Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/1bTS7zz2rrdnUwYnxQpISRcZ7xY.roa
File: 1bTS7zz2rrdnUwYnxQpISRcZ7xY.roa (raw, json)
Hash identifier: cLZdwUhdv1pGgYqmRM+OzCxfNWFG+kvtOGUQ5pr6ZBA=
Subject key identifier: D5:B4:D2:EF:3C:F6:AE:B7:67:53:06:27:C5:0A:48:49:17:19:EF:16
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 08DD
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1bTS7zz2rrdnUwYnxQpISRcZ7xY.roa
Signing time: Fri 18 Oct 2024 07:55:03 +0000
ROA not before: Fri 18 Oct 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Oct 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2269 (0x8dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 18 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D5B4D2EF3CF6AEB767530627C50A48491719EF16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:a3:cb:37:f9:3a:61:40:99:3e:dc:82:8e:
47:b1:ee:fa:97:4e:ea:59:5f:44:77:f6:40:cc:10:
65:a9:0f:e7:ff:c9:be:ea:ff:5a:32:4c:99:9b:ac:
45:92:5c:3f:8f:f0:46:01:b1:07:4a:07:4e:06:b7:
3b:37:80:0c:99:10:4d:79:6e:7f:c8:27:21:9c:e8:
ef:30:a5:05:c5:4d:e1:d1:e7:f1:82:a5:7e:85:36:
37:28:9d:80:76:c6:f9:ce:00:8d:0b:26:af:9f:4c:
70:6a:1e:61:f4:e2:b9:f8:43:34:3e:ff:70:f8:6b:
14:f8:f7:16:e8:61:67:0b:5f:51:2e:1f:fc:a3:66:
a2:93:c3:c1:04:fb:91:42:9b:e3:bc:95:a3:4f:99:
1d:70:73:d2:07:4f:4c:9e:d5:72:5e:73:fe:9d:3a:
d5:9b:e8:9f:b4:8c:14:2a:60:12:9c:ea:b3:33:fb:
ab:d1:ba:80:6d:7d:c7:35:dc:ba:a0:95:44:fc:ce:
53:8c:49:11:57:de:91:ae:cc:fc:31:6b:01:b7:2b:
b3:cc:27:40:87:9b:e8:b4:6e:f2:a0:bf:5f:f2:a6:
b6:f5:74:06:26:84:bc:47:e1:ee:10:a0:c5:b3:7c:
57:52:fe:49:4b:59:7e:27:e1:b2:38:ac:b3:61:fe:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B4:D2:EF:3C:F6:AE:B7:67:53:06:27:C5:0A:48:49:17:19:EF:16
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1bTS7zz2rrdnUwYnxQpISRcZ7xY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:e4:75:19:48:91:22:79:93:84:fd:70:8c:76:c6:8f:61:f0:
3b:24:80:1e:6f:ba:fc:09:68:ed:c8:1f:f5:c3:51:00:8b:e7:
fd:b1:a6:30:db:4b:12:75:55:89:a7:2b:c2:1e:2f:e7:ee:b4:
d0:3a:25:73:cb:a2:50:ad:17:1b:dc:fc:63:65:06:b0:60:6e:
7c:53:f2:28:de:c8:8b:f9:6e:97:bf:bb:34:96:99:73:c5:cb:
59:d7:3b:49:04:46:b8:07:3c:03:14:67:a2:2f:17:c1:59:30:
cf:a6:6d:30:1a:af:eb:63:f1:a1:ca:f9:53:1a:20:1a:ac:63:
39:47:2f:4c:db:b0:36:e8:e7:02:f5:20:1e:82:3c:da:47:9a:
4a:f9:53:36:5b:b9:b2:32:7b:cf:8b:83:b1:cc:00:6b:39:f5:
8c:04:c0:18:80:ce:14:b5:92:5b:73:63:7e:c8:41:35:c2:29:
fe:0c:9a:d9:81:70:3c:28:b1:6c:73:15:b7:f5:1b:db:ea:36:
5c:0b:b0:08:9f:7f:6f:81:00:0b:70:49:82:96:02:ad:44:23:
31:56:8f:24:a0:8f:bc:a1:3c:35:f0:b2:bf:f8:0c:12:9a:3f:
fe:8c:f2:56:a5:03:27:58:a7:38:de:1c:a5:ed:0b:6a:d9:70:
43:e7:71:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 13:45:18 2024 by rpki-client on console-fra.rpki-client.org