Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/4w91udpAZnAyhLkN_hf-CK0k1fQ.roa
File: 4w91udpAZnAyhLkN_hf-CK0k1fQ.roa (raw, json)
Hash identifier: CA8a4uw4G6A+erE2QKny4Ag1nHxlxCcUk1V/r56okYU=
Subject key identifier: E3:0F:75:B9:DA:40:66:70:32:84:B9:0D:FE:17:FE:08:AD:24:D5:F4
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09A4
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4w91udpAZnAyhLkN_hf-CK0k1fQ.roa
Signing time: Sat 09 Nov 2024 07:55:03 +0000
ROA not before: Sat 09 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2468 (0x9a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 9 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E30F75B9DA4066703284B90DFE17FE08AD24D5F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:92:6c:4a:b8:1c:d1:47:8f:41:c7:0b:cf:
2d:db:aa:e5:a5:86:44:66:e8:20:a0:21:71:58:58:
ff:be:cb:a6:6b:76:20:fb:74:b9:58:c0:8d:ba:d5:
a7:a0:46:41:b9:ac:7f:b9:ff:cd:cc:00:0f:04:01:
62:a3:c0:f6:8a:43:55:1c:95:0c:69:31:a2:50:dd:
42:d6:4a:6c:6f:ac:4d:2d:61:59:76:8d:8a:30:bc:
93:e4:be:c3:bb:31:bb:44:f2:39:ef:37:5f:d8:16:
5b:a4:d6:50:d4:a1:fb:d7:26:c5:ae:e6:a8:39:bd:
ea:52:09:57:df:5f:39:37:09:67:9e:6f:b1:e8:85:
90:3b:50:09:19:36:9a:0a:64:8e:6f:72:41:50:6e:
20:8c:02:79:71:32:45:cb:8b:f5:fd:35:13:34:2d:
05:3d:50:b8:0f:4b:da:3d:45:fe:9e:34:0a:5f:5e:
c7:a6:65:54:49:ed:f9:7f:e3:09:38:a7:1d:13:4f:
c7:e5:72:63:6b:f8:7e:cd:e9:1f:0d:b5:ba:cb:46:
b9:a8:5c:9b:7d:4a:72:b0:0c:14:7c:1c:f4:4c:f6:
a8:cf:14:7a:a4:e9:fe:ad:5d:32:2e:f0:e2:fd:2c:
01:1d:70:be:56:b0:4a:d7:49:e2:13:64:3f:06:11:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0F:75:B9:DA:40:66:70:32:84:B9:0D:FE:17:FE:08:AD:24:D5:F4
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4w91udpAZnAyhLkN_hf-CK0k1fQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b1:a5:f9:f1:52:11:fd:9e:da:e5:1e:d9:59:09:35:11:0a:
c0:68:16:98:86:11:38:78:a6:8e:b7:c3:c5:ed:c0:8e:01:e9:
6e:3e:e6:c2:46:ef:cd:e9:0c:c0:da:82:e8:b6:06:37:fe:8f:
59:90:e1:c5:bb:4d:fd:6a:28:87:87:35:6b:25:e4:3f:fa:4d:
e9:f8:b8:d5:ea:5c:6f:4e:22:f9:e7:68:98:08:b7:6e:0c:cf:
a7:75:da:a5:f1:f2:f3:16:30:33:11:e9:b1:6f:98:ee:86:ef:
30:15:a1:25:6b:f6:5d:cc:39:70:e7:c4:03:bb:48:76:c2:25:
49:4f:5f:49:1a:54:3a:d2:1e:90:d4:c3:30:bd:a6:48:04:06:
6c:de:d7:ff:8e:f6:4f:6c:8f:f2:59:44:0c:f7:04:91:46:f8:
8d:0a:3d:16:ff:3d:2f:c1:9c:6a:bc:64:62:9e:6e:d0:5d:f8:
d9:06:15:48:ba:8a:3c:fc:ac:18:6f:2e:b0:54:98:39:74:30:
6a:c6:9d:6b:28:6e:57:48:c4:04:e8:ff:a5:08:84:1b:78:ec:
fc:0e:43:4c:83:f5:6f:10:70:5c:4f:28:46:d5:5e:fe:c4:3b:
e9:4d:53:89:ee:fa:71:a1:5c:64:af:7a:dd:70:6d:dc:c6:fa:
a5:4c:cb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 17:00:38 2024 by rpki-client on console-fra.rpki-client.org