Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/0p9kX8V47ebhX1RPAZsh6L-REEg.roa
File: 0p9kX8V47ebhX1RPAZsh6L-REEg.roa (raw, json)
Hash identifier: E38MJTJ4ElqmeC7LW4JgqFPz3P45LLgqMVi+YfRtdWU=
Subject key identifier: D2:9F:64:5F:C5:78:ED:E6:E1:5F:54:4F:01:9B:21:E8:BF:91:10:48
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0917
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0p9kX8V47ebhX1RPAZsh6L-REEg.roa
Signing time: Thu 24 Oct 2024 15:55:03 +0000
ROA not before: Thu 24 Oct 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2327 (0x917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 24 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D29F645FC578EDE6E15F544F019B21E8BF911048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:12:1d:76:da:b6:1f:3f:17:56:c4:c5:82:
2a:02:a4:57:c7:12:66:fa:5e:4d:bd:af:68:04:4f:
d0:90:c4:6e:0d:30:ba:76:6d:97:f1:6b:79:58:70:
da:e4:43:3e:7b:12:ec:3b:5a:3b:5e:c6:87:c3:39:
e3:d2:e0:e4:8d:13:c1:20:df:7b:5b:46:d3:0a:e7:
36:3a:32:7c:f3:84:9c:58:b9:b3:f3:97:97:34:96:
52:76:b3:86:fe:c5:58:34:41:a7:3c:0f:02:ee:49:
76:19:57:90:0e:cc:1c:1f:a0:e0:da:01:5e:40:8e:
7b:85:71:98:18:ca:d2:85:f1:b7:6d:18:5a:36:9f:
5b:bd:7d:f2:e2:9d:ff:66:6d:6b:a8:3a:7b:d6:08:
ec:a9:5c:53:b5:ea:01:e4:47:d9:8f:da:1c:86:8b:
ea:1b:d8:3a:76:02:81:1a:6c:09:1f:79:2f:14:72:
69:30:39:47:79:3a:02:14:64:88:b3:de:1d:54:cd:
88:d8:c5:f3:4e:fa:31:e6:1d:5e:62:3c:7e:63:42:
4d:42:41:0c:36:ef:29:a6:f4:74:5d:ae:6e:df:f6:
55:35:ac:81:0e:ee:dc:de:d4:04:34:3b:01:95:07:
a6:7f:dc:20:7d:a4:76:00:34:e5:7c:0e:b7:02:d5:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9F:64:5F:C5:78:ED:E6:E1:5F:54:4F:01:9B:21:E8:BF:91:10:48
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0p9kX8V47ebhX1RPAZsh6L-REEg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:9a:cc:55:8d:40:07:b4:ef:23:c3:8b:79:75:f3:37:11:ab:
32:fb:40:d0:6e:cb:48:a3:03:12:37:d2:86:7c:27:b0:04:70:
55:b9:46:c9:8c:67:95:4f:58:00:98:3c:ce:f1:a4:7e:e2:71:
af:74:d7:3e:77:b6:06:e1:e7:8c:91:f0:ec:7d:8f:76:6c:fd:
69:41:ba:af:79:d3:d1:06:eb:58:c7:a3:0d:b2:9d:78:f6:fa:
d4:f1:2f:d8:cd:12:39:56:ff:b6:1b:c1:8e:ba:63:d4:25:b3:
d9:28:1d:68:60:d1:64:8e:aa:8e:75:5c:b5:38:8b:4a:d3:84:
e6:07:19:21:9c:8b:78:b1:77:b1:37:1a:c6:50:07:cc:cd:77:
c5:9d:d0:e5:e7:42:08:2a:93:4d:f2:56:47:e7:eb:1c:59:0a:
fa:ff:ae:7f:91:76:a8:47:c2:74:c6:94:ad:b9:f1:1d:a6:a6:
92:8a:ac:c8:bd:61:3a:ad:0a:68:a7:95:7e:cd:57:1a:72:cb:
6c:23:13:98:39:a7:bd:96:ec:07:bc:cb:70:5d:94:a9:64:fb:
85:37:09:15:b8:b0:fd:59:70:aa:56:8f:bc:c2:b1:59:8f:f9:
6a:88:40:5c:13:39:2e:9a:2a:24:4f:64:35:23:f8:16:ec:d3:
25:3a:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 22:39:05 2024 by rpki-client on console-fra.rpki-client.org