Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/C-sVOWfAxzAlyUPyXFiEp4XTKqc.roa
File: C-sVOWfAxzAlyUPyXFiEp4XTKqc.roa (raw, json)
Hash identifier: z1ZWHVdFn2lfcHpujupCN90TzU+QGego8h+bJMKr/9g=
Subject key identifier: 0B:EB:15:39:67:C0:C7:30:25:C9:43:F2:5C:58:84:A7:85:D3:2A:A7
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0238
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/C-sVOWfAxzAlyUPyXFiEp4XTKqc.roa
Signing time: Fri 12 Apr 2024 07:55:04 +0000
ROA not before: Fri 12 Apr 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 12 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0BEB153967C0C73025C943F25C5884A785D32AA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:a0:ef:98:a9:a4:a6:30:5c:f1:ee:12:e8:
35:c6:08:1f:1d:5f:dd:c3:34:74:86:e8:aa:97:5a:
a7:de:70:7f:3d:d0:a4:8c:f4:f8:76:c5:11:7b:db:
6a:0f:8e:c6:52:b5:f8:12:4a:c8:12:ff:eb:45:e2:
70:ee:7d:3d:c0:9f:f4:49:a5:c6:87:8b:b6:31:a0:
cc:7f:69:25:1e:6d:15:fc:81:3e:ac:66:ce:8e:28:
96:19:c9:a1:dc:49:69:2a:88:2d:f5:cf:c8:1f:2e:
a1:c7:06:4a:db:7e:4e:91:c6:a1:24:4f:f8:1f:e9:
56:ea:1c:04:61:e8:e0:14:b3:a8:b9:25:7a:59:29:
24:a1:09:50:cc:fb:a6:63:c6:8e:31:fe:fa:45:83:
4e:d9:50:a1:04:f4:dc:9e:89:a7:03:77:07:c3:0d:
00:7c:a7:20:26:35:a8:de:f6:1f:2e:29:2c:ef:3d:
f0:b6:08:1c:a7:1d:47:96:0c:35:c4:ce:3f:83:73:
18:02:cd:3b:f5:67:68:44:dd:c0:01:fd:39:0d:3c:
ad:5b:c8:10:a1:b6:1c:3a:16:b0:36:40:f4:b0:5f:
cc:54:22:a9:7f:88:ec:6e:a4:cd:36:8c:6d:f4:6d:
b3:9c:a9:aa:d8:ab:dc:dd:26:ac:9b:4c:80:c3:00:
1a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EB:15:39:67:C0:C7:30:25:C9:43:F2:5C:58:84:A7:85:D3:2A:A7
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/C-sVOWfAxzAlyUPyXFiEp4XTKqc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
17:a5:07:4c:a2:49:d9:e9:70:c9:32:d0:8b:bc:19:b0:da:a6:
f0:bd:6b:22:b1:5d:b9:c4:37:4a:d4:a0:b6:c8:ed:c7:ce:36:
b3:c8:0b:fb:d5:9c:69:4e:5d:47:e0:22:b6:46:d1:3c:b1:9c:
09:6e:2c:6f:a9:a5:7f:1e:0d:c1:f6:2d:73:5e:23:fa:6c:c9:
36:2b:15:ed:24:89:8d:50:23:30:ef:4c:73:e4:fa:52:15:ef:
2a:00:f2:e9:d8:70:9a:a3:06:95:1d:f5:bc:18:99:5f:04:26:
f3:eb:50:e4:7e:32:cf:aa:b3:a9:5a:6a:50:11:73:ca:3a:2d:
12:95:6d:4f:21:a4:81:66:ca:4a:b8:00:b5:24:e0:f9:c2:7f:
17:b5:11:e2:0e:7f:1b:16:74:82:f0:0a:a0:5e:c9:4e:a6:9e:
b5:0a:db:a3:12:a4:49:77:26:76:ab:37:7e:e1:7b:cd:68:da:
ef:e0:41:31:5b:82:eb:db:91:bf:a1:bb:48:d3:c2:71:93:28:
75:d8:fa:8c:f0:d2:5e:0d:a7:85:7e:7a:ed:2d:39:68:b8:2a:
42:eb:4c:2b:48:ee:33:e5:35:85:94:50:62:a4:92:5f:64:ec:
10:6b:a6:0e:4c:56:c4:7d:fd:a9:ab:a4:88:92:a0:73:bf:5b:
a6:b7:a3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org