Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/1QPbtZhawokSTjhvzTDv_rab78s.roa
File: 1QPbtZhawokSTjhvzTDv_rab78s.roa (raw, json)
Hash identifier: PO1OMsUuMqcb2/Mum4aDwpg4u0U1VOhTX1kTsz7FnPs=
Subject key identifier: D5:03:DB:B5:98:5A:C2:89:12:4E:38:6F:CD:30:EF:FE:B6:9B:EF:CB
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05CE
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1QPbtZhawokSTjhvzTDv_rab78s.roa
Signing time: Tue 23 Jul 2024 07:55:03 +0000
ROA not before: Tue 23 Jul 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1486 (0x5ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 23 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D503DBB5985AC289124E386FCD30EFFEB69BEFCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:84:61:a1:f3:47:0b:f1:0c:16:6c:11:b7:
2d:f3:82:4e:82:96:b2:a3:89:fc:78:63:4a:75:1a:
c8:10:c5:de:dd:7d:85:4e:62:ea:ed:23:43:48:14:
3e:9f:7f:8f:19:68:e5:17:01:0e:c6:b6:4b:e7:94:
e3:5c:79:ec:df:c5:29:fd:3d:ec:04:be:3a:be:09:
77:ae:e5:55:e3:4d:ca:99:38:42:c7:f5:bf:26:d4:
d9:aa:43:a1:1c:bc:46:e8:63:67:c8:7e:dc:4e:d8:
99:07:fe:85:0f:64:81:fb:b8:9c:04:fe:94:69:9b:
62:a4:04:9b:7f:9a:2e:bc:05:50:be:d4:08:e7:a6:
00:5f:db:39:7c:74:63:7d:8c:b6:76:36:b1:fa:3a:
06:0f:8a:03:5d:fc:f8:4c:26:4e:78:00:de:c4:56:
95:69:7b:66:89:db:12:5a:61:f8:97:48:86:aa:16:
c0:2b:90:61:47:00:fe:63:22:cc:cf:65:ba:3d:49:
c3:79:4a:9d:92:71:8c:ae:48:20:b1:12:d7:2c:92:
24:ea:e0:2f:d1:18:ee:78:00:a6:1a:1e:e9:32:c0:
90:9b:6b:c6:fd:e7:12:f4:48:04:1d:42:6b:00:a4:
c6:47:6f:89:12:63:df:62:a1:ef:82:f7:4f:bd:8f:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:03:DB:B5:98:5A:C2:89:12:4E:38:6F:CD:30:EF:FE:B6:9B:EF:CB
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1QPbtZhawokSTjhvzTDv_rab78s.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
38:46:85:60:70:b7:7a:22:6a:e9:ac:db:72:43:57:be:16:b2:
1e:1b:8d:d9:a1:3c:a8:9e:6e:7a:c2:b8:c3:b3:42:c8:8f:33:
0a:e5:7b:11:8b:a1:d5:02:44:b5:15:3c:f7:e2:8a:ef:5c:ba:
46:6a:8c:c1:0f:0d:20:40:69:3e:99:e6:57:b1:22:3e:ab:79:
e6:2b:c3:76:69:21:21:51:07:02:fe:29:9c:d4:58:a9:c1:03:
eb:a0:7c:fb:66:d1:25:5e:bc:c7:7c:f8:9b:0d:70:8a:fc:6c:
04:15:c9:66:0e:d8:4b:70:3e:d1:11:13:45:d7:c6:70:2e:e8:
a4:48:f3:ef:61:2c:c1:5b:f3:7d:29:90:48:60:e3:ed:ce:6c:
10:58:e4:43:34:81:f6:e3:a9:8f:c9:0f:95:44:ab:ae:30:40:
89:8e:e8:66:2c:38:94:a7:86:07:09:b2:97:c5:a5:26:b5:91:
d7:73:6a:c8:6d:61:83:c5:b8:81:f5:dc:33:c2:97:35:ff:2b:
59:00:44:1c:08:a7:7e:e3:0f:0b:03:3a:2d:45:5d:79:1a:c0:
1e:05:04:7a:34:d8:33:5b:d7:11:37:54:00:17:03:ee:ff:9d:
59:ee:0b:5f:f2:a6:5e:66:e6:73:76:19:80:e6:33:6a:87:ba:
83:84:8c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 14:46:31 2024 by rpki-client on console-ams.rpki-client.org