Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/7p_62GmXbSbvL9KUgjNNZbt2JSA.roa
File: 7p_62GmXbSbvL9KUgjNNZbt2JSA.roa (raw, json)
Hash identifier: yCL6S8NZzadgPGbcCabawTgxYBnbJHVXUTlHRwn0rZU=
Subject key identifier: EE:9F:FA:D8:69:97:6D:26:EF:2F:D2:94:82:33:4D:65:BB:76:25:20
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 062E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/7p_62GmXbSbvL9KUgjNNZbt2JSA.roa
Signing time: Fri 02 Aug 2024 23:55:04 +0000
ROA not before: Fri 02 Aug 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1582 (0x62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 2 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=EE9FFAD869976D26EF2FD29482334D65BB762520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:53:bc:8f:40:51:96:8b:7c:83:c7:e7:c1:c2:
0e:80:fe:6e:e6:d9:5f:e4:1e:73:a0:d8:d8:a3:92:
7b:35:e0:cc:6f:70:42:5e:2a:20:b3:0a:27:32:6c:
41:04:68:a9:56:eb:7f:d1:c3:3a:75:c0:13:fd:32:
33:2e:8d:5a:11:60:94:33:59:33:de:4e:02:2e:8c:
e2:28:f9:c6:e9:83:fb:9e:57:53:f3:eb:75:0b:73:
c5:da:3b:88:0b:d2:2e:70:fb:6e:22:99:27:d8:56:
c6:91:2e:c9:e2:3b:c8:ba:4d:10:3e:28:ca:bf:ea:
bf:5c:8b:43:45:d3:dd:33:4c:1d:2c:dd:3e:25:65:
c5:41:47:e1:a9:a4:f3:c0:86:cb:29:9c:1d:4e:97:
94:35:86:5d:af:61:c1:1e:12:96:92:ad:7e:7f:d2:
37:bf:89:a5:1b:c8:18:85:8c:ed:e3:77:f9:4d:a5:
aa:d0:7c:cc:03:5d:a2:b6:ce:70:cb:f7:4c:9d:81:
a5:c4:b9:92:ca:ac:4f:21:c3:07:c4:40:50:43:f2:
a7:7f:a4:9f:f6:21:b0:2d:0a:b5:45:e9:ba:c7:d1:
fd:c1:76:c7:9c:52:5d:8f:8c:d6:4c:4b:30:f3:32:
ec:d4:73:9e:71:d7:89:95:3b:e6:f3:89:04:21:dd:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9F:FA:D8:69:97:6D:26:EF:2F:D2:94:82:33:4D:65:BB:76:25:20
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/7p_62GmXbSbvL9KUgjNNZbt2JSA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ef:dd:5c:0b:ac:98:f4:e4:30:2b:bb:e4:67:29:f2:a5:9b:
41:11:0a:50:d9:d7:6d:50:bd:1a:8e:67:8d:c0:19:00:ff:aa:
f4:58:cb:a9:6c:ad:3b:03:66:43:ae:8a:ff:9e:04:12:fe:0b:
a6:3c:b0:29:bf:6f:40:e0:df:d3:5d:31:02:4c:d6:b6:a9:40:
5f:13:a3:c4:c9:92:b5:a5:c0:1f:06:5c:e6:1b:c2:e3:ba:28:
8c:61:e6:d6:31:2c:3a:5c:02:ff:4f:cb:70:92:01:86:ac:72:
e9:71:6b:48:4d:f9:8c:4c:0a:94:ea:82:75:de:f2:4f:ed:cb:
58:50:1c:69:0e:8d:f2:70:26:76:40:10:ca:22:75:65:b1:92:
6d:72:47:fc:d4:0b:97:c4:9f:69:70:dd:7d:ac:eb:60:de:09:
36:ac:8b:ea:82:a1:19:57:0a:3d:d3:c7:9f:a6:af:bd:2a:86:
a0:9c:cf:b1:13:ac:fc:f2:ed:e2:47:05:e9:e0:51:8e:b0:58:
e1:34:91:89:83:ff:fb:9c:b6:7b:4a:aa:a8:ad:83:1c:97:61:
9d:a1:df:2f:6f:77:99:f3:2d:f8:d5:2a:8d:70:99:8a:68:f4:
c9:84:90:dc:2d:5b:30:d5:8d:1b:d1:f4:a6:41:9b:c0:94:62:
7e:28:04:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 06:03:55 2024 by rpki-client on console-fra.rpki-client.org