Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/1X-eAH4AAhV32_3kIxZCNGgMnH4.roa
File: 1X-eAH4AAhV32_3kIxZCNGgMnH4.roa (raw, json)
Hash identifier: BYnXIZokLnvEulhlX5z4HC3UZ8kt9E28k5Rypt9F7hk=
Subject key identifier: D5:7F:9E:00:7E:00:02:15:77:DB:FD:E4:23:16:42:34:68:0C:9C:7E
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05AA
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1X-eAH4AAhV32_3kIxZCNGgMnH4.roa
Signing time: Fri 19 Jul 2024 07:55:03 +0000
ROA not before: Fri 19 Jul 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jul 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1450 (0x5aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 19 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D57F9E007E00021577DBFDE423164234680C9C7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:38:a7:2b:ca:2d:aa:cf:79:24:a2:1c:55:
6f:c8:97:a1:52:d3:21:90:3a:45:b1:b8:5c:cc:ba:
d1:66:04:5b:e8:37:28:20:d4:0e:64:b5:e1:52:17:
b4:6f:7a:61:dc:a0:38:a0:95:fd:67:a7:5d:1e:5a:
22:43:81:d6:08:be:2f:d0:ee:63:a1:13:93:37:b3:
23:34:02:6a:a7:e9:08:1f:27:86:3f:5e:9b:7a:ae:
57:91:14:d3:d4:f8:0c:3f:2a:a8:1b:4a:0c:b8:4a:
58:fc:94:17:15:cb:ea:b1:c7:63:d3:f3:c4:62:fa:
22:4a:bb:06:b7:77:be:64:9d:93:18:06:5a:82:34:
ba:be:3a:ea:6d:c4:af:6a:dc:19:be:78:a0:b4:9e:
f8:87:7c:53:b7:15:35:5c:fb:b6:69:48:5c:e4:c4:
e9:b6:e5:dc:bd:c6:33:4c:62:df:50:60:60:cd:be:
66:ff:0e:d8:88:18:ba:81:fd:52:01:f5:f8:b3:c7:
a0:f1:a4:bc:35:44:95:8f:fd:5b:b8:dd:cd:92:66:
09:9f:41:f3:85:71:4f:d5:5b:5f:3c:b7:fd:d8:d6:
08:fc:74:cf:60:96:59:72:cb:9a:3c:b5:2a:e9:83:
a4:df:dc:a4:82:10:23:de:54:83:39:19:93:7e:d6:
9f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7F:9E:00:7E:00:02:15:77:DB:FD:E4:23:16:42:34:68:0C:9C:7E
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1X-eAH4AAhV32_3kIxZCNGgMnH4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:80:97:02:62:ab:36:d1:38:74:3a:0d:cb:de:e6:02:e7:96:
70:0e:b1:0d:b6:85:98:67:1b:18:86:92:44:8c:e6:bf:1c:4c:
88:61:a7:32:d9:cd:06:3a:86:10:03:b3:e3:72:e1:6c:4a:58:
d0:27:4e:6b:b1:1c:33:36:75:d2:b7:2c:1b:f1:0c:ce:68:19:
fa:6a:d6:c2:00:aa:c3:35:dd:5c:c8:0a:de:ed:9a:16:df:d3:
63:67:b1:fa:40:58:49:9a:e4:80:2b:d2:ab:3a:19:89:bb:c4:
37:33:ed:6a:c6:50:64:13:61:6e:5d:3f:12:b7:a6:66:35:72:
c9:2d:6f:9c:a9:b0:c9:a2:86:d4:e9:48:f6:cc:d9:5f:e0:c9:
29:73:03:5c:b2:ac:c7:b0:45:3f:a5:32:31:2e:e3:11:bf:16:
54:9b:12:ae:fb:ec:06:d4:58:06:57:bc:40:94:8c:6b:26:79:
e0:ab:b2:10:f1:8e:fb:88:fb:e1:10:fd:63:6e:54:58:b8:87:
b4:26:ea:ad:05:16:40:8f:c2:27:95:7a:ae:3b:5b:eb:87:44:
e9:a0:66:45:b4:cd:fd:71:40:26:8b:22:c1:13:bf:2c:b0:1d:
8e:18:17:02:2f:28:6e:95:b3:14:1e:3b:9e:d2:76:f9:c0:af:
b9:e4:25:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 19 14:01:59 2024 by rpki-client on console-ams.rpki-client.org