Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/CljcYK_cc4eUzDAVSuy4D4CXKFA.roa
File: CljcYK_cc4eUzDAVSuy4D4CXKFA.roa (raw, json)
Hash identifier: LqX1O+0jOIE69VpysiLgXdHUojUk5ym2FRudcQGQRtQ=
Subject key identifier: 0A:58:DC:60:AF:DC:73:87:94:CC:30:15:4A:EC:B8:0F:80:97:28:50
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 05B3
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/CljcYK_cc4eUzDAVSuy4D4CXKFA.roa
Signing time: Sat 20 Jul 2024 07:55:03 +0000
ROA not before: Sat 20 Jul 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jul 2024 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1459 (0x5b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jul 20 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0A58DC60AFDC738794CC30154AECB80F80972850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:03:81:98:f5:c9:19:24:b2:f6:a1:f8:ed:b2:
7c:54:f7:66:ab:f8:7c:65:c6:fe:22:99:6f:29:b2:
48:f6:3d:86:ce:05:57:a7:4d:9a:d4:85:4e:cf:52:
17:e5:0d:5c:a9:2a:c2:cc:95:14:ad:26:3b:c8:c3:
0e:a7:c0:5d:d8:59:45:79:39:a9:cc:e8:e3:3f:3f:
0b:ff:cf:4a:50:a6:c6:0e:39:5c:ad:6a:45:e0:83:
6b:5a:ff:81:67:8a:99:6e:4e:b9:80:b3:dc:5f:42:
d7:81:0b:88:16:98:05:82:c0:57:a7:df:8a:bb:8b:
a6:51:22:bf:76:47:8a:6e:e5:d4:2f:df:9a:ff:97:
06:6b:33:f4:c7:8d:d4:9c:7e:79:0d:49:66:ed:b3:
7a:0a:74:25:31:97:42:bf:43:07:31:e8:1d:d6:5f:
c2:5e:4a:36:2b:50:7d:49:e9:ac:98:4c:96:b0:1a:
02:dd:31:75:25:31:4f:cf:5d:0b:99:65:1c:fe:78:
23:fa:5e:ff:9c:87:59:18:9d:fe:4d:09:95:24:35:
06:7e:a9:27:70:d0:dd:27:39:e4:e9:46:05:0d:bd:
4e:91:e9:6e:ad:28:a3:8e:ee:4c:a8:d0:76:96:be:
a2:f9:f9:91:c4:8e:23:17:5c:b8:70:39:5f:24:57:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:58:DC:60:AF:DC:73:87:94:CC:30:15:4A:EC:B8:0F:80:97:28:50
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/CljcYK_cc4eUzDAVSuy4D4CXKFA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:26:47:aa:1b:df:4f:70:0a:86:f4:8e:e6:f9:af:ef:d7:e5:
70:2d:b8:8e:66:14:dd:4d:2d:e2:0c:49:1d:c9:e0:56:62:eb:
47:cf:9e:5d:69:48:ac:bc:82:f2:30:27:75:e9:47:05:86:9f:
1b:0f:51:e0:23:e7:3e:dc:13:ca:70:16:cf:4d:97:dc:bc:d8:
a8:06:d3:6a:df:7f:4a:37:2b:95:08:f9:f3:c9:02:bf:70:f2:
92:c9:66:15:57:32:db:13:e5:c2:52:fc:3b:9b:84:cd:33:70:
88:15:78:74:64:aa:07:9c:30:a5:4a:6f:b4:ad:37:26:a2:67:
de:52:4f:c9:ad:e8:2a:7b:f9:9e:fa:af:92:6b:bc:83:44:b7:
cd:6c:ce:60:96:68:bf:96:ea:e8:86:a7:2b:d6:be:1c:31:aa:
98:55:62:cb:e9:8e:6f:e4:a6:3e:68:7c:50:83:51:9b:41:7a:
10:fd:f3:c7:f5:86:aa:82:8b:c8:fe:bd:48:05:ab:d3:79:2c:
ee:d3:60:0f:12:e9:8a:73:a4:ee:05:68:43:32:f7:c3:c4:a1:
e6:20:36:ba:ba:09:0c:fd:bf:02:44:e7:64:c9:56:37:98:ac:
95:23:87:65:70:f1:e9:2f:12:b0:67:77:97:ee:ca:7c:5e:61:
14:44:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 20 13:46:21 2024 by rpki-client on console-fra.rpki-client.org