Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/v2fUPSiIINb6wONwLJE-tKe1aUo.roa
File: v2fUPSiIINb6wONwLJE-tKe1aUo.roa (raw, json)
Hash identifier: 3SWiBKfVuYdcrcrQVcOKTGwIiQ+acFA6SANIbc29934=
Subject key identifier: BF:67:D4:3D:28:88:20:D6:FA:C0:E3:70:2C:91:3E:B4:A7:B5:69:4A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0778
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/v2fUPSiIINb6wONwLJE-tKe1aUo.roa
Signing time: Sun 08 Sep 2024 15:55:03 +0000
ROA not before: Sun 08 Sep 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1912 (0x778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 8 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=BF67D43D288820D6FAC0E3702C913EB4A7B5694A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:3e:57:5f:61:de:53:d7:aa:fc:1d:36:3a:
da:bf:41:f3:4a:15:29:15:91:9d:f7:d2:3f:84:ea:
65:3e:e1:e0:cb:d6:3e:69:d1:b5:6d:a7:26:3f:ad:
50:4a:23:ee:8b:50:34:80:92:fd:57:3c:f7:31:d3:
9c:59:2c:11:92:62:6f:7c:31:25:bd:ca:9d:ce:12:
95:1e:38:16:f4:66:e7:60:e6:7c:f8:3c:96:cf:1e:
4a:49:90:15:90:71:73:0c:3f:13:3e:2b:0f:df:33:
f7:bf:3f:0a:bf:53:5a:93:a5:c8:4c:1f:05:0c:6f:
59:a3:64:70:19:e6:d1:f7:22:54:4f:fb:40:86:4d:
cf:f4:ae:6f:97:03:92:1f:78:6f:cf:0e:21:eb:30:
d2:03:64:7a:59:60:27:3a:dd:73:d4:d5:9f:74:cd:
24:26:2e:dc:11:e4:0b:1b:f0:84:b8:0f:5a:da:5f:
d6:e5:f6:a3:3e:28:74:fa:91:7e:b3:d2:29:60:da:
ed:0c:48:08:18:dd:39:7e:44:13:af:5d:06:8c:13:
f8:57:af:9a:ba:65:00:d9:3f:71:d5:09:34:9d:6a:
c7:b3:aa:5a:ec:44:94:5c:d9:a3:b0:26:95:4e:2a:
ee:49:a6:a1:fa:16:5b:93:ac:1e:b4:9f:b2:3b:53:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:67:D4:3D:28:88:20:D6:FA:C0:E3:70:2C:91:3E:B4:A7:B5:69:4A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/v2fUPSiIINb6wONwLJE-tKe1aUo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:11:23:bd:1e:80:f9:98:58:da:f6:77:e2:ea:dd:46:c5:52:
43:75:31:a9:85:e3:ab:fb:15:3a:66:9e:14:8c:54:a8:b0:0b:
da:65:07:fc:8a:e7:f3:48:10:ca:09:22:f8:c3:2a:85:1d:f3:
f5:8b:0b:90:df:54:d2:f3:f7:f4:83:dd:b6:31:90:88:b4:ea:
48:de:be:5e:eb:65:0d:b6:8d:c3:19:18:2f:bf:20:c4:d6:cf:
d8:ec:c8:3f:b5:74:84:61:4b:c4:56:7a:cd:5d:8d:c5:f6:74:
33:2b:2b:c0:5e:53:31:8f:53:a0:db:9b:a7:21:53:f2:9c:83:
02:17:3e:33:08:49:36:32:f4:ce:0d:dc:7e:c5:76:b5:5f:34:
60:3a:d1:d2:f5:a0:3b:73:73:37:1a:74:37:96:02:8e:6b:75:
04:b4:e2:91:ba:b0:85:e6:50:98:db:af:c5:c1:27:8d:79:8b:
22:a9:bd:52:c6:48:31:ab:b0:cc:ec:72:0b:64:aa:43:61:26:
0c:84:04:3e:e8:4e:24:e2:24:26:e0:7a:d5:57:3c:85:f7:bc:
07:32:82:0f:27:cb:ce:bd:43:71:f7:5a:4e:75:30:bd:db:39:
a6:42:9e:08:24:6d:60:9f:b8:82:9c:55:df:51:f6:27:a4:4f:
03:87:51:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 20:56:57 2024 by rpki-client on console-ams.rpki-client.org