:f9:a1:19:bb:4a:26:52:e4:14:e3:9e:42:aa:4d:70:
5f:36:b3:df:1f:8e:ca:d9:01:bd:57:10:5a:41:e2:92:93:d5:
10:b3:ae:fb:6b:d7:4c:6c:6a:00:ef:81:10:bb:20:52:50:c6:
78:00:92:20:09:eb:3c:fe:38:db:d2:0e:cf:e5:5f:3f:ea:f0:
c8:9f:67:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 17:09:48 2024 by rpki-client on console-ams.rpki-client.org