Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/6jbEKQMwzQzJs1pkNeeWlf9-9-k.roa
File: 6jbEKQMwzQzJs1pkNeeWlf9-9-k.roa (raw, json)
Hash identifier: muqLnPUiu1hobYOLHECYw/VUqEzBOMujN7mrkk6/L0c=
Subject key identifier: EA:36:C4:29:03:30:CD:0C:C9:B3:5A:64:35:E7:96:95:FF:7E:F7:E9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0956
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6jbEKQMwzQzJs1pkNeeWlf9-9-k.roa
Signing time: Thu 31 Oct 2024 15:55:02 +0000
ROA not before: Thu 31 Oct 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2390 (0x956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 31 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=EA36C4290330CD0CC9B35A6435E79695FF7EF7E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:05:eb:60:7c:35:8e:a5:b7:40:37:96:fb:
79:7f:67:dd:08:da:01:cb:65:5d:00:a0:9e:aa:73:
9c:c6:c7:37:e3:9c:c0:f1:5b:8f:02:87:9c:ac:17:
06:25:6d:f1:79:17:d7:20:ba:57:d7:f8:73:46:07:
84:0b:d2:fb:48:f5:c0:7b:45:fb:7a:73:5f:9f:a8:
9c:bb:21:45:7d:df:ca:23:1e:ad:93:54:2b:39:bd:
0a:6f:e5:28:b6:75:59:39:de:ee:33:fd:c5:bf:55:
52:bd:f5:8f:85:17:30:1a:e0:af:c6:ea:36:30:8a:
9c:98:85:5f:6f:44:d3:f1:0c:cf:0e:df:fc:f0:3d:
71:1b:55:0e:0b:ea:a4:be:b7:8b:26:7e:20:61:39:
7b:f2:f0:7d:61:f2:82:24:51:39:a8:b9:c7:0f:c5:
ea:91:1b:53:0e:75:1b:e7:91:d5:15:7c:20:76:ef:
4a:b5:26:18:1a:f6:3a:eb:21:f3:cd:07:ff:04:b3:
1b:16:17:99:45:54:07:ac:03:d5:66:42:51:57:0a:
08:70:03:33:b0:04:a7:32:b0:e5:90:99:52:ec:23:
c4:6c:b6:47:32:1b:6d:30:85:e7:ce:61:bb:d8:97:
f6:bd:9a:9c:ed:d8:fd:0b:23:d9:cb:1f:15:1f:f6:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:36:C4:29:03:30:CD:0C:C9:B3:5A:64:35:E7:96:95:FF:7E:F7:E9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6jbEKQMwzQzJs1pkNeeWlf9-9-k.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:6d:0d:8a:12:8f:79:cf:03:a7:b7:17:ab:c3:41:d8:82:f0:
e1:3c:5f:a6:b7:a9:40:b2:95:6f:7d:bf:8a:f9:7d:46:24:8b:
b7:ca:91:b2:f2:c4:70:cd:5f:15:47:1b:a6:47:93:73:cc:c9:
ad:47:56:fc:a1:f7:b8:25:ab:ca:1f:aa:07:01:40:60:50:ce:
ee:57:1b:4c:fc:60:38:89:35:21:83:51:2d:e0:c8:b6:6b:47:
f1:02:23:17:55:5e:f5:eb:19:dd:e5:76:13:d7:a4:ea:be:93:
37:c6:93:65:e2:aa:63:13:79:6d:80:05:02:d5:2c:6d:9c:18:
e5:72:a6:c1:2a:92:37:d6:35:03:0b:13:31:04:86:21:d0:63:
d0:a3:99:c6:ba:1e:08:66:97:29:dd:6a:aa:0b:c4:03:85:21:
88:61:38:70:98:3c:d8:11:2d:bc:d9:16:d1:e4:c8:d7:a5:38:
9c:99:66:af:81:cc:09:4d:c4:d2:ea:f2:d0:ca:d2:39:ab:5e:
22:7f:f5:b2:8f:83:90:ae:ec:99:1a:4a:74:78:c1:c6:91:fe:
c6:51:7c:e1:8b:9b:12:88:41:75:9f:a4:c0:e0:e3:48:c4:34:
cb:c7:18:16:45:1f:68:0e:43:1e:65:98:62:32:ab:47:87:dc:
4d:8f:a2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 21:20:00 2024 by rpki-client on console-ams.rpki-client.org