Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/3eNigdOa-NfCHAi4bwmgZl-n7dc.roa
File: 3eNigdOa-NfCHAi4bwmgZl-n7dc.roa (raw, json)
Hash identifier: He9sigdgzBawWvQKQNJ598COpAX4ZAqujXwp3pzPYsI=
Subject key identifier: DD:E3:62:81:D3:9A:F8:D7:C2:1C:08:B8:6F:09:A0:66:5F:A7:ED:D7
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05F5
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/3eNigdOa-NfCHAi4bwmgZl-n7dc.roa
Signing time: Sat 27 Jul 2024 15:55:03 +0000
ROA not before: Sat 27 Jul 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jul 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525 (0x5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 27 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=DDE36281D39AF8D7C21C08B86F09A0665FA7EDD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:90:ad:5f:5d:de:4c:3e:19:fb:4a:d6:13:
70:2c:6e:86:1a:18:ff:7b:d5:02:1f:03:5c:db:69:
6d:c2:be:20:28:b1:1d:7d:ce:1b:6b:35:d3:74:a2:
1d:85:9b:2f:37:0f:a4:a3:fe:d4:bb:d7:71:d2:69:
a3:7f:38:02:a4:21:34:d0:3d:f5:05:0a:98:56:4b:
49:68:4a:84:a1:6d:25:48:ad:67:94:e3:50:dc:04:
0c:e6:9c:ac:0a:93:5c:ee:93:72:17:e2:8e:21:5a:
df:15:e6:18:08:7b:29:a6:cb:0f:68:df:7d:4c:bf:
f4:84:a7:c0:6c:0b:c7:cc:1f:f9:61:04:4d:70:25:
e1:62:d6:61:f4:42:a7:9c:fc:09:5e:79:0f:5b:99:
44:d0:33:30:48:66:c0:42:c6:ca:23:e2:57:2b:e1:
9d:a0:e4:da:2c:bb:ec:db:32:e2:3b:89:63:f3:46:
ef:ea:cf:92:c1:d8:24:02:4e:ba:8a:59:18:c3:42:
a1:ea:ab:9d:ba:a0:4c:65:64:cc:89:0a:17:82:32:
f5:79:ee:44:63:54:bb:99:3a:4d:36:fc:f3:de:9a:
67:9c:f5:0e:02:ff:ff:16:89:ff:e9:65:84:c4:db:
e7:83:e2:94:45:aa:74:54:df:8d:65:31:46:1c:df:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E3:62:81:D3:9A:F8:D7:C2:1C:08:B8:6F:09:A0:66:5F:A7:ED:D7
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/3eNigdOa-NfCHAi4bwmgZl-n7dc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
99:9e:ac:2c:1a:e9:be:cd:c8:07:3f:ff:11:de:cd:6d:bf:1c:
f1:e0:7f:85:99:75:c5:3f:b9:d0:c0:94:0c:7a:e8:f8:05:73:
10:84:1f:15:ca:00:de:a2:c8:7f:d5:ff:a4:1f:29:63:81:d7:
3d:8b:19:35:a8:58:b4:9e:90:e0:26:ad:1e:8a:4d:ad:28:6c:
c6:77:c7:ab:07:98:b8:c3:3c:4b:58:39:ec:17:78:a0:46:90:
82:c7:11:b5:30:20:da:fa:e6:3c:5a:6e:b4:b6:29:e6:cb:78:
5d:95:c8:71:70:5e:05:0f:a2:6d:56:bb:e7:cc:80:42:12:b2:
80:9d:87:b4:cd:97:00:95:ad:d3:0a:63:c3:35:ab:15:f6:50:
d7:4f:60:7b:d6:f3:b9:d2:7e:b7:d6:63:eb:10:9b:9d:f7:63:
49:90:a1:9b:8f:4b:06:46:31:83:80:0b:73:49:5e:d9:20:33:
79:1e:c5:93:61:41:fc:69:3c:ff:7f:19:ae:8d:96:bd:10:e5:
31:1d:0a:c9:3c:8a:59:0f:c3:99:2d:89:fc:9b:9d:e6:96:d9:
97:2c:c0:9b:4b:16:12:34:9c:50:c7:9c:5b:dc:13:7e:17:99:
67:78:14:13:9b:46:40:6c:30:c1:57:31:8a:01:28:d5:c7:15:
db:7d:43:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 21:37:06 2024 by rpki-client on console-ams.rpki-client.org