Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/8ildVv_cevGHxWew3U-vbDogpPk.roa
File: 8ildVv_cevGHxWew3U-vbDogpPk.roa (raw, json)
Hash identifier: iR6IAXhrIy1pBo6jtItXcS8i5+FIM6X54adVEe3AGXY=
Subject key identifier: F2:29:5D:56:FF:DC:7A:F1:87:C5:67:B0:DD:4F:AF:6C:3A:20:A4:F9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 069A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/8ildVv_cevGHxWew3U-vbDogpPk.roa
Signing time: Wed 14 Aug 2024 23:55:03 +0000
ROA not before: Wed 14 Aug 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1690 (0x69a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Aug 14 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F2295D56FFDC7AF187C567B0DD4FAF6C3A20A4F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:2f:4a:29:2d:bc:9c:d3:a8:49:1d:c3:61:
12:e0:21:e0:b8:72:35:b1:49:fa:05:c8:47:70:9e:
e0:5c:e0:c2:5b:f0:47:c5:4d:4b:de:c4:3c:b8:4c:
f1:02:b5:50:e2:92:3f:2e:24:81:09:71:0b:d8:30:
3f:0c:9c:ad:56:df:c8:b8:a8:50:c5:63:3f:2b:b7:
25:22:d0:83:ef:e7:8c:4e:81:25:d4:ec:4c:54:d4:
f3:14:f6:08:e7:99:38:51:b8:98:17:1e:48:d7:96:
8b:cb:16:24:e7:99:ed:cd:25:fc:ec:54:92:95:95:
22:fd:28:5e:0b:b1:00:da:85:9b:e1:7b:8d:f0:75:
ab:81:45:d3:91:9f:70:8d:4d:3a:43:49:68:41:e6:
51:61:f5:9a:db:0b:46:a2:0d:02:3d:bf:fe:a0:71:
dc:4f:71:0c:78:df:dc:e3:de:90:d8:bf:db:bf:1a:
48:bd:d2:61:f4:a1:84:3e:e7:52:b2:ff:e5:07:c8:
ad:8a:7e:7c:fd:50:2a:5d:c2:c1:55:d2:55:f5:59:
9a:1a:f0:54:12:4b:7f:e9:f9:98:18:59:59:fb:06:
18:1f:49:fa:72:80:07:65:e2:23:2d:d5:87:78:b6:
d2:95:11:a0:51:2c:d7:09:f0:d8:98:88:5e:8e:75:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:29:5D:56:FF:DC:7A:F1:87:C5:67:B0:DD:4F:AF:6C:3A:20:A4:F9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/8ildVv_cevGHxWew3U-vbDogpPk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
16:08:bd:1e:58:dc:ee:76:5a:a6:63:6d:44:34:76:e9:3e:73:
27:28:0a:4a:d8:b2:6a:01:06:51:0f:7d:ac:b7:7f:fe:42:78:
45:ec:75:3f:74:9a:24:04:f3:30:da:8d:d7:07:0d:d6:2e:a5:
cb:20:92:a0:c8:a1:47:31:4b:8a:cd:d8:40:63:0d:34:b1:0f:
2a:09:e8:1b:01:b9:f9:c4:cc:06:40:e4:1b:0d:c9:5f:47:6a:
25:d7:f8:77:62:b2:11:32:cf:30:95:39:d4:58:47:45:2d:78:
9a:5e:44:db:d1:1e:c4:a8:8c:96:23:b1:ce:56:d4:ea:fe:8f:
9e:17:37:ba:49:a0:7b:6f:25:20:94:09:bc:6a:0c:37:5e:02:
12:50:4f:28:42:29:60:34:ba:6a:95:97:8a:e6:58:0a:17:52:
93:7e:94:92:98:df:67:e2:49:07:69:7c:0b:33:d5:a5:9e:e5:
6e:ea:6b:37:29:95:ef:9e:62:5b:17:f2:b1:55:00:80:6e:8f:
ff:bb:34:08:fc:1b:78:8d:20:75:0e:23:ee:1f:68:32:6b:43:
1c:83:58:06:f1:fb:c0:6c:7f:4f:19:bf:07:9a:11:38:a9:b2:
e3:ca:18:2a:c5:26:14:8b:8b:62:fd:6f:4b:ec:93:e2:80:70:
ce:b3:75:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 05:16:38 2024 by rpki-client on console-ams.rpki-client.org