Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/8W9UCimltEj1KgXdt9ieNlmI9t4.roa
File: 8W9UCimltEj1KgXdt9ieNlmI9t4.roa (raw, json)
Hash identifier: vdt0ZaKAX7SdmhGoEsGkSxyk5v9/KEJMKr7zZ0/YNnQ=
Subject key identifier: F1:6F:54:0A:29:A5:B4:48:F5:2A:05:DD:B7:D8:9E:36:59:88:F6:DE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 063A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/8W9UCimltEj1KgXdt9ieNlmI9t4.roa
Signing time: Sun 04 Aug 2024 07:55:03 +0000
ROA not before: Sun 04 Aug 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Aug 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1594 (0x63a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 4 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F16F540A29A5B448F52A05DDB7D89E365988F6DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:4d:49:bf:ab:3d:60:a6:85:41:72:9f:ba:
e6:97:84:bf:f7:a7:e4:21:7f:df:2b:63:bd:9c:44:
50:5a:c6:82:d4:3f:9a:7d:b9:6b:f0:91:8a:2a:23:
05:5d:e4:c3:6b:bc:6a:f8:99:a3:5f:55:99:49:0e:
d4:2d:39:5f:ef:1d:e7:18:64:8e:73:46:ad:8d:96:
37:3d:85:8d:e0:ef:0d:89:82:3f:cc:0a:1d:04:ce:
b4:57:37:71:80:6f:85:3d:6c:62:32:6e:11:48:b9:
c1:98:91:73:5e:f7:ab:2f:4a:ea:3b:b7:6f:37:21:
21:8e:6b:55:44:d9:86:e0:80:58:a6:9d:19:57:2c:
53:a4:4a:f7:67:a6:18:d9:9b:96:5a:e2:8e:e8:bc:
6b:2d:1b:c8:d0:ac:8f:8d:d5:7e:b8:25:09:df:78:
5b:7a:20:b1:ee:85:4f:23:ea:2f:de:12:69:39:30:
0d:1b:9e:82:cc:03:16:32:28:65:53:5c:c1:c8:f1:
65:00:ee:cb:15:aa:11:85:5f:b9:2e:89:16:8c:8e:
b3:ae:80:9c:17:a4:ce:70:89:8b:3b:78:59:35:b5:
1a:e4:50:dc:89:b7:7f:d1:94:b2:d5:0c:5b:e9:2e:
4e:23:db:fb:ba:e2:b5:01:a0:b3:14:a3:10:ce:12:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6F:54:0A:29:A5:B4:48:F5:2A:05:DD:B7:D8:9E:36:59:88:F6:DE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/8W9UCimltEj1KgXdt9ieNlmI9t4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:bd:02:41:b2:49:71:3a:81:67:61:ac:46:04:90:99:30:67:
ad:7b:bb:99:57:0f:25:31:94:1c:07:9e:9d:ce:22:e8:08:2d:
48:c1:8f:63:cb:83:8b:11:69:18:b6:51:f7:cf:28:44:14:38:
4f:25:ef:05:0c:d6:5b:bc:71:cc:37:91:23:67:90:31:e8:63:
90:da:2b:ce:76:6e:2d:d3:16:c9:ee:11:5a:b7:50:77:a6:0d:
9f:46:1b:2c:1c:4c:04:b6:a5:4e:80:ea:b1:48:e7:98:a1:93:
48:1c:a8:82:31:af:77:c3:5c:a8:7a:35:60:0f:68:75:3f:66:
48:28:62:af:ed:83:ac:62:06:56:6c:4e:8d:3a:f6:bf:24:5b:
81:04:82:79:10:b1:32:c5:33:af:78:32:60:93:8f:76:9c:6a:
7a:2a:42:31:02:ea:ea:ec:53:03:82:2c:82:6d:9c:d6:2c:56:
05:3c:da:bd:f0:07:32:11:bc:ef:6b:f7:4d:4a:4b:b6:05:b0:
ae:72:64:d9:e7:2e:a5:4c:66:3a:3c:68:f2:05:7a:7c:75:ba:
4c:9d:a9:b6:6c:c0:a3:ae:f6:11:ef:e9:50:52:26:4b:d3:8e:
84:9c:15:61:3e:2e:89:c3:10:a6:3c:81:2f:46:ff:db:65:92:
20:4d:ce:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 13:36:36 2024 by rpki-client on console-fra.rpki-client.org