Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/zDghyAykqmhN02cWaVTjUjPquqE.roa
File: zDghyAykqmhN02cWaVTjUjPquqE.roa (raw, json)
Hash identifier: NFrqCyomhmZPFnamWbtQvsFUmuqFA41WyYCrhl++BDE=
Subject key identifier: CC:38:21:C8:0C:A4:AA:68:4D:D3:67:16:69:54:E3:52:33:EA:BA:A1
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: C1
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zDghyAykqmhN02cWaVTjUjPquqE.roa
Signing time: Fri 01 Mar 2024 15:55:03 +0000
ROA not before: Fri 01 Mar 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 1 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=CC3821C80CA4AA684DD367166954E35233EABAA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:76:13:9b:f0:32:32:6b:62:00:08:13:b8:0c:
0a:0b:5f:00:df:36:ea:4d:19:36:52:40:9a:64:01:
04:4a:0c:72:8b:d9:06:49:03:de:d9:af:42:b7:bd:
8f:10:86:61:db:7c:1c:87:bb:b9:3e:db:3f:08:9e:
50:39:70:bd:1b:22:04:6f:e3:02:24:3e:3d:9b:39:
3c:13:fd:e0:c3:62:3f:11:7f:03:66:14:b1:70:e0:
67:74:a2:1d:39:7c:37:ee:a1:a8:52:36:e3:08:18:
bb:cd:94:0e:5c:8d:1f:a6:32:fc:6b:eb:0d:2b:c9:
9c:d1:0f:07:36:9e:d5:54:87:5b:6d:75:a9:c3:22:
58:23:37:e4:a1:7a:76:9c:db:ff:9e:fa:08:26:52:
ef:5f:99:9c:53:5e:e1:de:d0:5d:1e:c6:1b:7e:d7:
f5:25:f5:9d:1c:84:1b:0d:68:7a:22:02:ad:8e:bf:
f0:bb:6c:72:7e:b5:3c:01:cf:cc:37:68:8c:8b:58:
26:e3:1d:56:bc:3c:44:dd:f5:70:fb:22:f9:7e:5b:
26:4a:1f:9b:06:59:6e:cd:1c:70:64:56:b2:a4:68:
26:15:c0:7e:e0:ac:4e:4f:cb:70:12:82:23:61:74:
c6:34:a5:f6:c2:89:fb:0d:76:23:f3:2e:7c:e6:e2:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:38:21:C8:0C:A4:AA:68:4D:D3:67:16:69:54:E3:52:33:EA:BA:A1
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zDghyAykqmhN02cWaVTjUjPquqE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
95:7b:93:60:fb:80:95:31:2c:db:2c:2c:b8:ea:a9:a6:a5:8d:
94:2e:db:1b:d6:cb:4c:06:b1:e9:c1:85:80:38:65:3d:86:97:
2d:6a:93:e3:66:bd:10:9f:9d:b0:4a:11:f1:78:bf:a9:45:35:
a1:37:5d:dc:b4:8e:36:58:06:34:0a:65:fe:b3:81:83:cf:b6:
27:a7:7b:0b:c1:79:db:b5:15:bf:78:ea:b5:79:1d:61:e1:77:
2a:fa:67:0a:87:80:17:ed:5b:4e:ec:e8:55:38:91:23:1c:c2:
48:48:96:c5:8d:cb:eb:96:40:08:c9:2a:1e:ca:18:00:5f:2d:
2e:04:08:25:5c:5b:21:71:5c:9e:2a:8d:69:db:50:21:bc:aa:
60:fd:32:5b:24:2e:c8:cf:9c:d6:a5:f2:e0:11:f4:9a:74:47:
ac:2d:c0:37:63:f8:5d:1e:dd:d3:87:ef:be:be:cf:ce:18:02:
44:6e:78:3d:d9:ac:81:fd:b7:cc:64:69:ed:dd:b3:37:a6:59:
07:1f:bb:e5:20:71:6e:64:a3:82:29:bb:27:d6:70:64:85:3d:
fa:ff:46:56:07:15:3d:d8:48:50:c2:7c:ae:ed:98:e5:a6:0f:
cb:93:b7:a1:a5:09:e8:96:26:45:de:3f:cd:99:8f:e6:02:37:
45:bc:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org