Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/8Tw7cFNOAEysB-hCsc1atPS4b-k.roa
File: 8Tw7cFNOAEysB-hCsc1atPS4b-k.roa (raw, json)
Hash identifier: /DDlz82/NaDHG/eAxGL7EA+CHhhERZWgoFqSA+L38UE=
Subject key identifier: F1:3C:3B:70:53:4E:00:4C:AC:07:E8:42:B1:CD:5A:B4:F4:B8:6F:E9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09E9
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/8Tw7cFNOAEysB-hCsc1atPS4b-k.roa
Signing time: Sat 16 Nov 2024 23:55:03 +0000
ROA not before: Sat 16 Nov 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2537 (0x9e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 16 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F13C3B70534E004CAC07E842B1CD5AB4F4B86FE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:b0:4e:a0:a2:87:2d:ac:f6:bc:cb:ca:f2:
0a:e5:de:af:8c:6c:e2:61:08:86:17:c9:57:58:d7:
12:db:30:48:ba:91:5f:98:30:5b:db:bd:b2:7d:68:
9a:27:d9:92:ff:b8:5b:5e:c2:8d:21:17:b7:ad:bf:
15:67:d3:6e:3b:cc:d1:02:fd:f1:ec:7b:dc:3c:b2:
84:f9:40:cc:75:4e:53:1b:15:d8:1a:d8:12:37:c6:
3d:a9:13:fe:80:b8:1b:a3:33:9d:51:bb:64:07:c4:
c4:51:de:35:59:82:39:2d:6b:2c:cc:58:7a:21:13:
aa:2e:ee:70:3d:f4:f9:61:1c:d3:1c:d9:89:cd:de:
90:24:12:24:c8:c5:ff:cd:2f:eb:03:59:e6:c6:4e:
fe:48:a7:cb:b4:39:0e:13:f7:f3:e3:53:89:9c:a3:
32:16:03:1b:68:b0:c7:69:19:df:c4:df:3e:ef:90:
07:aa:ca:ad:62:28:ef:e6:35:cc:cb:8e:e8:a4:a2:
9b:d5:78:aa:80:a5:96:df:8d:51:27:a2:51:4a:17:
29:33:30:46:4d:02:2e:96:70:25:4a:4e:e3:b9:8a:
22:b4:b0:af:cb:fa:28:12:26:93:74:54:98:eb:d5:
51:c0:90:07:f2:7a:54:5f:23:9c:af:25:a6:7d:d4:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3C:3B:70:53:4E:00:4C:AC:07:E8:42:B1:CD:5A:B4:F4:B8:6F:E9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/8Tw7cFNOAEysB-hCsc1atPS4b-k.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3c:18:cf:dc:9f:55:13:6d:87:68:39:68:39:ce:e4:da:ba:
dd:ca:56:f6:5c:22:2a:49:49:e4:38:d5:60:26:c9:7b:4a:54:
74:c8:a6:06:06:dd:65:fd:5e:63:46:ad:33:0a:1d:f8:0b:4d:
56:00:b8:38:bf:1d:aa:c7:ec:98:00:97:16:9c:f4:40:18:5b:
ed:8a:d5:92:ce:54:7b:df:b8:1d:40:ca:db:ca:fe:62:49:85:
fa:84:1d:6d:f2:84:6d:f5:8d:7a:3a:5c:d8:a3:75:8e:0b:c7:
d3:cf:9d:5a:b8:be:d4:ec:91:f2:97:d1:32:43:7c:76:06:2e:
33:15:29:56:69:fa:da:90:83:c4:13:b3:68:d5:0a:53:07:3c:
99:c2:bf:08:06:22:ef:f1:a7:da:cd:2b:b3:a9:68:03:9b:7a:
00:0a:3b:6d:b5:0f:e5:d1:68:9b:6c:f1:99:27:c3:5b:b7:08:
d3:c9:b9:38:0d:4d:de:72:7e:fc:d8:eb:b7:b8:40:ba:f5:fd:
2e:f1:98:0c:0e:d7:fa:6d:29:c5:ad:5a:51:2b:13:b7:b4:e8:
5b:a3:1d:08:b9:c9:d9:9d:f8:b3:24:15:8d:b4:8a:a0:c4:17:
7b:f4:fe:63:24:b3:d2:37:47:30:2d:46:b2:fc:9d:9c:bd:61:
77:8b:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 05:27:05 2024 by rpki-client on console-fra.rpki-client.org