Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/-0tpBZ20eFABlcnFjkcvhU23FjQ.roa
File: -0tpBZ20eFABlcnFjkcvhU23FjQ.roa (raw, json)
Hash identifier: d5bDcnWie4YaG3oXluekSpmc8FIZmr2A7IEUjq/GQSc=
Subject key identifier: FB:4B:69:05:9D:B4:78:50:01:95:C9:C5:8E:47:2F:85:4D:B7:16:34
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 04DE
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/-0tpBZ20eFABlcnFjkcvhU23FjQ.roa
Signing time: Wed 26 Jun 2024 15:55:04 +0000
ROA not before: Wed 26 Jun 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1246 (0x4de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 26 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=FB4B69059DB478500195C9C58E472F854DB71634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:ef:b8:f3:0a:b4:aa:ab:de:91:04:3c:13:
a2:47:16:b3:10:3b:c3:d2:60:5c:51:0a:da:8e:5d:
2b:4e:71:1a:59:d3:09:3d:24:70:47:e5:24:6d:d9:
e4:9c:4d:a0:32:81:7f:0f:96:08:cd:00:3e:06:1b:
73:d0:04:bc:04:0f:db:0d:8b:54:37:6f:6f:9e:29:
01:82:a8:72:4e:4a:ee:bc:60:3a:cd:f6:55:c6:35:
9b:0b:41:62:f2:6e:44:18:7b:51:31:90:95:8b:8f:
90:03:56:30:a9:16:f4:97:96:92:eb:20:7e:25:ac:
90:c2:c5:72:9f:ee:ad:d1:29:93:9f:d4:f2:4a:05:
69:86:a8:6b:bc:50:f2:63:2b:9e:c4:e6:be:75:aa:
4e:de:35:e3:14:f1:f4:a2:d1:5f:a5:b6:05:0f:c2:
3e:48:6e:4d:27:04:11:cf:b3:f7:17:3b:c8:44:84:
41:1b:77:69:30:f7:ca:df:80:4e:7b:cf:7a:2a:fe:
ac:3b:e5:79:3e:4e:b3:94:7f:b8:a6:3e:d0:15:58:
be:73:68:04:da:38:72:92:ab:38:90:f3:8c:68:e6:
ce:cb:98:2e:55:87:62:dd:75:f6:cf:c4:be:cf:65:
7c:a6:db:93:be:37:d7:de:8a:d8:28:5f:06:94:05:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4B:69:05:9D:B4:78:50:01:95:C9:C5:8E:47:2F:85:4D:B7:16:34
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/-0tpBZ20eFABlcnFjkcvhU23FjQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:34:7e:2c:c9:f1:0d:9e:f5:61:b0:dd:bb:0c:e0:4c:b1:2b:
2c:3a:4d:a9:46:33:8b:20:e0:05:81:a6:77:cf:f7:9d:a6:09:
8d:da:fd:c0:f9:58:80:c6:5c:82:76:30:7a:08:ba:4e:cd:c4:
d3:4f:fb:fa:ad:5a:27:3a:6b:9f:a1:ea:bb:48:37:4a:2f:ed:
5c:f9:7d:4e:69:69:d8:66:e5:50:5d:1d:cf:cd:60:67:ed:50:
c6:0e:a3:0a:f5:ea:60:a2:22:48:9d:30:71:29:30:2f:81:b9:
d6:aa:2e:46:f7:d0:ef:cb:68:a7:af:ab:4c:b2:58:7a:49:53:
d9:1c:70:59:38:61:1e:2a:33:7c:1a:4c:f7:69:80:47:31:ea:
03:5c:5b:27:0a:55:e5:bc:b8:16:c2:0b:3e:5b:f5:1f:ee:3a:
79:e0:21:fd:3d:88:bd:d3:15:1c:27:57:7e:ab:0b:a0:dd:e1:
18:4b:83:45:2f:2b:65:db:14:90:84:e5:b2:8c:1a:94:47:29:
bd:21:b3:f6:63:6f:2a:b4:1e:75:96:9e:b8:ed:51:ff:ad:49:
6c:b6:90:68:a9:d0:a6:30:dd:17:8b:22:1b:24:7b:5c:d3:27:
9f:f6:50:c5:a0:25:87:0f:98:9d:35:a9:78:ec:b1:53:23:09:
fa:c8:15:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 00:14:22 2024 by rpki-client on console-fra.rpki-client.org