Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/4LCWIBEoEwCnCSrqHWZSZZA5tEU.roa
File: 4LCWIBEoEwCnCSrqHWZSZZA5tEU.roa (raw, json)
Hash identifier: 5pkKsk2i+8LXF3J4VdoINIuMfOLoH805ZtHZfgd5STA=
Subject key identifier: E0:B0:96:20:11:28:13:00:A7:09:2A:EA:1D:66:52:65:90:39:B4:45
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 092C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4LCWIBEoEwCnCSrqHWZSZZA5tEU.roa
Signing time: Sat 26 Oct 2024 23:55:03 +0000
ROA not before: Sat 26 Oct 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Oct 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2348 (0x92c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 26 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E0B0962011281300A7092AEA1D6652659039B445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:94:e2:45:86:10:ff:5a:49:54:85:5c:8a:
b9:9c:66:8d:69:da:13:40:5b:47:d0:a9:01:06:6e:
79:28:69:9e:ae:cd:9b:0f:70:c7:ab:f0:3f:55:18:
a1:a3:a2:90:42:a6:27:a7:0c:a1:58:a8:7a:5a:85:
ef:4e:3b:b4:d9:bd:ff:34:df:28:8b:08:99:7b:ea:
02:da:f6:51:37:41:f7:c9:e0:e3:31:07:60:3a:32:
4b:d4:23:e4:63:2c:af:33:5c:45:c6:ba:4e:7f:b3:
bf:13:b5:1c:ff:8b:f8:3f:7b:c2:47:fc:08:0f:d4:
82:15:77:f6:05:cf:f6:cb:f5:42:fb:b1:5c:74:17:
df:fe:4f:33:fb:4d:5f:de:86:ff:cd:61:0f:f2:45:
bf:7c:63:50:8a:3a:3a:9c:bb:2e:41:7b:1c:ba:29:
85:5c:5a:73:8d:4e:71:bd:ea:54:90:f2:c0:35:7a:
f3:22:13:06:e8:b2:1c:26:7f:ba:3e:82:66:cf:42:
8b:f7:61:72:03:16:2b:2c:ac:b7:f6:15:a4:60:5c:
38:a7:76:25:4f:cd:1f:1f:f3:bf:15:3d:5f:14:43:
84:c4:ed:5d:70:c5:81:86:79:50:97:ea:b6:2f:c4:
04:fc:64:bf:51:3d:00:30:bc:4c:b9:e2:fb:d9:30:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B0:96:20:11:28:13:00:A7:09:2A:EA:1D:66:52:65:90:39:B4:45
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4LCWIBEoEwCnCSrqHWZSZZA5tEU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ec:25:1b:88:5a:50:d1:b8:d3:69:e7:2a:6d:29:76:47:74:
a2:6c:c2:95:95:76:fb:0d:d5:f8:35:0a:1d:c4:5a:0b:fe:cf:
a2:a2:70:02:3c:e0:a1:82:8b:76:18:f4:2a:e4:d7:db:1e:36:
be:36:70:29:1e:19:28:07:0b:fb:11:c1:da:62:e1:0e:26:a9:
d1:29:43:74:26:17:2a:7a:89:8f:02:3b:92:21:b2:9c:1e:2a:
da:13:83:35:c3:d4:24:97:d1:cc:ad:8c:b7:fe:67:90:bc:e0:
ee:02:7b:62:9e:b1:52:4f:82:e5:1c:95:0c:c6:87:ea:d6:27:
4d:e7:ee:96:90:db:a3:3b:06:40:63:98:a9:42:34:dd:f1:f7:
97:67:5f:8a:77:77:97:50:65:fc:ab:7f:80:ad:8a:a2:ae:47:
8e:c1:02:9d:b9:a9:50:a6:13:50:db:28:32:e5:4c:ae:7d:5d:
b3:2d:9b:4b:f6:82:01:50:c2:37:87:7a:0e:21:76:5b:8d:d3:
1d:40:68:c9:8e:b7:4a:ce:d3:42:59:3f:3d:e8:70:e5:9c:73:
dd:49:c0:ef:39:b7:de:d7:a4:69:25:be:26:cf:ba:ad:01:b4:
45:9a:ec:c2:6b:04:f4:58:89:d1:da:fd:e9:a6:a9:4e:fb:f5:
41:e4:da:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 27 05:15:15 2024 by rpki-client on console-fra.rpki-client.org