Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/8orSZOKu4FAf0qzlFXd8UUj6f-M.roa
File: 8orSZOKu4FAf0qzlFXd8UUj6f-M.roa (raw, json)
Hash identifier: kYgfQnP2v3MIXjifPoZZ+BSZ8ulxHyJvRGZDuKMKKP8=
Subject key identifier: F2:8A:D2:64:E2:AE:E0:50:1F:D2:AC:E5:15:77:7C:51:48:FA:7F:E3
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09E3
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/8orSZOKu4FAf0qzlFXd8UUj6f-M.roa
Signing time: Sat 16 Nov 2024 07:55:03 +0000
ROA not before: Sat 16 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Nov 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2531 (0x9e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 16 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F28AD264E2AEE0501FD2ACE515777C5148FA7FE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:a0:92:fb:bf:ff:36:16:70:f7:cb:af:40:
b5:33:3e:7f:17:24:3f:9e:d1:be:68:18:4b:b8:95:
f4:6e:46:d6:ef:fc:98:cc:51:c2:81:77:72:54:9c:
5f:c6:c5:c2:70:f0:cf:01:a9:3a:b8:e6:46:e7:75:
3f:e3:03:ef:bb:99:f4:11:3b:d3:59:bd:64:b4:27:
6e:a9:83:9a:20:a3:7e:7e:7a:f7:de:f6:f7:de:42:
4a:54:e5:85:99:06:d2:66:cd:6d:be:17:89:ce:ff:
e9:02:2d:56:fd:2d:8e:90:b6:a8:62:80:e3:55:15:
33:c0:26:47:eb:72:73:e1:6e:80:9e:7a:2f:5c:15:
43:d9:ea:a4:13:2a:73:5d:ad:02:1e:7f:8c:7f:da:
70:e3:81:40:c9:1c:bd:cc:15:54:cd:25:f9:89:bc:
85:72:e7:28:b2:75:22:b7:12:c9:ab:4a:88:d4:40:
a2:2b:6b:85:2f:50:85:fb:07:f4:73:1a:0c:ab:e6:
44:44:9b:65:25:fd:4d:3a:b6:83:6a:e3:75:eb:6d:
b9:3c:f4:35:28:0a:90:88:70:9c:30:bd:8a:63:ff:
fb:2f:16:3f:6f:cf:db:01:49:45:06:03:79:59:99:
1b:12:da:ef:f4:84:f2:25:ba:51:9e:d6:24:bb:a6:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8A:D2:64:E2:AE:E0:50:1F:D2:AC:E5:15:77:7C:51:48:FA:7F:E3
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/8orSZOKu4FAf0qzlFXd8UUj6f-M.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f3:a9:fa:90:b6:cd:8f:e6:2d:a7:a5:6c:49:60:af:fb:0a:
72:d0:27:6b:36:1d:72:97:09:9e:11:2f:b6:bf:9d:72:a0:60:
9a:79:2c:9f:fa:ca:d9:d4:80:83:84:6e:a3:84:d8:38:e1:42:
d2:4c:18:ea:45:53:e9:b1:81:f2:eb:b9:87:cd:69:66:b6:aa:
16:2a:70:3c:d8:9c:1c:b0:9d:5f:9d:87:a0:f8:de:81:07:e3:
37:0c:a1:40:2a:2c:75:6f:f3:74:40:24:ba:19:87:4d:ee:cf:
66:33:dc:b7:0b:2f:46:6b:b7:75:b1:46:b4:3b:e8:c1:01:31:
84:12:c8:1f:51:9f:df:b6:8e:fe:d7:91:f7:d0:80:60:43:e2:
e3:2d:33:09:5d:bd:9b:66:51:ef:6c:33:c4:38:9d:8a:be:dd:
a8:cf:86:f0:53:8b:ee:92:24:33:e6:89:f9:31:cd:e8:aa:94:
12:a8:71:fb:f5:aa:fe:a4:59:16:58:9e:fc:f4:63:22:ff:1f:
f8:29:9f:8e:00:f5:9e:f4:a4:3e:59:8d:08:6d:d4:f6:32:da:
ee:1a:cf:15:6b:05:e2:6b:cd:44:0b:b8:e0:a9:00:40:cf:a4:
52:9c:89:ed:3f:66:3e:ae:5f:58:65:c4:26:27:a8:37:99:e7:
6f:fb:b2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 13:54:37 2024 by rpki-client on console-fra.rpki-client.org