Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/vOWKCAAWF57dW2Gpervwz6RLv7M.roa
File: vOWKCAAWF57dW2Gpervwz6RLv7M.roa (raw, json)
Hash identifier: HWmv/7qY5Bq1vmm3e/Qnu8WAgZU9v7noDeO5Odk++qQ=
Subject key identifier: BC:E5:8A:08:00:16:17:9E:DD:5B:61:A9:7A:BB:F0:CF:A4:4B:BF:B3
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05A1
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/vOWKCAAWF57dW2Gpervwz6RLv7M.roa
Signing time: Thu 18 Jul 2024 07:55:02 +0000
ROA not before: Thu 18 Jul 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jul 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1441 (0x5a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 18 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=BCE58A080016179EDD5B61A97ABBF0CFA44BBFB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:91:94:83:ea:48:6e:fe:86:0d:a7:40:69:
a8:1d:15:6a:48:36:22:d2:4f:a1:b7:28:39:95:b7:
87:9f:45:01:b0:4c:63:91:bb:ad:64:34:14:11:43:
03:f4:d2:04:51:9d:cc:db:1b:aa:25:83:68:23:ef:
4f:65:fe:10:bb:86:57:7d:38:66:3e:cf:2a:88:3b:
15:7d:cf:ef:6f:94:41:d6:1a:71:eb:cf:d5:4c:db:
85:c9:8d:a3:21:c2:87:e3:06:05:b0:b1:dc:a7:97:
ab:43:61:df:1d:db:4d:13:64:4e:e7:f6:59:d5:ec:
f2:1d:f2:de:41:78:40:f1:b2:8b:a2:3c:3d:ea:74:
59:ea:9f:81:32:2d:03:ce:33:f2:25:3d:21:73:2f:
4d:af:ef:b8:61:35:38:31:c6:71:63:07:35:e2:c1:
01:ce:73:a0:97:4d:5f:98:1a:f6:65:34:61:1c:32:
5f:f7:92:e3:6e:4a:88:38:43:f8:b1:01:24:77:36:
9c:c4:67:00:4d:17:8f:6c:d9:6b:ed:08:d9:49:2d:
ab:d2:4b:82:be:fa:fe:56:4c:ff:51:48:b1:ca:9f:
a1:ef:31:4e:2d:16:ca:fb:98:ec:c0:cd:e1:b6:b3:
15:10:63:43:0c:74:0d:16:74:3d:85:61:0e:76:e0:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E5:8A:08:00:16:17:9E:DD:5B:61:A9:7A:BB:F0:CF:A4:4B:BF:B3
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/vOWKCAAWF57dW2Gpervwz6RLv7M.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
94:c2:4f:ca:81:d2:53:90:bb:f8:bf:8f:e5:44:0e:bd:76:37:
0a:f9:ff:68:06:95:db:74:7f:2b:be:e9:14:13:f7:45:5a:40:
87:8a:91:20:5a:11:1a:91:1c:da:5b:e2:a8:0e:fd:26:ac:71:
d7:74:0d:ee:20:fa:29:aa:cb:9b:99:a9:1b:dd:ba:03:00:f3:
11:09:fe:54:6a:46:db:1b:33:ba:cb:77:6a:8b:4f:c1:c9:90:
fc:7a:b9:99:24:88:2f:a9:8b:5c:07:62:05:fe:fc:42:1f:ee:
8a:2e:57:97:2a:7b:fb:6d:ee:4d:db:24:81:3e:85:70:04:5b:
50:d4:f2:3a:3c:00:7c:10:dd:55:4b:6c:e6:73:90:b9:db:57:
53:f7:9e:b4:dd:e2:5d:38:6c:14:b1:3b:4e:57:2c:45:18:7a:
90:0d:63:24:f3:b1:2e:91:ea:f3:9b:0a:00:42:2c:fd:96:3a:
0e:ef:6c:d3:1c:17:14:e9:e3:df:0c:11:61:47:7c:e8:15:e7:
ea:88:00:e5:05:d7:ac:cf:f7:0e:c9:ed:c0:f0:2c:a0:fa:cb:
ce:9a:19:5e:83:15:a6:3c:fa:b5:12:84:09:fa:3b:05:af:43:
58:3e:3b:99:38:32:35:54:eb:22:83:47:e8:83:ed:90:c6:81:
e2:2e:c1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 16:12:22 2024 by rpki-client on console-ams.rpki-client.org