Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/-AR2OfhP14cJfqWqc16ZvCHPUzc.roa
File: -AR2OfhP14cJfqWqc16ZvCHPUzc.roa (raw, json)
Hash identifier: zHXigBJdzfsada7M3Eq3zRXYVEBQ90H3Zf2QsmuZfhg=
Subject key identifier: F8:04:76:39:F8:4F:D7:87:09:7E:A5:AA:73:5E:99:BC:21:CF:53:37
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0670
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/-AR2OfhP14cJfqWqc16ZvCHPUzc.roa
Signing time: Sat 10 Aug 2024 07:55:03 +0000
ROA not before: Sat 10 Aug 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Aug 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1648 (0x670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 10 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F8047639F84FD787097EA5AA735E99BC21CF5337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:7f:30:b6:61:cd:0c:93:8c:cd:be:19:38:
32:81:4a:7e:88:be:09:8e:7a:1c:18:ec:8d:44:fb:
1e:d6:0c:34:7b:7b:a6:e7:8e:d6:69:2d:36:26:c7:
ab:77:f3:f9:32:27:89:33:ec:db:1d:9b:fa:59:9d:
8b:2f:eb:ff:5e:03:94:6a:a0:f2:66:46:d1:49:e2:
71:d2:00:99:cd:46:f9:45:d3:1d:d2:80:46:10:a4:
6d:30:36:5d:18:04:c4:ce:2e:7d:e3:de:a4:98:2b:
f9:39:90:7b:1b:6b:f9:23:9d:d0:d9:0b:91:f4:52:
73:dc:2e:a0:bd:07:ab:a7:09:d0:82:ad:06:cb:eb:
66:eb:b6:54:9b:61:c4:3c:1f:88:b5:a6:33:14:7e:
46:3e:39:ab:01:c0:e0:15:b4:80:6d:90:19:56:ee:
0b:2e:cb:c9:90:a6:b7:af:19:4c:29:99:12:b6:ed:
a8:21:c6:36:3d:d9:aa:61:2d:c8:77:a6:8b:66:d9:
63:71:a8:03:a2:64:33:a7:73:b3:e8:5e:15:e0:ab:
2b:e9:64:42:94:7a:97:b6:f5:40:6d:14:d8:45:a0:
76:d2:35:b0:82:8a:96:5a:a7:b3:33:6a:4a:48:9f:
6b:ad:67:a4:71:a5:a2:85:f1:51:12:7b:f7:e5:91:
c5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:04:76:39:F8:4F:D7:87:09:7E:A5:AA:73:5E:99:BC:21:CF:53:37
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/-AR2OfhP14cJfqWqc16ZvCHPUzc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a1:7b:03:16:97:02:75:1a:78:ef:04:12:d6:f3:df:ba:41:
58:da:39:c9:8c:e2:da:78:1b:6a:7d:d7:94:e6:a8:f1:d5:a1:
b6:67:46:9c:ab:03:84:70:51:96:59:3a:cd:b7:cb:9f:9b:da:
0d:e3:99:8d:31:3d:c9:24:74:23:22:67:43:a6:16:15:19:b8:
9c:30:8a:c7:e6:59:c6:fb:5e:43:59:fc:64:20:35:59:c3:07:
ed:85:f9:b8:53:6e:2f:4e:43:04:87:dc:5e:fd:81:cf:23:10:
ba:af:38:81:29:21:09:dc:c1:98:70:a8:67:44:da:0c:2f:9b:
ca:a2:ef:c2:f6:a6:65:65:b8:71:f6:5a:0f:a2:19:f3:1e:b9:
66:9e:96:70:b5:68:69:af:53:56:b0:6f:d1:45:2c:27:53:81:
61:2f:ea:7e:8b:5b:9d:e9:86:ab:44:07:39:5a:bd:60:7c:71:
66:4a:89:76:96:1f:1d:39:22:ee:c5:5c:46:35:56:bc:46:5f:
9f:1e:2d:5e:94:b0:a1:61:4a:55:cf:0d:d4:24:f4:40:b5:47:
36:42:a9:41:67:55:fd:9c:e6:1d:53:9b:e4:f2:1c:af:c4:14:
0e:b2:cd:60:76:cf:89:03:1e:1e:23:b0:34:32:e9:a5:35:bd:
95:9a:70:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 14:40:03 2024 by rpki-client on console-fra.rpki-client.org