Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/8_Z3skc1jSLyxX4CZkI-4IFewkU.roa
File: 8_Z3skc1jSLyxX4CZkI-4IFewkU.roa (raw, json)
Hash identifier: UgMuQva8pusm/KW6lnd/nsXdETHukN93iotv64aqhDU=
Subject key identifier: F3:F6:77:B2:47:35:8D:22:F2:C5:7E:02:66:42:3E:E0:81:5E:C2:45
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 03EE
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/8_Z3skc1jSLyxX4CZkI-4IFewkU.roa
Signing time: Thu 30 May 2024 23:55:03 +0000
ROA not before: Thu 30 May 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1006 (0x3ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: May 30 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F3F677B247358D22F2C57E0266423EE0815EC245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:43:94:0d:55:49:b5:de:a5:4c:c9:84:81:
b2:97:92:d5:d2:05:2f:8a:85:1b:2d:de:b7:6a:15:
1a:10:fa:26:77:1f:a8:12:0d:9e:ec:6d:ee:e0:62:
75:aa:b9:e8:74:d5:16:f1:b2:3d:7e:f1:0a:25:bd:
62:87:aa:10:1d:3d:6d:48:76:74:50:4e:d8:70:21:
14:8d:7b:b9:9f:e8:f2:2d:8c:84:d0:eb:78:d6:ae:
85:45:8b:91:74:b8:17:19:29:e8:97:af:38:8c:97:
41:ea:e8:fa:22:60:70:8e:2c:2f:94:25:ad:f9:40:
15:71:9a:40:33:97:81:67:e9:39:66:88:5e:b6:cc:
07:e7:2e:01:2e:d3:a2:6b:ce:66:5b:c4:19:66:e0:
37:06:42:e5:c7:9a:5e:b8:b1:f5:66:6f:cc:00:f2:
f7:60:b6:81:7d:f4:26:69:f0:40:3f:78:1c:30:22:
6d:52:06:e0:02:9a:bc:bf:ce:6e:6e:0c:ce:44:2e:
63:a6:c0:a7:55:2c:bc:74:c9:c8:5e:e0:03:be:d3:
d6:38:2a:05:3b:ff:e1:e7:eb:45:c5:b3:59:74:76:
13:21:64:77:e2:50:0e:ee:22:4b:f8:13:75:1f:a8:
4d:80:76:33:a1:7d:14:ad:a7:33:1b:fb:2d:60:17:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F6:77:B2:47:35:8D:22:F2:C5:7E:02:66:42:3E:E0:81:5E:C2:45
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/8_Z3skc1jSLyxX4CZkI-4IFewkU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
04:90:61:cd:2e:c5:0b:fa:f3:5e:13:c3:3d:b7:b4:d2:15:7a:
66:7f:2a:87:b7:b7:ef:ea:94:dc:bb:77:85:b4:2a:d4:45:f8:
1c:e0:d1:26:73:af:f1:92:a4:7f:72:92:e0:bc:2f:a5:b5:bf:
3b:d4:9e:88:00:cf:79:84:16:e7:83:8f:33:8c:22:90:ca:df:
54:10:ea:74:45:3a:07:c7:f6:55:bd:9a:60:c4:fb:6a:7d:c0:
6c:15:88:5a:ac:3f:8c:63:70:49:8c:9c:d0:b4:aa:1e:12:08:
18:60:81:81:0c:05:49:78:57:8c:ff:0f:92:46:bf:39:2b:84:
8e:06:12:52:ec:c6:00:00:ef:91:ab:e5:57:69:02:4b:cb:ee:
7f:19:d5:82:69:0f:78:b7:70:0d:1a:35:3b:28:d5:44:9f:bb:
b0:74:c4:b6:e5:2a:73:b7:08:67:d2:16:dd:65:a5:ec:99:61:
2b:60:13:90:0f:a8:81:62:a5:fb:a0:0e:8f:d1:ec:90:a4:b9:
7f:e3:5f:d7:75:c8:43:6e:40:69:b1:54:41:3e:a9:b9:ed:4c:
93:3c:48:2b:70:ed:a1:f9:cc:03:d6:a2:7d:06:43:3d:ac:9f:
4c:e4:69:6a:a0:86:49:ba:69:9d:36:6d:5a:8b:7b:13:0d:a8:
a5:8a:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org