Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/4RR_tLGkHErnIvzSSuiNI260vbc.roa
File: 4RR_tLGkHErnIvzSSuiNI260vbc.roa (raw, json)
Hash identifier: QylrVVlFzT8KWwS3kod6zE/y4BN+MO+zkBfd072i30Y=
Subject key identifier: E1:14:7F:B4:B1:A4:1C:4A:E7:22:FC:D2:4A:E8:8D:23:6E:B4:BD:B7
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 06D0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4RR_tLGkHErnIvzSSuiNI260vbc.roa
Signing time: Tue 20 Aug 2024 23:55:03 +0000
ROA not before: Tue 20 Aug 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744 (0x6d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 20 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E1147FB4B1A41C4AE722FCD24AE88D236EB4BDB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:77:b8:63:f8:ff:e7:0b:c8:4c:65:01:5a:
c6:7b:41:78:bd:7e:be:e8:c5:bf:60:a7:72:0d:fb:
6f:af:46:b1:53:8a:3c:fa:e2:a5:d5:77:f0:47:09:
d2:ad:06:d4:45:73:3a:1a:7f:53:c9:a7:7d:01:80:
67:92:47:22:36:ac:d9:08:9d:0a:69:19:94:4f:de:
d9:95:2d:f7:ea:9a:af:b0:99:87:0b:2d:dd:28:42:
16:66:67:83:f2:c7:16:eb:8f:67:fc:5b:66:8a:63:
eb:ea:2f:c1:d2:d0:5a:ba:5d:65:00:37:df:d3:3a:
1d:bf:cc:11:00:6b:fd:60:d6:75:d3:ba:97:f3:be:
86:62:c1:77:c9:e4:7d:28:6a:58:e5:7e:59:cc:85:
62:92:ef:ae:6b:80:f6:25:60:dd:ff:06:e1:02:ef:
93:91:81:b2:ae:31:5e:c8:f8:2b:20:ae:00:b8:6e:
4b:56:d3:02:26:a6:bd:7c:cd:35:dc:dc:8e:f9:0f:
6a:6e:b1:b2:2d:27:1c:22:cc:77:b3:90:ee:30:b0:
f1:c6:9e:0c:e7:9a:da:15:d7:f3:49:16:9a:d3:5d:
b5:10:69:f1:0e:8b:96:56:27:eb:77:72:a3:95:45:
52:49:61:7f:b7:bd:21:08:14:1e:e1:90:35:86:20:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:14:7F:B4:B1:A4:1C:4A:E7:22:FC:D2:4A:E8:8D:23:6E:B4:BD:B7
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4RR_tLGkHErnIvzSSuiNI260vbc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6c:d4:1e:89:e3:b6:67:f1:77:93:09:3c:f0:0c:f7:63:82:
dd:d5:d8:ea:f4:75:d0:ae:97:ac:8d:0a:af:a8:7b:10:83:3b:
0e:58:ea:83:c8:58:c1:2a:9a:eb:78:c2:f6:79:2d:3d:fc:62:
b5:c8:da:7a:07:30:58:be:1c:14:76:4e:54:75:e4:22:3c:74:
d1:ff:7b:fd:72:99:be:a0:af:92:dc:e8:17:2d:c0:47:89:e3:
83:d3:ab:fe:5e:d2:77:66:72:f5:b3:0f:4f:73:72:c8:56:f5:
de:19:9d:f2:fe:1f:5f:c1:db:e3:b4:87:a9:97:d9:1d:98:95:
60:ee:a7:62:d6:08:12:7b:99:91:04:bc:22:b0:42:1c:2e:a1:
c5:7f:03:6d:5f:39:7e:61:61:62:30:b7:39:ca:8e:05:b5:f0:
6e:87:81:0c:be:18:f7:39:3a:1f:21:c7:95:47:f3:89:d2:5b:
be:04:56:28:ac:f5:c3:5f:95:dc:db:4c:bb:51:61:f3:d1:99:
08:bf:21:6b:7f:9d:53:48:96:3b:b7:cc:70:d3:08:e6:04:46:
d9:f8:ff:0b:f9:b4:39:5b:0c:42:dd:b0:11:a3:a1:c1:6f:38:
96:dd:4f:63:71:db:0b:57:0c:cb:3c:b9:89:6d:ab:80:4a:8a:
32:4a:c8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 05:41:59 2024 by rpki-client on console-ams.rpki-client.org