Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/9hqkid81IZMhV6E1blYDbwzK4tc.roa
File: 9hqkid81IZMhV6E1blYDbwzK4tc.roa (raw, json)
Hash identifier: ni4HGK+zBwyD6ucTPQ9MT5jOlrVyTQDMWrwaPb86z88=
Subject key identifier: F6:1A:A4:89:DF:35:21:93:21:57:A1:35:6E:56:03:6F:0C:CA:E2:D7
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 09F5
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/9hqkid81IZMhV6E1blYDbwzK4tc.roa
Signing time: Mon 18 Nov 2024 07:55:04 +0000
ROA not before: Mon 18 Nov 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2549 (0x9f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 18 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F61AA489DF3521932157A1356E56036F0CCAE2D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:9b:c4:d7:ed:39:34:54:f6:bb:3b:fb:77:
00:09:8e:d1:46:2b:a7:76:41:bc:d4:02:86:37:73:
da:70:73:94:ab:b5:5a:e7:48:e5:6a:36:89:d0:27:
bf:65:0c:20:33:fd:62:7f:7e:97:f7:22:f2:ae:09:
ac:d2:f1:9a:e2:40:cb:7a:b8:f3:2e:f5:53:08:f7:
79:51:3a:7c:c5:d3:82:43:e0:55:f2:a2:c0:f1:24:
6f:a9:2c:5b:03:18:20:0c:6c:6d:38:d4:99:38:66:
4b:b8:01:85:de:da:00:58:f7:2d:ee:c1:38:42:53:
6c:69:f6:bb:99:57:eb:15:8a:1d:4b:a7:31:ad:76:
70:df:c2:d1:c1:99:dd:6d:5f:14:74:b3:c2:9d:a1:
e1:1f:d6:23:9b:77:57:f9:15:1e:5d:ee:1d:ed:b9:
7a:b0:c2:f2:40:19:54:12:70:9a:14:aa:97:8a:54:
db:a2:d6:73:c1:94:1d:11:02:23:af:d7:68:09:da:
9d:f0:05:3d:01:fd:c0:3f:6c:1a:1a:a0:f1:67:c7:
ee:3c:e0:22:7c:37:cb:6c:98:8b:1e:94:e4:de:9a:
5d:5a:a2:1c:51:79:14:c4:05:3a:60:0a:be:17:f9:
36:7e:81:7f:68:33:29:26:b1:c6:e6:7b:cc:b3:f4:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1A:A4:89:DF:35:21:93:21:57:A1:35:6E:56:03:6F:0C:CA:E2:D7
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/9hqkid81IZMhV6E1blYDbwzK4tc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c1:fa:96:4b:38:d0:e5:5c:28:0b:dd:46:6e:62:06:ef:30:
9d:ad:89:50:cd:c6:ef:08:f7:ba:b6:49:fd:87:91:ed:8c:c5:
2c:95:ba:4c:22:69:6e:94:98:fb:40:da:53:27:77:aa:57:e9:
ff:6c:e1:82:2d:04:63:f7:86:97:a9:85:b4:9a:f0:76:1f:ad:
f5:39:95:d4:7a:a5:17:d4:ce:16:76:f2:c3:e8:51:31:91:13:
0b:00:aa:ef:b7:72:23:fb:e5:b8:d2:d3:17:36:31:6e:ae:89:
ea:83:6f:94:80:41:36:44:da:8f:bb:76:05:83:29:6d:96:f5:
fe:58:53:be:b4:63:a4:7c:c9:24:dd:48:57:09:b3:5f:75:b4:
9a:90:2c:b2:21:47:57:b4:2b:e7:7f:91:cb:c7:80:0f:9c:10:
e3:80:d5:91:93:37:d9:6d:d9:44:50:85:02:c8:6d:29:7a:72:
c2:18:e9:11:04:47:90:83:75:21:85:4d:74:c0:53:4a:0c:c7:
06:c6:d8:e0:23:34:f0:36:48:42:e0:fa:8c:7b:6d:18:6f:67:
48:e0:0b:36:3c:7f:98:29:c2:d2:7e:39:c2:1c:92:ed:eb:c8:
ee:b8:0d:7f:2e:51:50:26:66:68:e0:f4:78:24:d7:f6:2b:f3:
88:c5:5e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org