Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/-ZZkpHqaA-c6VjWr_8Valfgy3Pg.roa
File: -ZZkpHqaA-c6VjWr_8Valfgy3Pg.roa (raw, json)
Hash identifier: EfRitVzJVijDq4gW4nvgeRxSW1/dj+KnPWKm4mWZFfQ=
Subject key identifier: F9:96:64:A4:7A:9A:03:E7:3A:56:35:AB:FF:C5:5A:95:F8:32:DC:F8
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0895
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/-ZZkpHqaA-c6VjWr_8Valfgy3Pg.roa
Signing time: Thu 10 Oct 2024 07:55:03 +0000
ROA not before: Thu 10 Oct 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2197 (0x895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 10 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F99664A47A9A03E73A5635ABFFC55A95F832DCF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:58:ba:d9:35:c8:78:e2:44:7b:df:3d:cd:
29:73:38:1c:91:77:47:66:8b:21:b9:5b:aa:1d:7b:
f8:7a:72:47:74:5e:3e:2e:69:da:4a:62:f8:2e:32:
ab:dd:1a:5e:e3:6e:f7:a4:b7:9f:b5:bb:43:59:bb:
d5:f5:d5:36:1a:5f:1a:f4:12:ab:9b:fe:3e:37:db:
79:d2:23:ee:f0:e8:9d:c6:8c:99:5d:4e:04:6c:8a:
90:22:4d:f1:ac:09:3c:e2:4e:03:83:74:cf:fc:1a:
0e:ff:9c:3c:e3:2b:ad:af:87:99:8f:96:36:f7:12:
00:55:e6:a0:b2:40:6f:ee:3d:31:2f:9c:ba:d5:98:
cc:59:82:42:73:0a:43:fb:d7:23:25:38:c4:1f:09:
9c:08:bf:2d:09:f0:fd:c8:86:a5:7c:47:c6:d0:43:
1d:82:1f:82:e4:18:59:f2:73:95:2a:17:87:c9:db:
e9:f5:d5:6e:25:00:04:9e:c4:0b:91:75:d8:e0:ba:
8f:e0:ce:fd:e7:73:2a:d3:86:54:cc:43:60:1c:34:
0a:fd:f5:8a:2c:8c:38:db:f2:bd:fb:2c:04:bf:c3:
57:3a:cd:18:d8:f5:34:6d:65:be:d6:b9:89:34:a9:
25:b1:48:18:3b:94:90:f7:16:88:b9:11:d3:42:ab:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:96:64:A4:7A:9A:03:E7:3A:56:35:AB:FF:C5:5A:95:F8:32:DC:F8
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/-ZZkpHqaA-c6VjWr_8Valfgy3Pg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1d:bf:71:92:2e:3e:5f:e8:1e:a2:5c:01:6e:07:6b:5b:11:
f5:b6:ab:09:4c:45:3b:1c:00:32:40:05:10:45:79:e3:05:4d:
61:3a:bb:71:62:2e:dd:50:5c:00:69:f0:61:07:0c:c9:e0:00:
b7:54:d5:ff:8b:c0:00:ce:da:ee:0a:5a:4d:5d:7f:e4:41:02:
74:70:25:11:c5:67:10:89:bb:a5:a9:27:6b:70:d1:7c:74:03:
63:24:df:f3:6e:af:63:af:d0:40:0a:23:7d:66:8f:68:58:0a:
c2:92:7f:a9:90:dc:13:99:35:72:20:f3:ab:b0:bf:be:5a:46:
6d:1e:2d:76:22:e1:0d:80:65:45:02:af:c5:e5:a6:d8:4b:65:
c6:87:5c:db:4e:79:66:4e:ed:ae:a5:30:e7:1a:e3:2c:66:1e:
2d:c4:b0:4e:91:52:a8:99:d0:ac:7e:e5:17:96:13:88:fd:09:
01:43:4b:d6:f4:ed:60:b0:95:ef:b3:53:81:95:aa:8c:f9:c5:
8b:37:34:cc:8b:1b:8b:14:67:1f:cb:9e:54:61:81:38:e2:a7:
ea:0e:ee:72:f5:c7:d1:f0:86:0f:d9:9f:d4:62:48:33:3b:a4:
d2:0d:30:fc:7a:a1:14:91:f9:46:01:0e:05:b0:ac:cf:5b:81:
e3:26:ef:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 16:08:14 2024 by rpki-client on console-fra.rpki-client.org