Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/7bJ5Ye2YL0jlH7489Ka01FnoITQ.roa
File: 7bJ5Ye2YL0jlH7489Ka01FnoITQ.roa (raw, json)
Hash identifier: FzwdfE4cC3p8A7zDCXIYzsM2+9H6Zhd4w1cN9+nOmkY=
Subject key identifier: ED:B2:79:61:ED:98:2F:48:E5:1F:BE:3C:F4:A6:B4:D4:59:E8:21:34
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0448
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/7bJ5Ye2YL0jlH7489Ka01FnoITQ.roa
Signing time: Sun 09 Jun 2024 23:55:04 +0000
ROA not before: Sun 09 Jun 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096 (0x448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jun 9 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=EDB27961ED982F48E51FBE3CF4A6B4D459E82134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:6f:86:73:4c:63:8b:07:3a:96:d7:dc:50:
50:2b:f0:dd:81:b2:b2:cc:25:68:80:6e:68:8a:c4:
02:8f:79:53:40:da:5b:db:6f:00:90:6e:2d:59:39:
26:d8:14:f0:ba:98:3b:6b:b8:ba:4e:9b:a5:4e:78:
a0:fa:69:60:2a:80:30:07:36:42:28:28:b2:eb:57:
2d:b3:91:fd:b2:1b:e1:65:6e:f8:76:c0:db:2d:59:
dd:da:0f:1f:f5:fc:04:ae:3e:7d:b4:38:06:e3:9e:
9e:84:6a:f6:21:a2:67:71:20:d0:17:e1:0b:61:37:
1b:b8:6b:3a:b8:69:49:55:d4:4c:f7:9b:75:83:02:
04:4a:97:f5:2d:98:c2:4c:5e:c0:4f:13:38:9d:ab:
4e:45:32:cc:2a:84:bf:85:fa:75:b6:9d:a4:45:33:
eb:f7:82:9f:b9:8d:b0:d5:13:10:47:e9:1b:86:3c:
b5:01:12:59:6f:23:d9:14:5a:70:c2:84:e6:8d:4d:
bf:ac:11:20:15:dd:40:6a:25:0c:f8:19:29:43:83:
2d:d8:0d:7b:14:b3:d1:46:03:b6:43:5f:95:08:b5:
36:e7:66:86:57:6b:80:dc:41:db:02:8b:e0:1e:f2:
cf:16:7c:65:ee:86:a1:9a:4d:76:2e:4a:e4:97:87:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B2:79:61:ED:98:2F:48:E5:1F:BE:3C:F4:A6:B4:D4:59:E8:21:34
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/7bJ5Ye2YL0jlH7489Ka01FnoITQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8e:97:ca:fc:78:60:d4:24:98:89:5a:a6:0c:86:5e:61:89:
c7:b5:99:e6:70:0f:7c:aa:30:19:7c:88:58:72:df:5e:7d:22:
ed:b2:b2:d3:b9:f7:01:a9:5a:36:75:86:c2:e8:bc:c5:ac:7d:
41:21:b4:99:d5:42:12:c4:35:32:4a:7a:21:42:65:67:60:09:
c1:f5:6c:54:70:24:ab:ac:11:57:04:f7:1e:eb:8c:76:c5:5b:
32:f4:45:ee:24:8a:9a:5d:26:c4:d7:cd:bf:15:55:23:3e:69:
92:44:ec:b6:bc:3d:a2:20:39:29:21:19:a0:20:3a:6a:d7:e4:
d0:c8:7a:f1:24:fd:9a:cd:83:3f:d5:bd:be:ea:2e:50:e7:fd:
9f:5e:08:07:7c:8f:93:44:b9:af:ee:b6:ca:f6:b4:37:aa:da:
61:f7:f4:32:99:5d:ed:66:8a:7d:12:64:46:33:8a:fc:57:cb:
36:2d:88:c8:3c:74:a4:20:95:b2:f0:cb:cf:42:86:90:ea:91:
86:79:3b:7d:92:16:42:58:22:cb:d8:1f:f5:9b:1e:ad:25:50:
ae:96:1e:33:a4:a8:dc:9a:9f:da:af:3a:13:7f:16:14:48:a8:
f6:4f:03:2a:4a:21:a3:e7:1f:91:73:43:d2:7b:c4:04:f2:fd:
b1:68:92:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 04:53:26 2024 by rpki-client on console-fra.rpki-client.org