Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/zz-OcAygiaqLGVYbmRecxmrHJWU.roa
File: zz-OcAygiaqLGVYbmRecxmrHJWU.roa (raw, json)
Hash identifier: mwFEanFMsS47F7cjaXWGo9Y1bxdskaszj97w6ZudFoE=
Subject key identifier: CF:3F:8E:70:0C:A0:89:AA:8B:19:56:1B:99:17:9C:C6:6A:C7:25:65
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0637
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zz-OcAygiaqLGVYbmRecxmrHJWU.roa
Signing time: Sat 03 Aug 2024 23:55:03 +0000
ROA not before: Sat 03 Aug 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Aug 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1591 (0x637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 3 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=CF3F8E700CA089AA8B19561B99179CC66AC72565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:b1:c4:34:90:e4:a4:f6:bc:ed:5d:69:06:
54:40:3f:fb:66:df:fe:f3:bd:44:73:f2:5c:0e:4d:
72:01:e9:fa:cc:c2:b2:6c:e6:96:66:75:d6:4f:e5:
ad:c7:78:ff:d6:5a:ba:52:c7:c2:0b:c6:6c:f5:17:
c4:f4:1d:e6:9a:9e:23:4e:8b:bb:20:e7:eb:3b:03:
4d:a7:49:89:66:07:cd:76:1d:57:c2:c7:71:e5:2e:
14:a8:f0:d1:f3:f3:a8:39:d8:0d:e3:76:ce:03:05:
0a:48:f8:91:01:16:50:54:e3:c3:c5:4f:a9:f2:ce:
28:d2:73:04:03:a6:0f:26:d0:c5:16:3a:ac:11:59:
70:c2:1b:39:d3:18:7a:3e:9c:cb:02:5c:34:f1:9b:
7c:8c:da:4e:d9:80:9c:8f:4b:eb:df:fe:b0:2d:17:
b4:9d:e3:02:65:67:88:78:8f:d4:04:fc:c5:25:61:
f5:52:e9:15:5d:67:a4:f5:91:18:19:49:89:1d:4d:
e4:ba:57:30:36:df:f9:23:7c:c1:bb:6d:e4:34:f3:
dc:d4:55:61:f7:de:4b:75:54:2d:da:29:a7:e9:a2:
2e:86:c1:7e:3e:cf:be:d6:ec:6c:ba:61:ae:a7:bf:
c4:6a:b3:e6:e8:bd:4a:69:60:6a:9f:19:00:f3:65:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3F:8E:70:0C:A0:89:AA:8B:19:56:1B:99:17:9C:C6:6A:C7:25:65
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zz-OcAygiaqLGVYbmRecxmrHJWU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:a9:da:56:e2:4d:8f:d8:98:e4:9d:77:62:c1:77:3b:80:55:
39:50:01:a0:b9:9d:3e:83:c5:cd:8d:53:90:2f:4f:2e:ae:5d:
09:90:e5:b3:73:8f:48:11:f1:16:d0:ca:c8:7f:29:27:35:07:
a2:5c:6e:3f:ee:6e:d9:10:01:59:bb:ea:04:8c:41:79:3d:d2:
8b:4b:21:99:c5:0f:62:b5:8e:58:de:bf:7b:f3:7e:3a:a5:9d:
6e:ef:44:c7:12:d2:92:d1:4e:ef:55:2a:16:ac:4e:19:a5:ed:
9b:dc:dd:a4:74:b7:eb:51:b6:e1:72:6f:ca:ab:2d:8c:f6:0b:
d8:a1:c1:3c:e4:de:9a:33:92:79:9c:a9:73:9c:81:9b:e1:49:
83:88:ca:c1:5c:0c:e3:5e:1a:cc:f1:79:de:2d:dc:bb:b4:9e:
7b:09:7f:46:ca:38:01:51:a1:db:af:43:40:b3:2d:20:35:9c:
b8:f6:a2:d4:54:4a:ce:57:a3:5e:54:15:20:f6:7b:00:74:0e:
17:c4:3e:5e:c5:45:71:ef:35:ae:ac:ba:1a:48:60:c5:43:f1:
3d:f4:0c:6b:70:29:b7:52:b2:34:d9:6f:27:8e:66:6c:b6:dc:
f2:f8:9d:8a:a3:45:d6:40:c1:98:7f:af:3c:41:88:92:ca:64:
84:72:bc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 06:30:44 2024 by rpki-client on console-ams.rpki-client.org