Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/5G_vJv43pyZBzOqGZI_SFlZSIY0.roa
File: 5G_vJv43pyZBzOqGZI_SFlZSIY0.roa (raw, json)
Hash identifier: AGupV/vo9Ocme0hDZPR2pmvwWQsGerYqkYbZQTVI4NE=
Subject key identifier: E4:6F:EF:26:FE:37:A7:26:41:CC:EA:86:64:8F:D2:16:56:52:21:8D
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 03E8
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/5G_vJv43pyZBzOqGZI_SFlZSIY0.roa
Signing time: Thu 30 May 2024 07:55:05 +0000
ROA not before: Thu 30 May 2024 07:55:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1000 (0x3e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 30 07:55:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E46FEF26FE37A72641CCEA86648FD2165652218D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:df:9c:c1:6e:6e:49:21:3c:3e:d4:11:ff:
89:8c:ce:4b:34:bb:0e:a0:e4:dc:f3:f7:21:db:9f:
7e:13:8b:07:b1:ee:de:c6:99:d9:2d:80:8d:92:a9:
91:4d:27:26:a0:92:66:1c:7f:69:68:c9:99:14:8e:
c1:62:68:d9:45:36:af:0f:11:81:7e:fd:14:5f:a2:
81:30:a9:78:0e:26:d6:3e:f9:5a:6c:c5:de:4e:c4:
74:ef:7b:99:5c:63:37:29:c5:ee:a3:f0:0a:0d:9d:
8f:5c:05:3f:56:79:84:34:63:6e:46:8b:ec:96:ef:
02:fa:dd:0a:fb:2c:e8:49:3d:83:8f:59:a7:79:ea:
81:ea:ec:2c:d9:1e:c7:0d:ec:a1:d0:2d:7f:8e:7e:
a6:7e:7f:f7:5c:15:54:8b:52:cd:d7:d3:f8:b9:89:
37:51:a9:e1:ed:e9:26:a7:d5:e0:c7:20:f9:76:3e:
22:15:05:84:9e:1f:d9:ef:45:ec:bf:37:bd:05:40:
a6:b2:74:f4:08:99:82:e6:8b:99:38:e6:0b:98:b9:
a5:c2:9a:fc:29:83:f7:13:25:0a:38:29:49:bf:66:
fb:fb:37:f8:8f:5d:c8:78:39:ff:69:47:bf:77:44:
22:38:77:ff:e9:4f:2d:c0:cf:f9:64:1f:b9:24:b7:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6F:EF:26:FE:37:A7:26:41:CC:EA:86:64:8F:D2:16:56:52:21:8D
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/5G_vJv43pyZBzOqGZI_SFlZSIY0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3c:6c:e9:03:cd:8b:60:4c:bb:6a:61:10:de:0f:96:64:75:
69:a5:48:7e:18:b3:63:ed:fd:e8:1b:56:69:cc:95:1e:96:7c:
9e:47:cf:2e:f5:28:01:8f:12:fa:5b:fd:3f:d7:04:ed:86:4e:
26:00:e7:58:62:a3:dc:da:fa:8c:ee:a9:62:f1:f4:b4:b2:6c:
3d:6c:31:9b:ea:af:67:c7:99:47:4f:f3:e0:bd:15:05:b4:61:
f7:84:d8:96:e1:7d:04:65:01:29:4b:81:a5:0f:d3:8f:50:aa:
b9:d7:b2:49:33:9a:7d:83:42:a9:a7:91:65:1f:ae:78:b7:a4:
43:5d:d2:29:91:73:40:15:3f:8a:27:38:5b:cf:04:d7:fa:6f:
7d:de:da:89:39:1c:33:84:1f:65:d5:cf:06:68:c6:d3:c6:39:
ec:7a:f9:64:cc:ed:1e:f0:54:57:f3:f1:1d:6b:de:b3:81:cc:
ee:1d:65:a7:c5:4f:3b:50:7b:15:87:52:c1:19:b7:ed:a0:8c:
39:ad:62:af:0d:0b:07:09:74:1d:3e:7a:81:f1:d0:80:2e:7f:
91:e7:7c:14:a3:b2:c6:92:89:2e:9f:6d:fe:5d:02:20:8e:4c:
11:c0:6f:98:fc:ad:79:18:bd:91:4d:b0:c3:31:d5:cb:d5:4d:
16:e0:13:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org