Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/2frcgqKsrTDcWrBlVgBLQPKMfoc.roa
File: 2frcgqKsrTDcWrBlVgBLQPKMfoc.roa (raw, json)
Hash identifier: pVQ58dPWETtRfE3F/DG404+CdV7tBZrOOme/hBSxoaI=
Subject key identifier: D9:FA:DC:82:A2:AC:AD:30:DC:5A:B0:65:56:00:4B:40:F2:8C:7E:87
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 04FC
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/2frcgqKsrTDcWrBlVgBLQPKMfoc.roa
Signing time: Sat 29 Jun 2024 23:55:03 +0000
ROA not before: Sat 29 Jun 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1276 (0x4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 29 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D9FADC82A2ACAD30DC5AB06556004B40F28C7E87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:66:e7:be:81:ec:ad:b9:26:92:4e:b6:9e:
4a:b4:79:8b:bf:51:da:e2:c1:1c:71:c5:4b:af:d7:
ce:32:1b:39:8e:59:27:bf:d4:17:67:aa:2f:4c:68:
2a:9f:df:69:60:08:21:35:4a:a7:24:1b:02:7b:90:
d1:a4:5d:0a:f2:62:5c:f8:36:87:f2:23:6e:21:70:
32:ca:63:6e:c1:cd:64:e6:f4:3e:f5:7b:d7:d4:bc:
78:f8:d2:2b:0e:b8:90:42:49:16:85:7f:88:37:9b:
e4:ed:36:3a:4b:e5:df:74:23:99:43:a3:f2:6c:54:
fa:ff:bf:06:31:52:98:3d:40:8d:48:78:ec:7a:40:
b1:0f:4f:cd:e4:40:c7:e7:03:83:e8:7d:3e:0c:bc:
41:f2:e1:91:7e:7c:53:43:bb:11:14:32:7a:20:03:
98:c3:f1:93:ab:c0:fc:63:c4:63:ac:9a:29:d8:88:
38:fe:8a:4b:97:f1:cf:10:55:3b:d1:76:a5:b6:a7:
01:45:08:64:44:55:a8:26:74:0d:ad:a0:15:77:53:
fd:ae:23:e7:55:c0:77:ed:07:e0:74:33:6c:f1:6f:
5e:5a:7b:9e:02:ac:d1:72:b5:f7:1c:16:dd:a1:8c:
b5:cf:18:c6:dc:0c:49:06:dc:f1:73:ee:11:bc:39:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FA:DC:82:A2:AC:AD:30:DC:5A:B0:65:56:00:4B:40:F2:8C:7E:87
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/2frcgqKsrTDcWrBlVgBLQPKMfoc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:d1:f4:f3:26:63:4c:ab:55:b3:ef:e2:3e:73:cb:ae:13:cf:
11:2e:19:f1:36:ce:34:b8:f9:8f:66:76:6b:2d:4d:4f:1e:50:
2c:ef:dd:76:91:b0:ff:8b:3b:db:48:40:e7:e4:cd:77:32:0a:
f5:2c:2f:2f:dc:ef:35:cb:49:a6:9c:95:9d:ab:e6:a9:28:ae:
26:d2:d3:25:33:cb:26:52:ab:aa:0e:c5:11:02:be:95:a9:d8:
21:89:25:81:71:36:5e:fd:df:d9:d7:2e:65:38:80:6c:ad:84:
76:2c:91:e4:f4:8e:a7:12:1c:5c:39:bc:99:d5:56:16:8f:1b:
e4:01:cd:c6:a7:ae:51:4d:c7:16:b8:f2:79:3c:b2:57:6c:cf:
8f:3d:b6:fc:39:61:00:b7:2b:2b:2c:df:b7:e7:75:ae:0c:5b:
63:51:8d:7f:bd:d3:f0:d1:6b:64:aa:79:40:5d:8e:c8:58:81:
2d:57:01:eb:57:7d:aa:3e:5d:fa:64:d4:2b:7d:b6:71:9e:04:
34:ee:b8:cb:6f:a2:d5:d8:2e:a4:6b:25:1a:42:dc:fc:a7:90:
35:ad:7a:45:c2:25:04:59:cd:d7:3f:06:32:50:76:93:24:3e:
15:a8:87:96:91:db:91:4c:3d:70:4b:56:99:71:f8:70:d2:73:
69:d0:f5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 05:37:14 2024 by rpki-client on console-fra.rpki-client.org