Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/0Vf6LxKQMJQHWeP_QF3m66upGd8.roa
File: 0Vf6LxKQMJQHWeP_QF3m66upGd8.roa (raw, json)
Hash identifier: vER1nApoGbmznA2cSuNVyqBFWC72qxobF+dP53AOVwg=
Subject key identifier: D1:57:FA:2F:12:90:30:94:07:59:E3:FF:40:5D:E6:EB:AB:A9:19:DF
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0547
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0Vf6LxKQMJQHWeP_QF3m66upGd8.roa
Signing time: Mon 08 Jul 2024 07:55:03 +0000
ROA not before: Mon 08 Jul 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1351 (0x547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 8 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D157FA2F129030940759E3FF405DE6EBABA919DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:a7:65:dc:83:34:5d:e8:b1:2a:78:1e:92:
58:ef:11:85:7d:60:e3:82:27:e5:87:f4:c6:42:d0:
57:1b:95:9a:37:ca:78:f1:b3:ca:30:9d:a4:b4:f2:
e9:1c:cb:fc:d0:2a:53:30:b3:0b:2f:66:bd:44:75:
50:a2:af:a6:e1:dd:fc:08:e7:01:9e:17:38:4e:47:
7a:47:46:1a:8c:55:6f:94:49:41:59:5e:63:4d:3f:
ab:cf:ff:57:4b:5f:07:32:87:7f:b3:6b:45:5a:f1:
68:fc:98:20:b6:2e:e2:0c:36:44:b8:7e:c7:d6:07:
40:d4:65:37:ee:8d:f7:6c:a6:da:5b:cb:7a:cd:9f:
e5:83:c1:65:d6:9c:20:e0:02:1f:e3:05:d7:c2:14:
86:ba:cb:ba:eb:e4:8d:fc:89:33:2f:ec:fb:1b:d1:
69:55:7b:5d:1f:d8:6c:45:01:e3:b4:99:ec:5e:c0:
c2:99:df:e9:34:8e:5d:6c:f8:da:44:3b:04:f1:3c:
d3:98:7b:dc:71:c2:b2:e2:8c:4c:96:1a:44:16:b3:
d9:b1:99:00:f6:f2:e9:9b:a9:c7:8f:0e:32:ea:98:
6a:7b:17:98:dc:16:58:a3:59:8a:a4:ce:e8:18:34:
8d:51:5b:66:32:a8:c0:e2:47:ce:39:86:f3:f8:a3:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:57:FA:2F:12:90:30:94:07:59:E3:FF:40:5D:E6:EB:AB:A9:19:DF
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0Vf6LxKQMJQHWeP_QF3m66upGd8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
20:70:c2:13:17:c7:5c:e2:92:08:73:b5:35:d6:67:97:d4:55:
56:db:8c:00:d1:84:b4:48:e0:c9:e8:9d:d3:97:b6:20:29:ac:
b7:68:0e:ef:b7:99:73:e6:8a:cd:ae:01:5f:b7:19:7a:d3:d6:
a8:41:13:70:89:ea:ad:d9:d5:c2:c9:3c:9e:21:d3:d7:67:9b:
92:a0:a4:79:b8:5d:11:40:71:d7:39:3d:9e:9b:75:68:f6:e4:
2f:cb:2f:1c:a2:50:e0:e5:ab:7b:9f:7c:33:1b:6a:64:d7:5d:
8a:a5:2b:0d:2b:27:bc:60:e9:a5:51:3d:1f:da:8e:94:f6:68:
31:94:dc:c9:53:69:1f:d3:e2:85:21:b0:4f:31:97:8a:64:4a:
c0:cd:4c:88:19:b7:3d:19:dc:e5:89:a5:00:f4:29:83:67:cc:
db:0d:f0:a0:c4:fd:c0:bf:4e:0d:72:b7:b1:0f:eb:f1:11:49:
51:e8:40:41:9e:d5:20:19:1a:d2:18:2e:99:bb:cb:76:96:56:
28:62:ea:e2:ad:40:27:58:98:3b:81:26:3b:a8:b2:6d:cd:46:
27:b8:10:f0:6e:86:dd:cd:4b:e4:4d:cd:68:66:6c:75:17:2f:
ad:88:5e:ce:32:6c:75:cd:c2:18:1d:ab:c8:c4:b4:25:7d:c9:
2c:f2:11:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 14:37:22 2024 by rpki-client on console-fra.rpki-client.org