Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/CRbc_Tg7sNAp0z66rWyjbuRzy_M.roa
File: CRbc_Tg7sNAp0z66rWyjbuRzy_M.roa (raw, json)
Hash identifier: NuyIeTkrwtfaE+hiPfN4y8aqu15B0Zvx6I53anSgVK0=
Subject key identifier: 09:16:DC:FD:38:3B:B0:D0:29:D3:3E:BA:AD:6C:A3:6E:E4:73:CB:F3
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0568
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/CRbc_Tg7sNAp0z66rWyjbuRzy_M.roa
Signing time: Thu 11 Jul 2024 23:55:03 +0000
ROA not before: Thu 11 Jul 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1384 (0x568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 11 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0916DCFD383BB0D029D33EBAAD6CA36EE473CBF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e6:bf:31:8d:94:89:7a:13:79:98:15:88:36:
69:87:00:09:7e:64:8e:9c:f3:65:d6:68:ba:ed:dd:
f7:45:0c:e0:c6:a5:bf:e1:3e:8e:d9:cb:73:5f:84:
b1:be:fb:f8:75:8e:85:64:e1:36:f2:10:36:99:db:
ce:6a:38:99:be:07:95:37:a0:21:b1:62:e0:5b:af:
2f:9c:ec:45:c0:8d:c8:ac:c2:aa:04:97:70:d8:f0:
92:34:c9:50:9d:57:f4:a8:dc:c5:b8:9f:9e:7a:fe:
6f:fc:f2:a9:b4:cc:93:2c:a7:12:72:3b:67:e1:5a:
c3:fe:bc:a7:08:2d:b3:86:05:ac:c8:5f:2c:63:96:
f6:88:f5:04:ee:3a:a4:e2:eb:a0:8d:d5:1c:91:75:
b6:86:08:1e:14:c4:7d:c3:f8:1b:58:14:46:9b:db:
1f:5f:c7:2f:26:cd:b1:14:b5:fa:38:cc:55:82:e8:
9f:b7:32:a1:37:dc:59:e4:0a:4f:fb:d4:f7:9c:50:
06:1d:ae:a9:06:25:7c:6d:ae:d9:f5:e1:03:e1:79:
06:77:f4:b2:83:7e:dd:5d:20:2e:c7:3d:cc:6d:33:
a2:8d:66:42:bc:11:7e:68:49:c5:75:ea:2a:54:64:
2b:96:b5:3b:d0:59:6a:aa:3b:8c:56:81:7e:7c:b0:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:16:DC:FD:38:3B:B0:D0:29:D3:3E:BA:AD:6C:A3:6E:E4:73:CB:F3
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/CRbc_Tg7sNAp0z66rWyjbuRzy_M.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ab:36:9a:0e:58:e1:ee:c1:ae:c2:eb:42:90:17:3d:d4:09:
0f:17:68:37:ca:5d:b3:44:e5:60:81:04:f0:4c:ea:b4:49:68:
be:13:dd:6b:ca:1c:a3:50:76:ee:ef:aa:db:67:ef:b2:0a:f2:
f0:58:e1:3b:0c:a6:48:b9:db:94:4a:ca:63:1c:10:5f:d5:54:
89:92:98:d1:df:13:cd:ec:a1:a0:8d:a7:86:2f:57:3c:73:e3:
90:c5:b8:44:1e:66:94:dd:63:f6:ee:73:02:d1:a4:ee:44:b2:
a4:ad:da:3a:29:6a:a2:a1:a4:87:7f:f8:1c:74:c8:0b:29:50:
eb:df:fd:ee:79:54:82:90:45:37:d9:f1:d2:cc:64:a7:c7:95:
54:97:cd:e1:f7:7d:dc:86:6c:64:b4:33:08:cd:18:a7:d2:d4:
b3:0d:c9:f1:d4:b3:74:c3:ac:b4:96:19:18:f3:1b:19:4f:08:
9a:81:58:15:80:93:90:5f:8d:07:14:cc:13:2f:e7:64:39:5a:
2f:48:a9:dd:6b:d4:c6:9d:5b:8d:00:00:fc:cd:ba:f9:c3:ec:
6f:5c:18:79:ba:72:e8:34:db:08:3a:05:ef:97:41:83:81:0a:
22:93:ed:ec:e7:00:3c:4c:6d:3a:81:bb:65:26:e2:8d:c4:d6:
7d:64:4d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 05:10:25 2024 by rpki-client on console-fra.rpki-client.org