Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/1M7VANKDC6NO3NmouzarjhgaSE8.roa
File: 1M7VANKDC6NO3NmouzarjhgaSE8.roa (raw, json)
Hash identifier: PeEAZy71/zcQZBUvlpp1wXgk9/trdGzmcO1MyyrvKPA=
Subject key identifier: D4:CE:D5:00:D2:83:0B:A3:4E:DC:D9:A8:BB:36:AB:8E:18:1A:48:4F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0202
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1M7VANKDC6NO3NmouzarjhgaSE8.roa
Signing time: Sat 06 Apr 2024 07:55:03 +0000
ROA not before: Sat 06 Apr 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 6 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D4CED500D2830BA34EDCD9A8BB36AB8E181A484F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:a4:a7:b8:12:6a:26:f7:c3:5d:ef:1e:64:
ed:31:96:c8:06:31:48:3f:96:59:56:9c:8c:99:26:
91:96:83:97:11:c1:c5:55:25:7a:c9:70:5b:11:7d:
b3:e2:da:3e:10:ad:e3:e1:aa:93:5c:31:af:1c:e9:
13:37:f7:79:0c:e8:83:cd:42:86:94:bd:c1:8a:bd:
1b:69:86:75:3b:55:43:1c:89:36:15:95:79:77:72:
db:84:47:b6:de:00:3f:07:14:5e:82:70:ea:bd:ac:
71:70:bc:7c:b0:64:02:64:12:b5:35:70:81:b4:b0:
f1:6b:0b:2d:d6:4a:88:5d:3c:43:fb:20:cb:9e:a0:
b6:15:6e:d8:70:a4:d9:9b:81:d5:38:8b:ce:7a:f6:
93:92:22:f6:68:be:c7:85:4d:f1:1b:8e:09:d0:3a:
e7:5e:dd:2c:7e:a4:37:77:e1:6c:d3:27:12:6f:aa:
f1:57:30:36:b3:e5:c0:4d:d7:52:dd:ad:0b:3f:fe:
3f:10:e8:67:95:ed:a8:e7:c3:de:f7:a9:9b:32:7b:
d6:2b:ff:d1:9b:82:05:8e:3d:09:15:6a:04:79:7a:
fb:7c:2f:e1:ed:56:70:e1:e1:61:21:12:96:16:48:
56:bc:bb:85:27:d2:68:ac:3d:cc:17:86:29:fd:dc:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CE:D5:00:D2:83:0B:A3:4E:DC:D9:A8:BB:36:AB:8E:18:1A:48:4F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1M7VANKDC6NO3NmouzarjhgaSE8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
75:58:57:a9:60:5d:17:8b:20:76:53:6d:a7:b8:8a:4e:0d:fb:
a8:3f:a5:9b:c7:13:f4:4e:32:9c:7d:7a:fe:f3:1a:39:07:8e:
4f:31:62:54:28:a7:cb:77:3b:0b:65:82:a4:b1:9a:c5:90:dc:
14:86:40:fd:84:91:42:6c:2a:8f:aa:2d:e9:cd:d6:65:49:00:
68:76:f8:ba:7e:46:66:83:ae:36:20:87:f0:d4:44:9a:4b:1e:
c8:26:cc:00:0f:f3:0c:d7:f9:86:1c:00:51:8c:a1:e5:18:fc:
0e:b6:3f:4d:7d:9b:93:cc:62:d6:79:9b:55:c2:69:16:58:22:
20:b1:a7:b1:72:53:b4:a4:73:df:e2:64:d9:40:55:34:75:73:
02:7b:a1:f8:c5:d4:e6:08:d8:ab:51:16:4b:ab:70:65:bb:9a:
94:a5:75:1b:c3:e5:d1:73:4f:b2:54:c0:c4:7a:08:84:cb:33:
5a:db:7c:bf:df:51:03:88:5d:3d:56:f2:16:23:3b:2d:25:13:
53:d5:ea:b9:94:89:f7:bc:bf:18:e7:9f:2d:2f:a1:b1:9f:cf:
28:16:06:12:a8:d9:f8:bb:c3:22:95:c9:c0:47:62:4c:59:86:
98:b9:1f:22:d5:3b:a3:a0:aa:53:9f:e8:f4:15:6c:82:fa:8d:
2e:37:27:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org