Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/6ZOlul28zHXlQelWeuuDfHpa628.roa
File: 6ZOlul28zHXlQelWeuuDfHpa628.roa (raw, json)
Hash identifier: /vP2fJOmbY1F+nsr44Unks/W6kSiHg1pVIOFpJhquws=
Subject key identifier: E9:93:A5:BA:5D:BC:CC:75:E5:41:E9:56:7A:EB:83:7C:7A:5A:EB:6F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09FE
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6ZOlul28zHXlQelWeuuDfHpa628.roa
Signing time: Tue 19 Nov 2024 07:55:03 +0000
ROA not before: Tue 19 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2558 (0x9fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 19 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E993A5BA5DBCCC75E541E9567AEB837C7A5AEB6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:31:a3:c4:3c:ca:b1:ef:08:b5:6e:aa:cc:84:
c9:c7:01:f1:1e:76:9f:5b:8f:76:08:ec:9d:cb:fa:
ce:18:2f:b1:72:9e:e0:79:00:0f:bf:4f:80:18:e6:
b2:21:45:1b:d0:d3:f9:77:66:6d:5d:70:8a:94:3c:
e4:8e:48:8c:6c:aa:5b:1e:8c:3d:e7:f0:75:f6:37:
cb:23:96:1d:dd:65:00:30:2f:9f:df:ec:26:62:3e:
ce:b9:38:8e:bf:e8:95:50:5c:14:c9:df:16:ea:74:
41:99:0c:52:7f:ac:0d:3e:99:e7:f3:24:36:f6:0e:
a7:30:57:73:91:02:e7:04:05:b3:42:0f:5c:dc:92:
fa:05:90:27:77:ca:87:87:f7:56:a9:20:4c:f8:ee:
39:d3:e8:2c:2d:6f:39:70:07:59:08:ee:88:14:d4:
c6:fa:16:9e:54:1d:00:f2:0a:45:c8:1e:32:a0:80:
5a:3a:87:dc:82:18:60:cc:07:1e:46:9b:e5:7a:7b:
95:65:64:14:fb:9c:da:5b:f1:ff:99:00:84:59:05:
90:8b:fe:b9:5f:c5:fa:f4:d5:1c:ce:8f:5b:19:03:
c7:a5:bb:1c:9d:92:73:ec:5c:ce:fd:fc:8b:ff:c5:
f3:1b:c9:16:db:3c:04:99:3c:8f:b4:2e:39:5c:dc:
ec:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:93:A5:BA:5D:BC:CC:75:E5:41:E9:56:7A:EB:83:7C:7A:5A:EB:6F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6ZOlul28zHXlQelWeuuDfHpa628.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:98:5f:6a:45:89:f5:2b:f0:75:e0:3f:5c:13:18:3d:76:a7:
fa:c0:aa:f5:e7:6b:aa:e3:9c:4f:2b:ed:85:69:c6:0a:02:de:
56:d2:af:87:c5:01:f4:49:b9:68:a4:a2:7b:d8:5a:c1:41:19:
c8:b5:0c:45:c1:a2:c7:a8:5c:f9:d3:18:b0:24:36:0b:fb:85:
52:a3:11:21:4d:0f:76:61:0e:6b:9a:33:31:f4:90:43:65:e1:
0a:71:8a:34:ae:a3:53:e8:10:a4:4c:05:47:0c:dd:14:5a:06:
a8:19:9f:14:06:d4:06:8a:f7:fb:0e:63:9a:44:66:1c:6d:dd:
07:d5:10:78:5f:7e:ea:23:37:37:49:1c:e9:a0:89:ca:3a:c6:
79:ca:3b:85:4d:02:d1:5d:b5:2d:67:64:76:90:0d:90:cd:72:
4a:c4:1e:83:37:51:ae:68:d1:ee:0d:c8:2d:2e:47:41:06:a0:
19:8e:a6:2b:e3:f1:5b:83:d7:61:5b:53:73:5c:95:62:ba:04:
ef:82:eb:2d:f8:30:a3:9a:44:a7:45:68:2b:a3:af:f7:f1:af:
61:a0:eb:67:34:9f:5b:17:67:c0:b4:3f:35:06:c9:f3:b0:ab:
35:3d:8a:6e:16:ac:8c:ad:ad:c8:55:8a:05:ae:9e:bd:45:17:
6b:a5:e7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:48:21 2024 by rpki-client on console-ams.rpki-client.org