Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/zze-A6pJenFaOgDpFXIsKQoG7Sw.roa
File: zze-A6pJenFaOgDpFXIsKQoG7Sw.roa (raw, json)
Hash identifier: ZkJB63h77KF+rfOTPUynm9+nDXfVXwObDGQCRAo0yGc=
Subject key identifier: CF:37:BE:03:AA:49:7A:71:5A:3A:00:E9:15:72:2C:29:0A:06:ED:2C
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0481
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zze-A6pJenFaOgDpFXIsKQoG7Sw.roa
Signing time: Sun 16 Jun 2024 07:55:02 +0000
ROA not before: Sun 16 Jun 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Jun 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1153 (0x481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 16 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=CF37BE03AA497A715A3A00E915722C290A06ED2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:da:11:c1:21:9f:7f:66:59:24:2e:ad:a4:
80:33:2f:df:53:a2:cd:7d:94:9b:ee:05:85:17:4e:
c8:3d:ea:42:b9:7c:f6:be:e8:df:a6:92:37:fb:d3:
db:96:40:27:f1:a3:fe:7c:11:f1:f2:e1:c5:85:ba:
b8:6f:9b:a6:ca:d2:59:8e:34:30:f9:60:03:d5:f6:
65:73:01:31:85:91:5e:42:b5:de:4b:18:7f:2c:f1:
61:27:e7:27:80:6f:19:c7:a2:83:64:e5:5f:fb:48:
17:19:ae:91:6c:7d:12:e9:d9:8d:99:aa:a7:39:4a:
57:dd:90:61:35:b8:6d:83:e5:3a:e3:a7:0b:a6:8a:
ef:d3:89:ee:7c:a2:99:70:4b:83:89:94:2e:eb:d6:
9b:b2:fb:66:a9:f6:43:c1:14:4b:d2:46:f1:71:47:
87:2b:06:22:fe:98:bd:f2:7a:74:5d:45:d8:9d:48:
6f:dd:a1:01:b7:81:b4:a5:ff:d4:92:f4:02:42:a7:
b4:e4:4a:cf:39:80:f3:ea:18:5c:5a:30:75:67:ec:
45:40:d7:7e:8d:5b:ce:a9:be:f3:4b:3d:ae:38:9f:
90:2f:49:1c:3b:4f:1c:5e:ad:9b:bc:3d:cb:e4:34:
27:dc:ae:c3:e3:71:d6:a6:6b:ba:d3:ef:a1:b7:75:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:37:BE:03:AA:49:7A:71:5A:3A:00:E9:15:72:2C:29:0A:06:ED:2C
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zze-A6pJenFaOgDpFXIsKQoG7Sw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
86:59:5f:54:2d:9a:6e:ef:ad:a3:40:1b:9a:2c:e3:e0:7a:5a:
fb:e4:ff:b5:de:a4:eb:71:48:c5:af:7c:2d:03:30:8e:3e:20:
5e:00:aa:96:4f:87:1f:34:19:6d:fa:08:b3:d1:34:14:a6:c9:
36:3c:12:0f:4e:e5:78:1d:d1:c7:23:a7:76:e5:00:be:77:0c:
69:88:86:42:c1:e3:25:90:7f:18:8c:f7:c5:20:75:d0:2e:24:
b5:9c:53:e8:42:62:61:bf:80:d9:c5:be:97:18:87:3f:26:d8:
c5:c7:50:ca:e5:7b:b3:b8:16:65:92:45:87:0c:19:e3:5e:2e:
ba:da:11:15:a3:eb:47:f9:b5:e0:5c:22:86:c8:38:8c:bb:fa:
cc:bc:26:6a:4e:69:f8:75:88:b9:7d:17:e3:ec:38:0c:16:e8:
5e:1b:66:d1:fb:9c:59:bd:7e:ba:66:44:56:85:45:2c:b8:8e:
90:22:6f:37:30:8e:a8:48:20:e7:94:87:31:34:ee:8f:4e:3f:
74:88:80:e1:7c:0e:c1:37:ca:01:ab:a3:d2:89:3a:4c:89:a3:
3f:6e:07:04:45:59:43:98:55:92:9e:d1:85:fe:35:51:82:c5:
6c:89:9a:8e:b3:72:a7:eb:b4:46:81:35:3a:c1:b6:c1:91:ac:
d4:57:c6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:54:43 2024 by rpki-client on console-ams.rpki-client.org