Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/2HwttOEUVU3GSN-dCtnnERWzNrU.roa
File: 2HwttOEUVU3GSN-dCtnnERWzNrU.roa (raw, json)
Hash identifier: 12RyPgTHpU2ouc9UQUzjMwu3GmY1gWbLAK5JC1nFJE8=
Subject key identifier: D8:7C:2D:B4:E1:14:55:4D:C6:48:DF:9D:0A:D9:E7:11:15:B3:36:B5
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 06A3
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/2HwttOEUVU3GSN-dCtnnERWzNrU.roa
Signing time: Thu 15 Aug 2024 23:55:03 +0000
ROA not before: Thu 15 Aug 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1699 (0x6a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 15 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D87C2DB4E114554DC648DF9D0AD9E71115B336B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:ca:a5:f1:83:51:dc:66:60:26:82:d5:30:
8e:68:9d:59:ac:4d:e4:7a:f3:03:6c:d3:69:a1:e0:
ee:84:81:2b:81:bc:1d:30:91:04:02:cb:63:75:97:
bd:b9:da:08:2e:82:c7:49:ee:6f:32:5b:0c:6a:58:
fe:92:47:ff:1b:1d:36:79:c1:be:6e:37:4c:5f:53:
3e:f2:44:75:cf:84:f7:11:f6:a2:98:e4:24:2b:69:
38:1a:58:f5:86:1d:32:08:07:b3:97:2b:20:37:aa:
69:cd:f5:11:fc:f7:45:59:3c:58:26:41:82:ad:62:
86:ee:15:a1:d4:4c:fc:93:83:de:c1:cf:e2:61:6f:
80:d9:17:d9:e0:7e:f9:4d:14:58:97:17:e4:27:45:
04:94:63:19:cb:96:6a:25:40:fc:15:2a:a5:ce:75:
ae:d1:7a:99:ef:da:0f:81:01:9b:51:66:1b:f6:66:
19:85:cb:a2:2a:ab:f0:81:1e:07:aa:7e:54:91:d4:
e5:24:f5:ae:d0:7e:50:cd:49:a2:b0:1b:b6:2f:61:
c8:d8:d8:1c:1c:04:3c:0e:95:f3:7d:61:e9:48:69:
ea:48:08:07:c0:29:c9:c0:00:fd:60:0d:05:6e:da:
59:ea:64:78:43:24:75:03:c3:d2:cb:9e:cb:96:cd:
ce:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7C:2D:B4:E1:14:55:4D:C6:48:DF:9D:0A:D9:E7:11:15:B3:36:B5
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/2HwttOEUVU3GSN-dCtnnERWzNrU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:65:17:07:ca:9e:cc:52:cb:20:5d:73:e3:b4:c9:a1:24:94:
04:ad:88:93:80:9b:6b:4b:1d:80:76:af:d9:4a:46:e0:95:89:
74:65:79:e1:d5:73:c8:6e:c5:40:81:dd:c1:bf:a9:e7:2b:1e:
9b:6b:c9:1c:3b:f5:b1:66:00:79:56:17:3d:3e:dc:83:59:7b:
88:a9:5c:bc:ad:9f:44:e9:0e:79:2c:ae:8d:26:cb:db:f6:1e:
f5:e9:da:0c:70:c7:61:c8:e1:09:37:d7:d9:2a:2c:72:53:78:
ee:70:e3:1c:c8:1f:ff:00:d6:a4:da:8b:93:a6:19:3e:13:a3:
e1:d7:60:13:de:e8:35:04:08:dc:78:34:37:ae:2a:f1:1f:86:
c7:f5:28:f4:6e:23:44:a8:44:f5:ba:48:55:15:20:9a:4a:d1:
1b:e5:ea:2b:27:a4:28:1c:48:3f:f1:df:53:d9:12:cd:0d:3e:
93:d1:5e:b3:1b:92:a5:93:ad:e4:79:35:11:79:50:28:d7:bd:
d3:d5:1d:14:aa:94:5b:49:9e:83:68:8f:73:58:da:23:8c:e7:
93:30:30:c9:fb:e3:34:71:af:3e:d8:ea:2b:c9:b1:28:92:a1:
f7:2f:c8:33:ca:4f:ea:b4:93:57:dd:e3:8f:20:7f:f7:b6:ac:
3a:b1:19:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 05:22:42 2024 by rpki-client on console-fra.rpki-client.org