Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/91c01dZjL822VK32ZgolsULL0zA.roa
File: 91c01dZjL822VK32ZgolsULL0zA.roa (raw, json)
Hash identifier: /nBBdE6JcCLi8ZyeyfjikXe/wBrUpCarAGasIgVfW+M=
Subject key identifier: F7:57:34:D5:D6:63:2F:CD:B6:54:AD:F6:66:0A:25:B1:42:CB:D3:30
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09B6
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/91c01dZjL822VK32ZgolsULL0zA.roa
Signing time: Mon 11 Nov 2024 07:55:03 +0000
ROA not before: Mon 11 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2486 (0x9b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 11 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F75734D5D6632FCDB654ADF6660A25B142CBD330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:43:cb:fa:71:65:14:41:25:af:0b:5e:42:
14:a4:8b:d5:80:a7:8f:d3:4a:9e:60:64:1b:9b:a4:
7f:91:aa:e6:30:8b:ff:fe:5d:b6:cc:d8:51:7a:71:
8c:60:d6:fd:d9:9f:a4:ed:15:a3:37:bc:eb:31:86:
56:54:fc:c4:7d:9c:df:c9:2f:1a:e7:2d:2d:cd:b9:
cb:1b:f5:6b:60:d0:d6:54:cf:f5:5e:c7:c4:13:0f:
90:d3:83:b1:82:8c:79:ab:cb:97:df:eb:cb:f2:3e:
dd:0c:77:19:42:eb:81:13:3a:de:87:2a:36:ab:70:
ab:13:bf:11:d4:09:d6:1f:09:f1:3f:8d:36:8d:a2:
e5:b0:0d:d8:80:60:b3:13:6b:27:c0:20:c7:20:19:
00:dd:5c:85:fc:a6:67:e3:f3:45:75:91:d8:86:fe:
88:3a:8d:10:f2:17:01:15:af:f2:fc:3c:41:8e:a4:
4a:e5:90:a9:48:77:d3:25:48:5e:ce:86:ee:f9:2e:
8e:44:94:4c:b9:bc:cc:bf:d7:26:5c:e7:55:37:3f:
56:e8:cb:db:8d:a4:14:95:b6:23:ce:70:c2:2b:90:
a8:a7:fa:c1:81:f8:6d:43:2b:cd:95:3c:12:bd:52:
31:f9:1c:dc:62:31:63:f5:75:59:90:21:6b:06:7b:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:57:34:D5:D6:63:2F:CD:B6:54:AD:F6:66:0A:25:B1:42:CB:D3:30
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/91c01dZjL822VK32ZgolsULL0zA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:58:3a:0a:22:35:3b:a7:bf:57:fc:1e:d5:4f:3b:f8:81:6b:
ab:27:a9:1b:fa:87:ce:85:16:68:c4:61:b6:d1:a9:30:c3:ba:
22:54:66:db:bf:f9:9b:c7:25:42:08:cd:65:f5:28:2a:2d:f4:
73:c7:20:84:cf:52:31:93:61:52:94:46:25:74:f6:a3:7e:6d:
1f:ab:b4:8c:53:fc:89:bb:01:a8:86:04:de:82:a4:58:d4:ec:
ad:38:c3:04:66:09:21:6f:6a:f3:37:c6:76:dc:d9:10:0d:57:
f8:b6:db:18:48:28:c4:99:da:0c:7d:df:b2:cc:c6:8d:97:ce:
16:af:af:38:31:92:44:e1:57:99:9e:c8:b5:4f:8f:4e:24:95:
5d:97:d7:e3:09:9a:1c:31:2c:bd:cf:7f:09:a0:69:a5:c2:d7:
06:dd:80:b0:0b:64:9d:31:a7:e2:7c:60:86:d0:68:cf:cc:ae:
cd:46:c9:fa:b5:f3:59:af:fc:29:72:90:38:e1:97:c3:dd:14:
09:99:ad:8c:79:3c:1c:4c:5f:54:74:2e:ae:b6:c2:0d:ee:70:
21:5c:28:77:90:fc:47:40:df:5f:72:e1:ba:20:8b:fe:ed:ed:
d8:5e:68:b1:ac:ec:2c:ef:0a:4e:8a:e9:a5:f8:23:c3:65:cf:
56:37:42:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:09 2024 by rpki-client on console-ams.rpki-client.org