Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/5JmwtdclyOHIsm3T7uqxsxMLvvU.roa
File: 5JmwtdclyOHIsm3T7uqxsxMLvvU.roa (raw, json)
Hash identifier: UuJZFSTc051BKSy91224Ke86ocuAbCoJJlUmwhWuZAI=
Subject key identifier: E4:99:B0:B5:D7:25:C8:E1:C8:B2:6D:D3:EE:EA:B1:B3:13:0B:BE:F5
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 033A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/5JmwtdclyOHIsm3T7uqxsxMLvvU.roa
Signing time: Fri 10 May 2024 23:55:03 +0000
ROA not before: Fri 10 May 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 May 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 826 (0x33a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 10 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E499B0B5D725C8E1C8B26DD3EEEAB1B3130BBEF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:ef:1f:38:d9:80:b1:30:db:4c:0e:56:10:
0a:1d:96:59:cb:d8:20:c8:e2:a8:5e:2e:8f:f0:60:
64:7a:5c:43:f4:a2:ac:f0:67:04:4f:e8:f2:bf:b1:
6b:4f:ae:14:de:63:21:2a:e9:3f:dc:ba:10:5f:28:
46:61:42:78:5a:05:6d:84:64:d9:fc:8e:95:b3:18:
28:7c:e5:74:35:b1:88:a6:39:f0:eb:bc:31:3b:97:
bc:14:31:0e:2d:77:5a:cb:25:47:bf:81:a3:e8:a3:
93:e2:ef:c9:97:23:db:f8:56:72:42:b8:4f:13:31:
31:7a:78:5d:60:5f:90:2c:9e:e5:21:04:57:5b:fb:
6c:b8:f7:1d:d9:40:c3:74:08:c6:93:a1:b5:02:57:
4a:32:84:e3:bb:b2:14:6b:2f:93:ad:19:16:6f:51:
b5:9d:25:a1:8a:d6:7d:11:52:82:0b:ee:46:96:e1:
99:09:c2:1b:cb:f8:8e:19:de:a3:88:30:69:20:7a:
20:77:aa:01:6c:55:a2:d1:a0:5b:fc:bd:59:c0:39:
e1:5a:2b:3d:41:b2:cc:e1:9f:09:62:45:7b:63:2c:
4f:78:47:99:aa:b2:70:51:34:3e:e1:3d:8d:83:2e:
ff:8c:c7:53:8b:4c:c4:ed:98:17:34:d5:e1:90:83:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:99:B0:B5:D7:25:C8:E1:C8:B2:6D:D3:EE:EA:B1:B3:13:0B:BE:F5
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/5JmwtdclyOHIsm3T7uqxsxMLvvU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
29:7c:bb:8b:ba:55:0b:2e:72:20:85:fa:8e:1d:db:c5:31:de:
dd:cf:6f:fc:ac:c2:3f:cd:40:3f:b5:98:0d:41:13:81:5f:fd:
d2:bb:d3:2c:95:99:a5:5a:f4:5a:74:cd:5c:95:10:28:ee:5e:
d1:bc:c7:3f:d1:00:2e:29:3a:fe:9b:bf:23:87:3f:03:ff:01:
d9:31:12:c3:82:65:67:43:75:19:e0:8e:84:3d:28:66:81:16:
40:10:7f:f2:68:9b:d3:f9:ad:95:10:70:26:33:0c:52:cc:82:
cf:d3:3c:26:f5:a9:ce:2c:a9:41:20:58:29:3e:f3:df:63:3f:
85:57:14:09:c1:e3:94:8f:7e:03:8a:0c:cf:42:08:6e:66:68:
e6:c1:88:69:34:4b:f0:07:57:ad:41:99:3a:b8:c9:1d:c8:c1:
52:44:39:04:d5:b6:4a:12:b0:97:95:6b:57:90:1b:a9:bd:df:
b1:8b:5d:64:b2:a8:ee:7d:68:56:51:dc:d6:f1:19:fe:a3:9d:
53:15:9e:fb:38:08:57:6a:02:ab:05:36:49:9c:e1:c8:54:13:
97:f1:89:aa:ae:91:67:c4:8b:b7:11:8d:ce:00:f8:6e:33:91:
8a:af:01:76:c8:46:66:79:dd:13:98:4e:1f:4e:eb:7f:f9:3b:
a5:34:94:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org