Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/7k2foHndE2nbe04p074Qv9Ad0Mo.roa
File: 7k2foHndE2nbe04p074Qv9Ad0Mo.roa (raw, json)
Hash identifier: at54jv8DdvjL1XST66LE6NJNW72IO1ANLEGP/qAqDfQ=
Subject key identifier: EE:4D:9F:A0:79:DD:13:69:DB:7B:4E:29:D3:BE:10:BF:D0:1D:D0:CA
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0715
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/7k2foHndE2nbe04p074Qv9Ad0Mo.roa
Signing time: Wed 28 Aug 2024 15:55:04 +0000
ROA not before: Wed 28 Aug 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813 (0x715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 28 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=EE4D9FA079DD1369DB7B4E29D3BE10BFD01DD0CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:3e:51:d6:07:85:ef:56:7f:5e:7b:60:00:
23:c1:7b:12:5a:55:13:b2:c0:f2:50:09:b3:dc:aa:
64:43:57:62:42:92:94:f7:2d:81:b0:94:62:76:25:
70:fe:2a:13:28:30:c1:ce:af:1b:ce:41:89:93:f9:
ed:28:6d:e8:08:b6:47:4c:d1:01:43:99:e3:14:cd:
a9:e6:1f:a8:ec:59:e7:69:94:1b:77:ef:9c:09:55:
87:11:51:f6:64:86:aa:49:ec:4c:82:25:ac:d5:44:
5f:7d:dc:42:5e:91:45:9a:a0:ba:2c:94:d5:45:24:
94:18:34:33:a2:26:cf:1c:2a:9f:36:51:73:8a:dc:
e6:53:bb:d6:57:7b:ae:06:3c:41:70:7f:0c:4d:94:
8c:c8:0d:25:c5:f8:fc:1d:70:68:eb:82:42:f1:14:
da:33:dc:92:3c:ce:3a:93:88:6c:2e:55:67:12:ac:
c4:5c:0c:81:da:48:ce:49:6b:8f:cf:1e:01:64:9a:
f8:94:05:a9:6c:91:74:09:d5:8d:f3:a9:5d:f4:fc:
da:ed:10:0d:d8:f1:d7:72:2c:38:8b:29:37:f2:28:
fe:19:bf:45:b2:3d:43:57:6a:7f:8b:14:c8:73:8f:
04:b6:64:86:81:ff:b7:c4:ed:1a:d7:69:8e:e3:d5:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4D:9F:A0:79:DD:13:69:DB:7B:4E:29:D3:BE:10:BF:D0:1D:D0:CA
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/7k2foHndE2nbe04p074Qv9Ad0Mo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
88:89:37:21:26:3c:fe:2f:89:7b:c9:a5:c7:4a:c8:bb:82:f9:
96:8a:15:7b:00:12:13:c3:94:8d:54:e5:ac:a8:8a:59:27:6e:
82:b3:e2:1d:ab:5f:55:9f:c4:53:be:ec:b4:75:33:b7:3f:b9:
27:68:ae:1c:f5:ed:19:69:e8:a3:3e:16:b1:85:da:df:44:a4:
af:5d:fe:48:17:79:ef:93:97:b2:4c:61:71:63:ee:a5:b1:53:
5e:e0:79:cb:e0:75:3c:73:0c:d3:a3:df:e5:08:16:de:c7:39:
4d:7c:5c:fc:de:da:b3:56:a8:fe:d6:c2:e7:cd:88:9b:30:53:
ca:63:06:55:ee:47:eb:c9:f0:0e:24:20:a4:bb:3c:bf:54:97:
18:6e:27:e2:10:cd:28:95:e1:aa:35:e9:97:f3:e1:9a:00:d1:
90:7f:86:87:ae:09:29:71:a6:d1:a5:61:35:ea:7c:ce:07:bf:
f8:8b:3a:a6:6f:5f:0a:40:61:85:b5:10:b0:34:a3:cf:07:16:
25:c3:79:30:b0:e9:60:18:18:a3:f4:dc:dc:4c:e2:38:3d:da:
03:0b:9a:3a:6f:1a:9d:bd:35:82:ac:dc:3f:e5:38:6f:f9:b4:
b5:59:60:2e:9a:2a:03:e1:99:a6:ca:06:4b:bf:70:27:fb:d6:
7e:76:1c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 21:06:02 2024 by rpki-client on console-fra.rpki-client.org