Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/6OOCdX4MEBduujRCse4dUMwCPyk.roa
File: 6OOCdX4MEBduujRCse4dUMwCPyk.roa (raw, json)
Hash identifier: z8TuRc0LMNtD6p/9GuEZMNjr7dLifSbOICfCVKhqIqk=
Subject key identifier: E8:E3:82:75:7E:0C:10:17:6E:BA:34:42:B1:EE:1D:50:CC:02:3F:29
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 067C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6OOCdX4MEBduujRCse4dUMwCPyk.roa
Signing time: Sun 11 Aug 2024 15:55:03 +0000
ROA not before: Sun 11 Aug 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Aug 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1660 (0x67c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 11 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E8E382757E0C10176EBA3442B1EE1D50CC023F29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:eb:42:69:ad:bf:36:c1:1d:92:30:16:b0:
45:2c:81:cc:ca:89:94:7c:9f:f4:e4:8b:f4:90:3d:
87:87:06:97:ff:25:a1:21:ab:a3:dc:3b:81:25:be:
f4:5d:00:cd:02:1a:d9:ab:7a:3b:a5:41:a5:1d:d6:
b2:9c:e1:28:5e:14:eb:3c:a1:e5:bf:c9:fe:ce:d9:
5c:90:47:79:6e:86:d8:60:04:7c:f9:9b:8e:05:d0:
5c:05:7e:fd:88:5a:b5:16:a4:15:3f:02:bb:f7:64:
22:d0:32:50:5f:30:1b:72:69:77:37:03:b9:2f:05:
70:fe:36:fb:2a:77:9d:e0:b0:3c:5d:c5:e5:a4:5c:
a3:69:6c:62:6f:79:3c:17:8a:22:17:29:27:a9:cf:
fb:ae:c8:02:9d:b3:32:79:62:59:95:4b:2b:13:44:
1e:b5:24:db:94:ed:40:c4:f9:e8:9a:2c:55:1d:c8:
03:c4:0d:41:ee:0c:9e:29:c6:03:96:87:80:e5:6c:
f8:9d:99:eb:88:e1:e7:fd:28:3d:51:4d:d2:b8:82:
93:44:b7:86:82:32:4b:57:e4:c3:20:92:4c:a6:04:
38:fe:af:13:58:51:19:06:cb:96:e9:28:f6:4f:20:
13:c6:85:5f:7a:26:89:52:de:5c:ce:b5:35:3e:6a:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E3:82:75:7E:0C:10:17:6E:BA:34:42:B1:EE:1D:50:CC:02:3F:29
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6OOCdX4MEBduujRCse4dUMwCPyk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f4:34:4e:c7:ff:cb:23:3a:a4:e5:de:3e:5b:a7:fc:c1:cb:
d4:92:c2:5e:7f:e9:10:75:1d:fb:1f:32:dc:25:88:69:0e:7a:
1a:ea:7c:84:1e:41:2e:08:46:a8:d2:45:60:8c:26:11:ca:91:
09:da:90:57:6a:47:60:50:a5:ae:63:30:c8:a6:14:da:93:05:
ba:fd:d5:6a:31:ff:7f:c1:2c:6b:2a:e8:c5:a8:95:2c:b9:4f:
5e:68:b0:73:0f:e9:50:b9:7d:e7:81:8b:8e:08:3b:60:0a:da:
58:d8:02:cd:01:83:4c:70:07:8f:ae:05:ad:9b:98:1d:60:e2:
d9:30:34:c5:d6:a8:d5:6e:03:16:8d:15:c7:7b:bf:ba:70:63:
df:88:85:02:fc:b2:b5:fb:cd:14:36:3a:1e:38:04:b5:db:88:
c3:12:fc:73:cf:9b:18:d0:55:64:6b:83:55:fe:c8:e1:ef:c0:
8e:b8:47:f7:ec:9e:e9:67:87:c4:50:e6:97:72:b8:87:ac:98:
14:0f:96:2a:45:a3:c1:7e:e2:bd:fb:d1:13:4e:46:e2:96:49:
e8:56:be:df:c4:b4:f0:bc:42:fa:66:d0:6f:22:16:ea:5f:2e:
15:9c:60:ab:b8:c1:bf:a2:48:0a:b8:60:cf:ca:a3:89:8e:71:
36:2e:87:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 21:10:46 2024 by rpki-client on console-ams.rpki-client.org