Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/4ST495jHz2LGFG_W-_2HCcQcGGg.roa
File: 4ST495jHz2LGFG_W-_2HCcQcGGg.roa (raw, json)
Hash identifier: S9alf9XTeAqWDeskMV7AD6wsjCeq3jl0XC0omt1vecc=
Subject key identifier: E1:24:F8:F7:98:C7:CF:62:C6:14:6F:D6:FB:FD:87:09:C4:1C:18:68
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05C8
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4ST495jHz2LGFG_W-_2HCcQcGGg.roa
Signing time: Mon 22 Jul 2024 15:55:05 +0000
ROA not before: Mon 22 Jul 2024 15:55:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1480 (0x5c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 22 15:55:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E124F8F798C7CF62C6146FD6FBFD8709C41C1868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:da:58:86:fd:6d:71:d4:8a:e4:e9:88:67:9a:
8a:1a:62:f4:a4:80:d7:b7:b6:a3:08:21:4e:ac:0e:
3c:cc:37:10:d0:a6:2c:2b:8e:05:fd:fc:8a:56:b0:
8c:57:87:14:c5:61:e3:18:c3:7e:f1:f2:d1:ab:3c:
53:ab:da:37:c5:5c:01:e3:83:b1:db:6b:9b:a1:f2:
e8:98:da:e3:58:49:90:95:8f:5b:5a:10:04:84:ce:
3d:bb:6a:dd:c3:c8:d6:15:61:97:f5:9a:7d:e4:55:
e8:44:a8:a6:f9:d8:15:79:5c:c9:7f:2e:e4:ff:9f:
62:05:1a:f1:38:eb:50:7a:2a:bd:7b:77:3d:ab:49:
83:64:b2:a7:4d:89:b2:79:ea:61:87:97:39:68:92:
58:1e:0e:bb:3f:50:78:e5:d5:c7:ac:31:62:7d:07:
82:5c:aa:ae:7f:86:a0:fb:68:ab:07:85:32:11:a7:
b8:cf:e7:dc:68:b8:a2:75:96:d4:af:ce:1c:a6:4b:
3e:c5:aa:21:48:54:9a:8c:e9:b3:a2:2d:b6:58:c8:
5e:df:13:50:4c:49:89:b6:cc:34:25:3c:6f:c7:44:
01:5b:1e:d8:62:3e:38:fc:05:4e:e0:00:02:3e:21:
ce:67:c0:91:e2:9b:0c:c0:2c:12:7d:f9:65:ec:e3:
10:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:24:F8:F7:98:C7:CF:62:C6:14:6F:D6:FB:FD:87:09:C4:1C:18:68
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4ST495jHz2LGFG_W-_2HCcQcGGg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:ac:bc:ae:49:15:41:eb:44:6e:77:ac:d7:c8:5d:1a:5e:01:
59:94:1b:db:6a:80:94:ae:9e:48:53:5c:94:ea:f6:7e:0d:7e:
88:e8:9f:8b:3d:17:9d:6d:de:22:c3:8d:54:fa:d8:ab:50:fd:
be:cb:71:d6:67:d4:c0:93:7f:58:2b:35:cc:e4:f2:4d:d8:12:
c0:03:fe:da:cc:b4:3b:9f:9b:f7:91:f5:83:97:13:80:54:d1:
f3:1c:df:4e:ba:99:0b:b8:6e:e8:54:da:14:10:29:0c:6b:8f:
46:b7:32:45:ca:ac:58:9f:13:4e:7c:ed:28:c4:53:cb:a5:02:
36:18:5d:b5:17:fc:3b:1f:5c:3b:92:6f:89:f7:b2:e8:7d:62:
5f:86:fb:0e:8f:96:f2:33:0b:4a:05:83:2e:75:b4:a5:e1:93:
67:11:f7:69:2d:24:b2:45:e9:95:fe:ab:96:17:63:99:8f:a8:
7f:5e:f3:8f:01:3f:ec:2c:0a:53:36:56:2e:1e:cf:17:82:1a:
c7:35:56:ef:90:3c:84:f4:27:a4:87:74:f2:5d:e1:af:b0:df:
91:ed:d4:d3:9e:56:34:16:a1:29:ae:7c:74:86:ff:ec:12:82:
a6:4f:b2:5e:2b:ce:c8:16:1d:aa:57:c2:e7:07:db:29:33:51:
53:6d:88:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 21:47:39 2024 by rpki-client on console-ams.rpki-client.org