Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/1seP86QyXPeJFrbkjhsr2AvUBQU.roa
File: 1seP86QyXPeJFrbkjhsr2AvUBQU.roa (raw, json)
Hash identifier: UKaxY09tJGk8yuh7tbLZvYViz0tYf+bxjStNLCHi9kk=
Subject key identifier: D6:C7:8F:F3:A4:32:5C:F7:89:16:B6:E4:8E:1B:2B:D8:0B:D4:05:05
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 060A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1seP86QyXPeJFrbkjhsr2AvUBQU.roa
Signing time: Mon 29 Jul 2024 23:55:04 +0000
ROA not before: Mon 29 Jul 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1546 (0x60a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 29 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D6C78FF3A4325CF78916B6E48E1B2BD80BD40505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:ea:47:64:5a:cc:f0:60:8b:8a:49:7b:e5:
20:fb:74:7e:90:9c:d4:7c:5d:49:8e:8d:c7:4e:bd:
c1:b6:1f:7a:8b:65:9c:9c:93:d1:8b:69:d2:a0:97:
38:bd:66:87:3f:9a:20:49:28:05:d4:75:90:b2:16:
59:5f:9a:73:4e:4d:b2:49:f5:81:7c:83:24:ed:9d:
8a:19:da:f3:97:5c:50:ec:87:80:21:b8:b7:b9:36:
91:de:08:3a:18:91:8f:ff:68:0a:36:f4:d2:e8:02:
62:ed:78:17:2c:81:2d:f4:64:7e:c6:cd:7c:7e:1c:
0c:93:5a:2d:8e:27:b0:68:46:e2:97:46:6c:af:87:
50:14:71:fd:f7:dc:f5:76:e2:4d:ee:db:34:38:f1:
05:d3:0c:1a:fd:9b:ec:bd:86:ff:1b:69:3d:4b:bb:
9a:26:85:88:64:e0:0c:88:3f:e1:fd:db:e3:ac:cc:
6a:d2:fb:fa:ab:db:85:37:bd:28:ad:3c:6f:bf:7c:
4b:4c:08:3b:db:b8:72:cf:04:7f:e9:12:ec:1d:39:
7c:77:25:72:8c:b3:e1:09:75:a0:f4:00:7e:5a:cb:
96:88:be:ac:1b:a6:9b:97:f0:0a:32:75:2e:ed:d2:
e3:96:f0:c1:db:71:c1:94:90:d4:b7:ca:3e:f7:2b:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C7:8F:F3:A4:32:5C:F7:89:16:B6:E4:8E:1B:2B:D8:0B:D4:05:05
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1seP86QyXPeJFrbkjhsr2AvUBQU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:40:30:29:1b:e0:bc:86:ac:e3:ac:78:6e:07:75:75:22:d9:
ea:c5:db:0f:3a:36:03:44:01:b8:4b:55:be:e4:aa:ed:d9:b8:
88:f0:d0:66:cb:e2:10:83:21:d0:2f:85:81:32:5e:91:33:7a:
1d:8b:9e:7d:54:93:a8:47:49:c6:3d:7d:71:ea:54:76:73:3e:
9f:34:bd:95:00:0b:9e:1f:e4:81:9a:e3:0e:44:c6:89:db:9c:
9c:46:8d:3f:17:7f:7c:5f:79:62:e2:1a:09:99:14:f7:5e:13:
14:c8:1e:1e:b5:0b:b1:36:67:50:db:5e:e3:a3:ab:71:e9:5f:
a1:d4:b4:80:b7:a0:b7:a4:b1:d1:44:89:93:7f:e0:19:f8:77:
54:d8:a0:bf:83:d0:b9:93:f2:ed:94:dd:d2:a2:fb:af:58:03:
44:e9:59:e7:21:44:2c:cd:84:51:30:a9:49:85:af:5f:a4:98:
5a:d4:f1:cc:f7:c7:12:bf:cc:ef:e6:01:b5:3d:ab:1e:45:85:
17:02:68:3b:2c:4b:f3:2c:5e:08:25:be:62:bd:5f:42:39:e3:
d6:65:3a:67:a5:e3:82:74:1a:64:b6:fd:d9:08:4c:ed:01:07:
3f:26:35:10:32:e4:21:23:c7:f5:64:3f:ee:86:54:b1:6a:5b:
b6:03:c6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 05:31:59 2024 by rpki-client on console-fra.rpki-client.org