Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/6QPZsHMtHEBP1RhU76S-nVxWI-k.roa
File: 6QPZsHMtHEBP1RhU76S-nVxWI-k.roa (raw, json)
Hash identifier: Sfij4zuKy9Bg/qZuHQS8VIOvFrbBVIvymGnotLVALPk=
Subject key identifier: E9:03:D9:B0:73:2D:1C:40:4F:D5:18:54:EF:A4:BE:9D:5C:56:23:E9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09D7
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6QPZsHMtHEBP1RhU76S-nVxWI-k.roa
Signing time: Thu 14 Nov 2024 23:55:03 +0000
ROA not before: Thu 14 Nov 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 03:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2519 (0x9d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 14 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E903D9B0732D1C404FD51854EFA4BE9D5C5623E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:14:1e:4f:ea:80:92:71:6c:50:2c:b3:9d:
90:ab:5a:82:b8:3e:d5:51:5c:9d:46:ca:98:40:fe:
6e:df:74:fc:1d:f7:7e:ee:b5:3c:fe:56:58:e6:9c:
e3:5c:62:53:32:52:83:64:15:27:0c:c5:04:7a:56:
76:5d:df:8a:2a:b8:ae:15:d0:00:78:56:55:05:16:
42:12:30:5d:be:00:47:10:1e:61:b3:ac:7b:13:83:
9b:6e:d0:3f:00:58:70:b0:0c:da:4d:1a:d3:6f:70:
09:25:8c:ca:5a:ff:45:77:c4:47:17:dc:d5:37:7a:
7b:7c:c3:52:5f:d1:0b:3d:a5:ea:4c:4d:20:38:88:
88:45:7e:a3:75:3b:f2:68:b1:19:0b:15:be:90:8e:
70:b9:9a:52:e3:76:0c:9d:c1:96:33:94:65:82:22:
51:ee:f7:0e:56:2a:56:b8:20:3b:10:55:36:d7:d9:
36:1b:47:8b:cb:d8:e2:7f:e3:10:e2:88:43:72:b9:
67:cb:22:6b:7b:2f:83:b8:62:8c:8a:24:b3:52:b0:
f3:33:97:69:60:d4:30:13:c5:57:4a:d6:ea:cf:89:
0b:74:85:b1:16:38:07:6a:fb:a9:a2:c2:fe:f2:7e:
aa:91:0d:7a:90:ff:63:93:6a:3f:75:41:6a:d2:1f:
44:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:03:D9:B0:73:2D:1C:40:4F:D5:18:54:EF:A4:BE:9D:5C:56:23:E9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6QPZsHMtHEBP1RhU76S-nVxWI-k.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:2f:f8:81:62:b4:00:cb:6e:28:dd:da:36:c9:75:74:c3:19:
78:02:e9:ed:fa:a0:cd:69:af:45:94:e8:6b:13:99:63:89:95:
75:78:5d:06:17:b2:b2:59:85:7d:e2:30:3b:54:eb:6c:d7:71:
62:5f:4e:fb:85:71:2e:c5:22:68:37:1d:bc:a1:f3:09:9c:9c:
e2:d6:3f:c7:1b:bd:0d:21:ff:a0:5f:11:52:f6:77:af:e7:05:
d3:c2:d5:91:85:35:a6:4c:2a:19:bb:a2:6e:3b:e9:eb:31:96:
4c:fa:dc:a1:2d:35:01:7b:ad:48:d5:75:58:3d:f2:94:df:a5:
be:89:12:d5:67:a9:ad:c5:4a:b0:02:8b:10:f0:27:93:37:2d:
c2:3b:b8:3d:84:31:d8:0a:9f:66:8a:a9:89:7d:36:d0:92:63:
15:9a:9f:83:0c:ee:64:30:95:8e:a7:9e:93:00:7a:62:26:a5:
f1:7d:3f:d4:78:5c:16:29:50:14:01:7d:10:1f:36:12:02:8a:
9a:7a:d3:d6:0d:97:b9:e6:b6:00:13:8c:84:ca:9d:8d:cd:9c:
00:6e:10:f8:06:1c:5b:01:76:61:23:b1:89:a4:fa:6d:8e:bc:
c5:7c:8f:bc:61:43:7b:9e:8e:02:6b:a1:ad:80:7f:5b:0d:0b:
18:22:d7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 07:09:48 2024 by rpki-client on console-fra.rpki-client.org