Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/1a1abKW0MZnAX8l2-qIwNFrQiQw.roa
File: 1a1abKW0MZnAX8l2-qIwNFrQiQw.roa (raw, json)
Hash identifier: hn51bEwZSQHmI7rHIsvI78+vmcRVfuN/xoo3rT6Tr3o=
Subject key identifier: D5:AD:5A:6C:A5:B4:31:99:C0:5F:C9:76:FA:A2:30:34:5A:D0:89:0C
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 08A1
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1a1abKW0MZnAX8l2-qIwNFrQiQw.roa
Signing time: Fri 11 Oct 2024 15:55:03 +0000
ROA not before: Fri 11 Oct 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2209 (0x8a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 11 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D5AD5A6CA5B43199C05FC976FAA230345AD0890C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:1f:bf:4c:36:dd:d8:2e:82:8b:3f:38:12:
34:f4:f3:31:69:0a:a1:43:62:70:ae:3a:5a:19:5c:
a2:16:07:28:fa:6b:da:f8:d5:22:81:97:91:b0:ca:
20:c3:ad:83:ce:9b:3a:50:cf:9d:45:77:14:a9:2d:
f9:9a:93:e6:2c:5d:3c:ce:40:41:39:cc:6a:f3:0d:
ce:5b:47:0e:5f:93:8e:09:e3:bf:7b:b7:dc:a3:71:
eb:0a:68:2a:61:5c:b8:ba:e1:1f:49:ae:25:1c:fc:
f3:97:e2:d4:45:0c:08:56:82:3c:01:7a:b1:8a:6c:
89:0f:bd:74:52:9e:4f:b1:e6:86:a5:7f:e4:0a:e8:
3b:f0:5f:82:30:73:3d:ce:4f:04:a0:73:1c:7a:d3:
28:e2:e0:76:eb:99:d3:0f:2a:93:8d:97:44:b3:e9:
7e:15:f3:bb:2c:d2:f2:4a:c1:a1:b4:7a:cf:3a:ce:
42:c0:e2:89:b7:cb:5e:0b:74:2d:c4:a0:c9:14:33:
a6:ff:a6:ef:85:fc:45:85:dc:e3:9c:67:21:81:10:
48:48:3f:6e:b6:5c:86:56:4e:ce:1e:be:9a:4f:0d:
c7:18:64:74:fe:15:1d:db:c8:87:67:76:3e:5e:55:
d7:93:e4:1e:54:b4:01:8b:9b:2f:a0:14:2d:ba:0d:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AD:5A:6C:A5:B4:31:99:C0:5F:C9:76:FA:A2:30:34:5A:D0:89:0C
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1a1abKW0MZnAX8l2-qIwNFrQiQw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
00:73:fa:da:9f:11:69:bf:86:43:2d:5b:7f:dc:a0:b9:3c:b0:
7c:38:09:c4:02:e5:3e:41:b1:2a:bc:c9:12:6f:0a:78:52:69:
7f:6d:fc:94:c3:a4:30:69:f9:89:1e:8f:14:df:64:c0:c1:d3:
d2:25:1f:1b:fe:5d:10:5a:f8:58:c2:62:1b:67:12:17:cc:94:
2f:94:35:b8:48:94:37:06:63:ea:e0:20:47:c5:8e:55:12:7d:
98:16:2b:f6:e9:01:fd:24:33:c3:7b:62:f4:c5:43:e0:91:28:
d5:7f:d6:12:0f:6f:aa:4c:37:cf:f3:2b:e7:9a:e0:50:e7:fb:
31:5c:35:80:c5:0c:62:b0:0a:dd:ee:3f:f6:44:6a:8a:48:7c:
ae:69:00:f0:70:a2:46:c4:76:35:39:35:df:7a:59:fe:48:ec:
c6:79:dc:74:64:e2:11:b2:6e:1c:83:00:ba:53:bf:7e:a2:8e:
40:7d:43:9c:7f:9b:34:cf:63:d2:3f:5d:e9:82:40:96:50:43:
df:a3:88:38:21:de:e6:e8:a8:52:ae:84:93:ef:f5:2c:8c:f8:
73:4b:c4:db:e5:cc:41:85:8e:03:58:a5:39:b9:ce:de:05:f9:
0a:d7:34:5f:80:35:ec:9e:82:b3:6b:8a:d9:0e:73:da:7d:94:
df:24:be:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 21:16:48 2024 by rpki-client on console-fra.rpki-client.org